Brave does not work with CloudFlare

Description of the issue:

Cant get past any type of login or verification that includes CloudFlare.

How can this issue be reproduced?

  1. Access any website that requires a capcha by CloudFlare

Expected result:

Stuck at loading and never gets verified.

Brave Version( check About Brave):

Version 1.78.102 Chromium: 136.0.7103.113 (Official Build) (64-bit)
(https://brave.com/latest/)

Additional Information:

Not an issue on my android phone using brave.

@Lunarly

When you encounter the Cloudflare Bot Cops - use the Site-Specific Brave Shields setting to set Trackers & Ads to Standard (when using BB for iOS) or Block trackers & ads for other platforms - in other words, NOT leaving the Site-Specific Brave Shields setting at Aggressive:

That step may allow the notorious Cloudflare Bot Cop (such as the Cloudflare usage of hCAPTCHA or Cloudflare Turnstile routines) to back off.

Tips regarding Brave Shields:

I have more success, with:

  • Brave Shields UP
  • Either Allow All Cookies or Block 3rd Party Cookies, but NOT Blocking All Cookies
  • Allowing JavaScripts from specific sources, but NOT Allowing All JavaScripts
  • Trackers & Ads treatment: Aggressive (at first), and then incrementally relaxing that setting
  • Fingerprinting (aka footprinting) blocking: Strict (at first), and then incrementally relaxing that setting

I almost NEVER use:

  • All of Brave Shields UP
  • All of Brave Shields DOWN

Shields Basics

How do I configure global and site-specific Shields settings?

How do I use Shields while browsing?


Of course, be sure that the sources of cookies and JavaScripts are not blocked.

Possibly: Internet Security or Anti-Virus at play?

Maybe: An extension ← or combination of extensions, or the order in which the extensions were installed.


Excerpt from the Cloudflare link:

How does Turnstile work?

Turnstile relies primarily on “direct” bot detections, running JavaScript on the page in an attempt to detect common automation frameworks, along with some network-level traffic pattern analysis.

On compatible hardware, primarily recent iPhones, Turnstile (like hCaptcha) will also attempt “hardware attestation” to validate that a real iPhone made the request. This requires the user’s device to contact Apple’s servers for a token, which is then sent to Turnstile.

When a bot is detected, Turnstile uses “proof of work” to instruct the browser to waste computer resources, for example by executing useless code on the CPU or filling up memory in an attempt to reduce the number of requests emitted per second by each physical machine running a bot.

NOTE that last paragraph.

Mate Translate extension also causes Cloudflare captcha issue. Disable it if you have the extension.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.