How to Connect WordPress to Cloudflare, Install, Setup & Use Easily 2026

Log into Cloudflare and you land on Account home, which lists every domain already connected along with quick stats — security insights, cache rate, and web traffic for the last 24 hours. If this is your first site, that Domains panel will be empty, which is your cue to add one. This dashboard is also where you'll come back to later for DNS and caching settings once WordPress is talking to Cloudflare, so it's worth getting familiar with the sidebar layout now.

From Domains in the sidebar, choose to connect a domain rather than transfer or buy one — you're keeping your existing registrar, just routing DNS through Cloudflare. Type in your WordPress site's domain and Cloudflare scans your current DNS records automatically, then offers a free plan to start on. Review the imported records before continuing; a missed record here is the most common reason a site breaks briefly during migration.

Cloudflare gives you two new nameservers to replace whatever your registrar currently has on file. Log into wherever you registered the domain — that's often a different company than your WordPress host — and paste the new nameservers into its DNS or nameserver settings. This is the step that actually reroutes traffic through Cloudflare, and it can take anywhere from a few minutes to 24 hours to fully propagate, so don't be alarmed if the change isn't instant.

Back in Cloudflare, open your account profile and create an API Token rather than using your global API key — scoping it to just what the WordPress plugin needs (zone read and cache purge permissions, typically) limits the damage if the token ever leaks. Copy the token immediately after generating it, since Cloudflare only shows the full value once.

Log into your WordPress admin — note this is the same dashboard whether you access it directly or through your hosting provider's own onboarding panel, as many hosts like Hostinger wrap it in their own interface. From Plugins, search for the official Cloudflare plugin, install it, and activate it. If your host's onboarding flow is still asking you to pick a theme or finish site setup, you can safely skip past those prompts to get to the Plugins menu.

Open the Cloudflare plugin's settings page inside WordPress and paste in the API token you generated. Once it authenticates, the plugin exposes an "Apply Recommended Settings" button — click it to enforce strict SSL and pick up Cloudflare's suggested performance defaults in one pass instead of configuring each setting manually. Finish by toggling on the plugin's automatic cache-purge option, so publishing or editing a post clears the cached version at the edge instead of leaving visitors looking at stale content.