From a6fbb5177a5b840ad88ddc47c8167199baee6b6b Mon Sep 17 00:00:00 2001
From: zeinjaber <69680657+zeinjaber@users.noreply.github.com>
Date: Fri, 10 Apr 2026 23:30:19 +0400
Subject: [PATCH 1/2] fix: clarify Turnstile hostname management subdomain
 behavior

Rewrite the Subdomain behavior section to explicitly document that:
- Adding a root domain (e.g. example.com) automatically covers all subdomains
- Adding a specific subdomain restricts the widget to that subdomain and its children only
- Wildcard characters are not supported in the input field, but subdomain inheritance is automatic

Also adds a root domain example alongside the existing subdomain example, and a note
about using specific subdomains for narrower scope.

Addresses confusion reported by support agents (SPM-3371).
---
 .../hostname-management/index.mdx             | 27 ++++++++++++++-----
 1 file changed, 21 insertions(+), 6 deletions(-)

diff --git a/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx b/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
index 2e33db8efc2..7578c911624 100644
--- a/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
+++ b/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
@@ -25,7 +25,7 @@ By default, every widget requires at least one hostname to be configured. You ca
 When adding hostnames, follow these requirements:
 
 - The hostname must be fully qualified domain names (FQDNs): `example.com` or `subdomain.example.com`
-- No wildcards are supported. You must specify each hostname individually.
+- Wildcard characters (such as `*`) are not supported in the hostname field. However, adding a hostname automatically authorizes all of its subdomains.
 
 :::caution[Invalid formats]
 The following formats are not valid and will not be accepted:
@@ -37,19 +37,34 @@ The following formats are not valid and will not be accepted:
 
 ### Subdomain behavior
 
-Specifying a subdomain provides additional security by restricting widget usage. 
+When you add a hostname, the widget will work on that exact hostname **and all of its subdomains**. This means adding a root domain covers all subdomains beneath it, while adding a specific subdomain restricts the widget to only that subdomain and its children.
 
-For example, adding `www.example.com` as a hostname will allow widgets to work on:
+#### Example: Root domain
 
+Adding `example.com` as a hostname will allow the widget to work on:
+
+- `example.com`
 - `www.example.com`
-- `abc.www.example.com:8080` (subdomains of the specified hostname). 
+- `shop.example.com`
+- `any.sub.example.com`
+
+#### Example: Specific subdomain
 
-However, it will not work on:
+Adding `www.example.com` as a hostname provides more restrictive control. The widget will work on:
+
+- `www.example.com`
+- `abc.www.example.com` (subdomains of the specified hostname)
+
+However, it will **not** work on:
 
 - `example.com` (parent domain)
 - `dash.example.com` (sibling subdomain)
 - `cloudflare.com` (unrelated domain)
 
+:::note
+Use a specific subdomain when you want to restrict the widget to a narrower scope. For example, if you only want the widget on your checkout flow, add `checkout.example.com` rather than `example.com`.
+:::
+
 ## Add hostnames
 
 <Tabs>
@@ -97,4 +112,4 @@ However, it will not work on:
 
 Free users are entitled to a maximum of 10 hostnames per widget.
 
-Enterprise customers can have up to 200 hostnames per widget.
\ No newline at end of file
+Enterprise customers can have up to 200 hostnames per widget.

From af9005b6eb4e9ce1c40a02aba4cbd1d7753628e0 Mon Sep 17 00:00:00 2001
From: Patricia Santa Ana <103445940+patriciasantaana@users.noreply.github.com>
Date: Mon, 27 Apr 2026 10:47:14 -0700
Subject: [PATCH 2/2] Apply suggestion from @patriciasantaana

---
 .../additional-configuration/hostname-management/index.mdx      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx b/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
index 7578c911624..16b9d20c37a 100644
--- a/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
+++ b/src/content/docs/turnstile/additional-configuration/hostname-management/index.mdx
@@ -37,7 +37,7 @@ The following formats are not valid and will not be accepted:
 
 ### Subdomain behavior
 
-When you add a hostname, the widget will work on that exact hostname **and all of its subdomains**. This means adding a root domain covers all subdomains beneath it, while adding a specific subdomain restricts the widget to only that subdomain and its children.
+When you add a hostname, the widget will work on that exact hostname and all of its subdomains. This means adding a root domain covers all subdomains beneath it, while adding a specific subdomain restricts the widget to only that subdomain and its children.
 
 #### Example: Root domain