How to fix the Turnstile error on GrandpaCAD

If you landed here, you probably saw this when trying to sign in or sign up:

Turnstile is the Cloudflare widget that proves you're a human, not a bot, before we let you create an account. It's the small box that normally just shows a checkmark and disappears. When it doesn't, it's almost never about you, and it's almost never about us. It's about your browser, your clock, or your network.

I'll walk you through the fixes in the order I'd actually try them. Most people get sorted by step 3.

1. Refresh the page first

Sounds dumb, works embarrassingly often. The Turnstile challenge is time-sensitive. If you opened the sign-up tab and got distracted for a few minutes, the challenge expires and the widget fails to reload itself.

A normal browser refresh is enough most of the time. If that doesn't work, do a hard reload (Cmd+Shift+R on Mac, Ctrl+Shift+R on Windows). That bypasses any cached version of the challenge that might be stuck.

If the error comes back instantly without you even seeing the widget, the refresh isn't going to help. Move on.

2. Check that your computer's clock is right

This is the single most common real fix, and the most surprising. The Turnstile challenge is signed with a timestamp, and Cloudflare rejects it if your computer's clock is off by more than about 30 seconds. If you've ever swapped a battery, dual-booted, traveled across time zones, or just have automatic time disabled for some reason, this is probably you.

The fix is to turn on automatic time sync:

• On macOS, open System Settings, go to General, then Date & Time, and make sure "Set time and time zone automatically" is on.
• On Windows, open Settings, then Time & language, then Date & time, and turn on "Set time automatically" plus "Set time zone automatically".
• On Linux, the right command depends on your distro, but timedatectl set-ntp true covers most setups.

Reload the page after fixing the clock. If the error is gone, that was it.

3. Try incognito mode, then a different browser

The next most common cause is something inside your browser, either an extension or a bad cache entry. Incognito mode rules both out at once because it disables most extensions and ignores your existing cache.

Open a new private/incognito window, go back to GrandpaCAD, and try signing in there.

• If incognito works, the problem is in your normal browser. Either an extension is interfering (next step), or you have a stale cookie. Clearing cookies for grandpacad.com and challenges.cloudflare.com will fix the cookie case.
• If incognito still fails, try a completely different browser. Chrome, Firefox, Safari, Brave, anything you have installed. If a different browser works, the original browser is the problem and you can either keep using the new one or dig into its extensions.
• If every browser fails, it's not a browser thing. Skip ahead to the network steps.

4. Pause your ad blocker and privacy extensions

Ad blockers and privacy tools love to block Cloudflare domains because Cloudflare is also an analytics provider. The widget loads from challenges.cloudflare.com, and if your blocker thinks that's a tracker, the iframe never loads and you get the error.

The usual suspects:

• uBlock Origin
• Privacy Badger
• Ghostery
• AdGuard
• DuckDuckGo Privacy Essentials
• Brave Shields (built into Brave)

You don't need to uninstall anything. Click the extension icon while you're on the GrandpaCAD page and pause it for this site, or add grandpacad.com to its allowlist. Reload the page. If the widget appears now, you've found the culprit. You can re-enable the extension globally afterward, the allowlist entry will stick.

5. Turn off your VPN or proxy

Cloudflare runs Turnstile partly on IP reputation. Shared VPN exit nodes, public proxies, and Tor exit relays all carry a long history of bot traffic, even if you personally are doing nothing wrong. Turnstile sees the IP, decides "this could be a bot", and fails the challenge silently. Same goes for residential proxies and some corporate "secure browsing" appliances.

Try disconnecting from your VPN for the sign-up step and see if the widget loads. You can turn it back on right after. If you can't disconnect (a managed device, for example), try the next step.

6. Check what your network is blocking

If you're on a school, office, hotel, or hospital network, there's a real chance the network is silently blocking challenges.cloudflare.com. Some pi-hole and corporate DNS setups also block it because it's bundled with Cloudflare's analytics domains.

The fastest way to test this is to switch networks for sixty seconds. Tether your laptop to your phone's mobile hotspot, reload the page, and try again. If Turnstile loads on cellular but not on WiFi, your network is the problem and you'll need to either ask the network admin to allow Cloudflare's challenge domain, or just sign up from a different network.

This is also the case where you might want to email us, because there's nothing you can fix from your end if the network is locked down.

Still stuck?

If you've tried all six steps and it's still broken, I want to hear about it. Send us a note via the contact page with:

• Which browser and version you're using
• Your operating system
• Whether you're on WiFi, cellular, or a corporate network
• A screenshot of the error if you can grab one

I read every one of these. Turnstile failures are sometimes a sign of a bigger Cloudflare incident on the GrandpaCAD side, and the only way I find out is when someone tells me.

In the meantime, if you got this far because you were trying to sign up, you can also try a different browser as a one-time workaround and we'll sort the rest out from your account.