What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
If Cloudflare verification is blank, keeps repeating, or ends with an error, start with the least disruptive checks: reload once, allow JavaScript and cookies, pause privacy extensions and any VPN or proxy, then try a private window or another network. If it still fails in a current full browser on more than one network, the website may need to fix its Cloudflare settings or verification code.
“Cloudflare CAPTCHA” can mean an embedded Turnstile widget, a page-level Cloudflare Challenge, or a background browser check; not all of these show a puzzle or checkbox. Cloudflare describes how its challenges work in its challenge overview.
Try these fixes first
- Reload the page once and give the widget time to finish loading.
- Temporarily turn off your VPN or proxy, then close and reopen the browser before retrying.
- Pause ad blockers, script blockers, anti-tracking tools, and other privacy extensions for the affected site.
- Check that JavaScript and cookies are allowed for the site.
- Open the page in a private or incognito window as a diagnostic test.
- Try another up-to-date mainstream browser.
- Switch from Wi-Fi to a mobile hotspot or another trusted network.
- If it still fails, record the error and Ray ID and contact the website operator rather than retrying indefinitely.
Cloudflare recommends several of these checks, including enabling JavaScript, testing without extensions, changing browsers or networks, and avoiding VPNs and proxies. Its challenge troubleshooting guide describes common causes of loops and failed challenges.
Identify what is failing
The visible symptom can help separate a local browser or network problem from a site-side issue. The same site may also behave differently across browsers or networks.
#1 Best Overall
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
| Symptom | Likely causes | Best next test |
|---|---|---|
| Widget is blank or spins without finishing | JavaScript or an extension is blocking scripts; the Cloudflare iframe is blocked; or the network is filtering requests. | Try a private window. If you manage the site, inspect the browser console and network requests. |
| “Verify you are human” repeats or the page refreshes back to the challenge | Cookies or storage are blocked or deleted, the apparent IP changes mid-challenge, or browser and network signals are interfering. | Keep one network connection stable, allow site storage, and test without a VPN or proxy. |
| “Challenge failed,” “Please try again,” or an error code appears | A timeout, blocked challenge resource, browser issue, or site configuration problem. | Note the full code and Ray ID; check the code guide below. |
| Works in a private window but not the normal browser | An extension or stale site data is a likely factor, though private browsing may have different cookie and privacy settings. | Disable extensions methodically in the normal profile. |
| Works on mobile data but not Wi-Fi | Wi-Fi filtering, DNS or firewall rules, an ISP path problem, or the public IP’s reputation may be involved. | Compare networks and ask the network administrator if it is managed Wi-Fi. |
| Widget reports success, but the form or site still denies access | The site may reject the token during server-side validation, or its application workflow may have failed. | Contact the site operator; a visitor cannot fix server-side validation. |
| Fails across browsers, devices, and networks for the same site | A site-specific rule, configuration error, or service-side problem becomes more likely. | Send the operator the error details and Ray ID. |
Fix browser settings and stored site data
Allow JavaScript and challenge resources
Turnstile and Cloudflare browser challenges need JavaScript. A script blocker, restrictive browser setting, DNS filter, enterprise security product, or firewall may prevent required resources from loading. Temporarily allow scripts for the affected site and the genuine Cloudflare challenge resources it requests, then reload. If the widget renders or the challenge proceeds, the blocking setting was likely involved. Do not permanently weaken security settings across every site.
Test extensions one at a time
First try a private window. If verification works there, return to your regular profile and disable extensions, beginning with ad blockers, anti-tracking and script-blocking tools, fingerprinting or canvas protection, header modifiers, and cookie auto-deleters. Reload after each change; when the problem returns, you have identified a likely conflict. Re-enable unrelated extensions. Private browsing is only a diagnostic test: it is not guaranteed to work, and some browsers retain strict privacy controls in private mode.
Allow cookies, then clear only the affected site’s data
Some challenge flows rely on browser storage or a clearance cookie. If cookies are blocked or automatically deleted, verification may not persist. Requirements vary by challenge and site implementation, so this does not mean every visitor must enable every third-party cookie. If a site embeds Turnstile in a restrictive context, temporarily allowing the relevant cross-site functionality may help diagnose it.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #2
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
- In your browser’s site settings, allow cookies and storage for the affected website.
- If the loop continues, remove that site’s cookies and cached data, including local storage if the browser offers that option.
- Close all tabs for the site, reopen it, and attempt verification once.
Clearing site data may sign you out and remove preferences. Start with the affected domain rather than wiping all browser data. Cloudflare documents a persistent cf_clearance cookie for pre-clearance flows; a challenge can also loop if it is issued from one IP address and completed from another. See its clearance documentation.
Keep your connection stable
Test without a VPN or proxy
VPNs, proxies, traffic inspection, rotating IP addresses, and shared exit addresses may interfere with verification or make the signals inconsistent. Turn the VPN or proxy off, close and reopen the browser, and retry. If that works, it is a useful diagnostic result, not a guarantee that changing VPN servers will fix the problem. If you need a VPN, a stable endpoint may be worth testing, but the website can still challenge or reject it. On a work or school network, ask IT about filtering rather than bypassing managed security controls.
Avoid switching between Wi-Fi, cellular data, and VPN endpoints during the same verification attempt. Cloudflare explains that a challenge issued on one IP and solved from another can cause problems in its challenge documentation.
Rank #3
- NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
- WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
- SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
- READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
- COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.
Compare networks safely
Try a mobile hotspot or another trusted connection; do not use unknown public Wi-Fi for sensitive account activity.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors- If mobile data works but home Wi-Fi does not, investigate router filtering, DNS blocking, firewall rules, the ISP route, or the home IP’s reputation.
- If another device works on the same Wi-Fi, focus on the failing device’s browser, extensions, security software, or clock.
- If one site fails everywhere while other sites work, the site’s own Cloudflare rule or implementation is more suspect than a general connection problem.
Use a current full browser and check the device clock
Open the page in a current release of Chrome, Edge, Firefox, Safari, or another mainstream browser. Email and social apps may open links in limited in-app browsers or embedded webviews; choose the app’s “Open in browser” option instead. Internet Explorer is not supported by Turnstile, and command-line clients, headless browsers, automation frameworks, modified browser engines, and some webviews may not work as ordinary visitor environments. Cloudflare’s supported-browser guidance covers these limitations; browser support and privacy behavior can change.
Also set the device date and time automatically, check the time zone, restart the browser, and retry. A substantially wrong clock can contribute to timeouts or clock/cache errors, but a small difference does not necessarily explain a failure.
Rank #4
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
- 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
- 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
- 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.
Understand the error code
If a code appears on the page or in the widget, it can indicate whether the next step belongs to you or the website operator. Cloudflare documents these codes in its Turnstile error-code reference.
| Code | What it indicates | Next step |
|---|---|---|
110100 / 400020 |
Invalid site key | The site owner should check the configured key. |
110110 |
Site key not found | The owner should verify the key and its dashboard status. |
110200 |
Current hostname is not authorized | The owner must authorize the hostname. |
110600 |
Challenge timed out | Check the device clock and connection, then retry; persistent failure may need site investigation. |
110620 |
Interaction timed out | Retry; the site may need to reset the widget after a timeout. |
200100 |
Clock or cache problem | Correct the device clock and retry after clearing stale site data; the owner may need to check intermediary caching. |
200500 |
Turnstile iframe load error | Check whether the network or browser is blocking the authentic challenges.cloudflare.com request; the owner should inspect security policies and network failures. |
300* / 600* |
Generic challenge failure; digits within these families can vary | Retry after checking browser and network interference; escalate if it persists. |
Browser-console 401 during a Private Access Token request |
May be expected if Turnstile still resolves and returns a token | Do not assume this console message is the cause when verification succeeds. |
When the website owner needs to act
Visitors cannot correct a disabled or invalid site key, an unauthorized hostname, a broken application workflow, or a Cloudflare rule applied by the site. If basic browser and network tests do not resolve the issue, send the operator diagnostic details instead of continuing to retry. Cloudflare’s challenge guidance directs users who remain stuck to the website administrator with the error code and Ray ID, or to Turnstile feedback where available.
What site owners should verify
- Confirm the site key is spelled correctly, active, and authorized for the current hostname; keep production and staging keys straight.
- Ensure the page loads the current official Turnstile script and is not serving stale HTML or altered widget configuration from a cache.
- For a blank widget or
200500, inspect console and network errors for blocked requests,403responses,ERR_BLOCKED_BY_CLIENT, timeouts, certificate errors, and Content Security Policy violations. Check whether the widget iframe is removed or sandboxed. - Identify the specific failed Cloudflare resource before changing an allowlist; do not broadly whitelist unverified domains.
- Check reverse proxies and intermediary caches for stale challenge responses, rewritten headers, token/hostname mismatches, or changes to the visitor’s apparent IP during the challenge.
Handle callbacks and widget recovery
Turnstile supports an error-callback for explicit rendering and data-error-callback for implicit rendering. Use the returned code to present a useful recovery message or route persistent configuration errors to support. Cloudflare’s client-side troubleshooting documentation describes error callbacks. A timeout such as 110620 may require the integration to reset the widget; the exact reset behavior depends on how it is rendered.
Best Value
- Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
- Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
- Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
- MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
function handleTurnstileError(errorCode) {
console.error("Turnstile error:", errorCode);
if (String(errorCode).startsWith("110")) {
showMessage("The site verification may be misconfigured. Contact the site owner.");
} else {
showMessage("Verification failed. Please reload and try again.");
}
}This illustrates error handling only; it is not a complete Turnstile integration.
Verify every token on the server
A successful-looking widget is not proof that the submitted action should be accepted. The browser must send its token to the application server, which must validate it through Cloudflare’s Siteverify API and check the response before accepting the form or action. Handle expired, duplicated, invalid, or mismatched tokens, log useful errors without exposing the secret key, and give users a recoverable message instead of silently failing. See Cloudflare’s explanations of how Turnstile works and server-side validation.
Test the full flow on real, current devices and browsers. Device emulation, developer tools, headless sessions, and automation frameworks may trigger bot detection or fail to represent a visitor’s experience.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchContact the website with useful details
Send one report with enough information for the operator to correlate the failure. Redact personal information from screenshots. Include the URL of the affected page, the exact message and code, Ray ID, browser and version, device and operating system, whether a VPN or proxy was on, the network/browser comparison, and approximate time with time zone.
Cloudflare verification fails on: [URL]
Error message/code: [message or code]
Ray ID: [ID]
Date/time and time zone: [time]
Browser/version: [browser]
Device/OS: [device]
VPN/proxy: [yes/no]
Result on another browser or network: [result]A Ray ID helps the website operator locate details about a particular request. Cloudflare generally cannot grant access to a third-party site; its operator controls the site’s security rules and must investigate site-specific failures.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
