The most-seen UI on the Internet? Redesigning Turnstile and Challenge Pages

This post details the redesign of Cloudflare's Turnstile widget and Challenge Pages, which are served billions of times daily. The redesign was driven by a need to improve user experience amidst increasing bot traffic and security checks. Key contributions include: a comprehensive design audit revealing inconsistencies in error messages, visual language, and tone of voice; mapping the complete user journey to understand happy and unhappy paths; establishing a unified information architecture with consistent structure and visual hierarchy across both Turnstile and Challenge Pages; and user research that validated certain existing approaches while identifying critical areas for improvement, such as replacing 'Send Feedback' with 'Troubleshoot' to offer actionable help during error states.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack