diff --git a/public/api/contact.php b/public/api/contact.php
index aa6a0a5..5d17223 100644
--- a/public/api/contact.php
+++ b/public/api/contact.php
@@ -62,7 +62,7 @@ if (mb_strlen($phone) > 30)  { http_response_code(400); echo json_encode(['error
 if (mb_strlen($message) > 5000) { http_response_code(400); echo json_encode(['error' => 'Message too long']); exit; }
 
 // ─── Cloudflare Turnstile verification ───────────────────────────────────────
-$TURNSTILE_SECRET = ''; // TODO: Create widget at dash.cloudflare.com → Turnstile → Add site (sag24.ru)
+$TURNSTILE_SECRET = '0x4AAAAAACrQSySNBa2C2FWQq2ty1_UyLhc';
 if ($TURNSTILE_SECRET) {
     if (!$turnstileToken) {
         http_response_code(400);
diff --git a/src/config.js b/src/config.js
index 9c7bfe7..100c683 100644
--- a/src/config.js
+++ b/src/config.js
@@ -5,4 +5,4 @@ export const FORM_ENDPOINT = '/api/contact.php'
 export const EMAIL = 'info@sag24.ru'
 
 // Cloudflare Turnstile — создать виджет: dash.cloudflare.com → Turnstile → Add site (sag24.ru)
-export const TURNSTILE_SITE_KEY = ''
+export const TURNSTILE_SITE_KEY = '0x4AAAAAACrQS-dAb7E9RGPQ'