Under Attack Mode in Cloudflare adds an extra layer of protection to your website by screening visitors with a JavaScript challenge before allowing access. This feature is particularly useful during DDoS attacks or periods of heavy bot traffic. Here’s a step-by-step guide to enable it.

---

Steps to Enable Under Attack Mode in Cloudflare

Step 1: Log in to Your Cloudflare Account

• Go to Cloudflare’s login page and sign in with your credentials.

Step 2: Select Your Domain

• From the Cloudflare dashboard, locate Your Sites. Click on the domain you want to secure with Under Attack Mode.

Step 3: Access the Overview Page

• In the left-hand navigation menu, go to the Overview page for the selected domain.

Step 4: Enable Under Attack Mode

• In the right-side Quick Actions panel on the Overview page, find the Under Attack Mode option.
• Toggle it to On. A prompt will appear confirming that Under Attack Mode is now active.

Step 5: Confirmation

• Once enabled, Cloudflare will display a message confirming that Under Attack Mode is active. This setting will remain until you manually turn it off.

---

What Happens When Under Attack Mode is Enabled

Under Attack Mode performs a JavaScript challenge on visitors before granting access. This ensures that real users can still access your site, while potentially harmful bots and suspicious traffic are filtered out. During high-risk periods, activating this mode provides essential security to keep your website safe and accessible for legitimate visitors.