When ChatGPT says “Please unblock challenges.cloudflare.com to proceed” or keeps asking you to verify you are human, your account is fine. ChatGPT sits behind Cloudflare, and your browser could not finish the Cloudflare check that runs before every visit. The ChatGPT Cloudflare error is a front-door problem, not a ban.
The cause is usually one of four things: a Cloudflare outage, a VPN or proxy, a browser extension or setting, or a work network that filters traffic. This guide shows how to tell which one you have in under a minute. It walks through the fixes that OpenAI and Cloudflare document themselves. It also gives you the exact list of domains to send your IT team when the whole office is locked out.
The Key Takeaways
- Not a ban: ChatGPT, openai.com and the OpenAI login page all run through Cloudflare, which checks every visitor. The error means your browser failed that check.
- Check for an outage first: on 18 November 2025 a Cloudflare failure put the same “unblock challenges.cloudflare.com” message on ChatGPT for hours. No setting on your side could fix it.
- VPNs cause loops: Cloudflare rejects a check solved from a different IP address than the one it was sent to. A VPN or proxy that switches IPs sends you back to the start.
- At work, it is usually the network: OpenAI lists challenges.cloudflare.com among the domains companies must allowlist, next to chatgpt.com and openai.com.
- A phone hotspot is the fastest test: if ChatGPT works on mobile data and fails on office WiFi, the network is the cause, and IT has to fix it.
Does ChatGPT Use Cloudflare?
Yes. ChatGPT runs behind Cloudflare, and Cloudflare decides whether your browser gets through to it. On 25 October 2026 we requested chatgpt.com, openai.com and auth.openai.com from a script, a test we call the Fello AI header check. All three answered with server: cloudflare and a Cloudflare Ray ID, and all three refused the script with a challenge instead of the page.
That refusal is the same check your browser passes silently on a normal visit. Cloudflare runs a short test in the browser, usually invisible and sometimes a “Verify you are human” box, before it lets the request through to OpenAI. OpenAI says it uses these checks in ChatGPT to minimize bot activity and spam on web, iOS and Android.
The domain in the error message, challenges.cloudflare.com, is the Cloudflare address that serves this check. “Please unblock challenges.cloudflare.com to proceed” appears when the check cannot load or cannot finish. Something between your browser and Cloudflare stopped it, or Cloudflare itself is failing.
ChatGPT Cloudflare Error: Outage or Just You?
Check for an outage before you change anything, because during a Cloudflare outage no fix on your side works. Open status.openai.com and cloudflarestatus.com, then try one other big site that uses Cloudflare. If the same message shows up elsewhere, the problem is Cloudflare, not you.
The clearest example is the Cloudflare outage of 18 November 2025. According to Cloudflare’s post-mortem, its network began failing at 11:20 UTC after a bad Bot Management configuration file spread across its servers. It only returned to normal at 17:06 UTC. Cloudflare says the outage was not a cyber attack, and that its Turnstile check failed to load during it. A TechRadar reporter trying to log in to ChatGPT that day got exactly this message: “Please unblock challenges.cloudflare.com to proceed.” OpenAI’s status page, as TechRadar quoted it, blamed “one of our third-party service providers.”
If the status pages are clear, run OpenAI’s own two-question test. Does the error happen only to you, or to colleagues on the same network too? Does it go away when you switch your laptop to your phone’s hotspot? An error that disappears on mobile data points at your network. An error that follows you to the hotspot points at your browser or VPN. Our guide on how to check if ChatGPT is down covers the wider outage checks.
Need an answer while ChatGPT stays behind the check? Ask the same question in Fello AI, which runs GPT, Claude and Gemini in one native app for Mac, iPhone and iPad. Come back to ChatGPT once the check works again.
How to Fix the ChatGPT Cloudflare Error
Work through these steps in order. They come from OpenAI’s help pages for login loops and CAPTCHAs and from Cloudflare’s challenge troubleshooting guide. The quick ones come first.
The Eight Steps, in Order
- Reload in a private window. A private window starts without extensions and cached data. OpenAI and Cloudflare both suggest it to rule those out.
- Pause your VPN or proxy. Turn off any personal VPN, proxy or VPN browser extension and reload. OpenAI and Cloudflare both list this step.
- Turn off blockers. Disable ad blockers, privacy tools, script blockers and fingerprinting or canvas blockers for the test. Cloudflare says these extensions can stop the check script from loading or from reaching its servers.
- Allow JavaScript and cookies. The check needs JavaScript. OpenAI asks you to allow cookies, including third-party cookies, and JavaScript for chatgpt.com, openai.com and auth.openai.com.
- Update or switch your browser. Cloudflare supports the major desktop and mobile browsers. Browsers more than five years old, embedded browsers and in-app browsers may fail the check, and Internet Explorer is not supported at all. Cloudflare’s test page at debug.challenges.cloudflare.com shows whether your browser can complete a check.
- Switch networks. Move to your phone’s hotspot or another WiFi. OpenAI names the switch from corporate WiFi to mobile data as a fix for verification loops.
- On a work or school network, ask IT. If the error only happens on that network, the network is filtering the check. Send IT the domain list in “ChatGPT Cloudflare Block at Work: What to Ask IT”.
- Send OpenAI the request ID. If you still get a CAPTCHA on every message with no VPN on, OpenAI asks for a screenshot of the puzzle, because it includes a request ID support can trace.
Two Fixes That Do Not Work
Two common tips are missing from the list on purpose. Changing your DNS server is not in OpenAI’s steps for this error on the web. “Cloudflare bypass” tools do not help either: Cloudflare does not support automated browsers solving its checks, so a tool cannot pass a check your own browser fails.
ChatGPT Cloudflare Loop: Why “Verify You Are Human” Keeps Coming Back
A ChatGPT Cloudflare loop usually means your IP address changed while the check was running. Cloudflare states that a check received from one IP address and solved from another is not valid, and that this can cause a challenge loop. A VPN that rotates exit servers, a proxy, or an office network that sends traffic out through several addresses can switch your IP mid-check. Cloudflare then sees the answer arrive from a different address than the one it challenged.
Cloudflare lists five more causes of loops. Four sit on your side: an unstable connection, settings or extensions that block the check script, an unsupported browser, and disabled JavaScript. The fifth is a detection error, where a real visitor looks like a bot. Cloudflare says loops happen only when it sees strong bot signals. That is how one setting, such as a VPN or a canvas blocker, can trap you while everyone else on the network gets through.
OpenAI draws a useful line here. Seeing a CAPTCHA now and then is normal. Seeing one on every message is not, and that pattern is worth reporting once the VPN and extensions are ruled out. If ChatGPT loads but answers slowly, that is a different problem, covered in why ChatGPT is so slow.
ChatGPT Cloudflare Block at Work: What to Ask IT
If ChatGPT fails for everyone in the office and works on a phone hotspot, the company network is blocking part of the Cloudflare check. OpenAI asks companies to make sure its domains are not blocked and that web filtering does not answer them with unexpected content, and challenges.cloudflare.com is on that list. OpenAI’s network recommendations for ChatGPT name the security products that commonly filter this traffic. They include McAfee Web Gateway, Cisco Umbrella, Symantec Cloud Secure Web Gateway, Palo Alto Networks PAN-DB, Zscaler Internet Access, Sophos Firewall, Barracuda Web Security Gateway and Fortinet FortiGuard URL filtering.
The Message to Send IT
Copy this and send it to your IT or security team. The domains come from OpenAI’s allowlist, which has 31 entries in total, so ask IT to check the full list on OpenAI’s page as well.
ChatGPT is failing on our network with "Please unblock challenges.cloudflare.com to proceed".
It works on a mobile hotspot, so our network filtering is blocking the Cloudflare check.
OpenAI asks companies to allowlist these domains (full list in OpenAI's
"Network recommendations for ChatGPT errors on web and apps" help article):
challenges.cloudflare.com
*.chatgpt.com
*.openai.com
*.auth.openai.com
*.oaistatic.com
*.oaiusercontent.com
OpenAI also asks that WebSocket traffic to wss://ws.chatgpt.com on TCP port 443 is allowed.
Could you allowlist these, or stop the filter from rewriting their responses?OpenAI adds two details IT will want. The web filter should stop blocking ChatGPT outright, including cookie interception, and it should not answer these domains with unexpected content. If chats connect and then stall, OpenAI points at TLS inspection or proxy settings that cut long-running WebSocket connections.
When the ChatGPT Mac App Is the One Blocked
The ChatGPT Mac app fails differently on filtered networks. OpenAI’s network recommendations page says SSL inspection can make the Mac app show “Network configuration issue” with a message that the certificate is the wrong SSL certificate. OpenAI’s fix is to turn off SSL inspection for public OpenAI domains, and its workaround is to use ChatGPT on the web meanwhile.
A second case hits companies on ChatGPT Enterprise or Edu that run Cloudflare Zero Trust with TLS decryption. OpenAI says a Cloudflare certificate change can cut the Mac and iOS apps off there. The web client, Windows and Android keep working, and the company’s Zero Trust admins need to add a new firewall policy. Our guide to the ChatGPT Mac app not working covers the app’s other failures, and our ChatGPT desktop client for Mac page covers the native-app route.
Cloudflare Messages on ChatGPT, Decoded
Each Cloudflare message on ChatGPT means something different, and the fix follows from the wording. Match what you see to the table.
| What you see | What it means | What to do |
|---|---|---|
| Please unblock challenges.cloudflare.com to proceed | The Cloudflare check could not load or finish | Check for an outage, then the VPN, blockers and network steps |
| Verify you are human / Checking your browser… on repeat | A challenge loop: the check runs but never passes | Pause the VPN or proxy, allow JavaScript and cookies, try a private window |
| A CAPTCHA puzzle on every message | OpenAI’s bot checks are firing more than they should | VPN off, private window, then send OpenAI a screenshot with the request ID |
| Sorry, you have been blocked | A Cloudflare IP block after suspicious activity, often a VPN or a high-risk location | Turn off the VPN, connect from another location, or wait for the block to lift |
| Error 1020: Access denied | Cloudflare: a security rule set by the site owner, here OpenAI, blocked your request (HTTP 403) | Send the screenshot with its Ray ID to OpenAI support, since only the site owner can change the rule |
| A Cloudflare error page with a 5xx code | Cloudflare’s own network is failing | Wait and watch the two status pages; nothing on your device will fix it |
Only “Sorry, you have been blocked” and Error 1020 are actual blocks, and neither is an account ban. OpenAI describes the first as a temporary Cloudflare IP block that lifts when the suspicious activity stops. If you use a VPN for privacy, our ChatGPT privacy guide covers the settings inside ChatGPT that control what OpenAI keeps.
The Verdict
The ChatGPT Cloudflare error is a front-door check failing, and the fix depends on where it fails. Rule out a Cloudflare outage first, because nothing you change helps during one. Then turn off the VPN, the cause that both OpenAI and Cloudflare name for blocks and loops alike. If the error survives that and only happens at work, stop changing your laptop and send IT the domain list. The network is blocking challenges.cloudflare.com, and only the network owner can unblock it.
Frequently Asked Questions
Is my ChatGPT account banned if I see a Cloudflare error?
No. The Cloudflare check runs before ChatGPT knows who you are, so a failed check says nothing about your account. Even “Sorry, you have been blocked” is a temporary Cloudflare IP block, not an OpenAI account action.
Does a VPN cause the ChatGPT Cloudflare error?
Often, yes. OpenAI lists turning off the VPN as the first CAPTCHA fix, and Cloudflare rejects a check solved from a different IP address than the one it was sent to. A VPN that changes exit servers mid-check produces exactly that loop.
Why can’t anyone in my office access ChatGPT?
The company network is almost certainly filtering challenges.cloudflare.com or another OpenAI domain. Confirm it on a phone hotspot, then ask IT to allowlist the domains on OpenAI’s network recommendations page, starting with challenges.cloudflare.com, chatgpt.com and openai.com.
Does the ChatGPT app get the Cloudflare check too?
Yes. OpenAI says you can meet its CAPTCHAs on web, iOS and Android. During the November 2025 Cloudflare outage, the message appeared in the app as well as on the web. The Mac app has its own network errors on filtered company networks.
Can I bypass the Cloudflare check on ChatGPT?
No, and you do not need to. Cloudflare does not support automated tools solving its checks, so bypass tools fail where a normal browser fails. Fix the cause instead: the VPN, a blocking extension, or the network filter.
