Introducing Ephemeral IDs: a new tool for fraud detection

Introduced Ephemeral IDs, a new feature for Turnstile that generates short-lived, client-specific identifiers. These IDs are calculated based on aggregated client-side signals analyzed by Turnstile, without using cookies or other client-side storage. Ephemeral IDs are intentionally not 100% unique and have a brief lifespan, making them effective for identifying fraud and abuse patterns without compromising user privacy. They are distinct for each Cloudflare customer and change frequently, preventing long-term visitor tracking. The feature integrates seamlessly into Turnstile's existing bot detection logic and is available via the siteverify response for custom integrations, particularly for preventing fraudulent account signups through aggregate analysis.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack