Documentation
SuperFlare Cache Documentation
Everything you need to connect SuperFlare Cache to Cloudflare, configure caching and purging, and tune speed and security settings from your WordPress dashboard.
Getting Started
Install and connect Cloudflare
- Go to Plugins > Add New, search for SuperFlare Cache, install and activate it. Activation opens the guided setup wizard automatically.
- Choose an authentication method: an API Token scoped to Zone.Cache Purge and Zone.Page Rules (recommended), or the legacy Global API Key plus your Cloudflare account email.
- The wizard automatically detects the Cloudflare zone matching your site’s domain, so you only need to confirm it.
- Finish the wizard to create the one-click “Cache Everything” page rule on your zone. Visit Settings > SuperFlare Cache any time afterward to fine-tune purging, zone controls, or exclusions.
Which authentication method? An API Token scoped to just the permissions this plugin needs is recommended. Use the Check Now button on the General tab any time to verify your token has every permission SuperFlare Cache uses. The Global API Key always has full account access, so it has nothing to check.
Settings · General
General settings
Enable Cloudflare Full-Page Cache Free
By default Cloudflare only caches static files like CSS, JS, and images. Turning this on also caches your full HTML pages at Cloudflare’s edge, the biggest speed boost this plugin offers. Needs the “Cache Rules” permission on your API token.
Enable Disk Page Cache Free
Serves pages instantly from your own server, even if Cloudflare is down or misconfigured. Best for slower hosts. Disable page caching in any other plugin first to avoid conflicts.
Always excluded Free
Logged-in users, wp-admin/wp-login, and password-protected content are never cached, so protected or personalized content always stays fresh.
Custom exclusions Free
Add “Bypass pages with any query string”, strip Set-Cookie from cached pages, list URL patterns to never cache (one per line, e.g. /cart/ or /account/*), and cookie names that always force a fresh page. A per-post “Never cache this page” toggle is also available in the block editor sidebar.
Settings · Cache
Cache purging
Controls how and when SuperFlare Cache clears the cache it manages, separate from the Cloudflare zone settings on other tabs.
Manual purge
Use Purge Latest Post, Custom Purge, or Purge Everything at the top of the Cache tab, or the Cloudflare icon in the admin bar. Purging needs the “Cache Purge” permission on your API token.
What to purge on a content change
“Related pages only” (recommended) purges just the changed page plus whatever scopes you enable below it: homepage, archives, feeds, AMP version, and comments. “Everything” clears the whole zone cache on every update instead.
Custom purge URLs
One relative path per line, purged alongside every post/page update, e.g. /blog/ for a blog index that lists posts.
Advanced preloader (warm-up)
When enabled, purged URLs are revisited automatically right after a purge, so the next real visitor never hits a cold cache. Use “Start Preloader” to run one immediately instead of waiting for a purge.
Purging behavior
Purges are queued and sent to Cloudflare in batches so bulk edits never hit its API rate limit; turn on “Disable purge queue” to purge immediately instead. “Purge HTML pages only” keeps images, CSS, and JS cached on a full purge. “Who can purge cache” controls which role sees the admin bar purge button.
Backend protection
Your wp-admin and wp-login aren’t cached by default. If they still are, “Force-bypass wp-admin and wp-login at the edge” makes Cloudflare always skip them.
Settings · Speed
Speed optimizations
Compression, Protocols, and Images need an active Cloudflare connection and save straight to your zone. The rest work either way and save with the form button.
Brotli Compression Free
Serves smaller, faster-loading files to supporting browsers.
Protocols Free
HTTP/3 (QUIC), 0-RTT Connection Resumption, and WebSockets. Enhanced HTTP/2 Prioritization needs SuperFlare Pro.
Images Free
Image Resizing is the master switch that WebP Conversion needs turned on first. Polish (edge re-compression) and extra formats need SuperFlare Pro.
JavaScript Free Pro
Rocket Loader defers JavaScript loading to improve render speed (test your site after enabling). Defer JavaScript needs SuperFlare Pro.
Loading Pro
Early Hints, Prefetch URLs, and Prefetch Links fetch resources or pages ahead of when a visitor needs them, so navigation feels instant.
HTML Optimization & Third-Party Domains Free Pro
Minify HTML runs free, with or without Cloudflare. DNS Prefetch/Preconnect for third-party domains needs SuperFlare Pro.
Settings · Security & SSL/TLS
Security and encryption
These controls change settings directly on your Cloudflare zone and save immediately. They need an active Cloudflare connection.
Security Level & Challenge Passage
Security Level sets how aggressively Cloudflare challenges visitors that look like threats, from Essentially Off to Under Attack. Challenge Passage controls how long a visitor who solves a challenge is trusted before being challenged again.
Scrape protection
Browser Integrity Check blocks headers commonly abused by spammers and bots. Hotlink Protection stops other sites from embedding your images. Email Address Obfuscation hides email addresses from scraping bots.
SSL Mode & HTTPS
SSL Mode: use “Full (strict)” when your origin has a valid SSL certificate. “Always Use HTTPS” redirects all HTTP requests to HTTPS. “Automatic HTTPS Rewrites” fixes mixed-content links pointing to your own site’s HTTP version.
TLS & HSTS
Set a Minimum TLS Version and enable TLS 1.3 or Encrypted Client Hello for supporting browsers. HSTS forces browsers to only ever connect over HTTPS.
Before enabling HSTS: it is off by default. Read Cloudflare’s HSTS guidance first, since once visitors’ browsers pick it up, turning it off again takes as long as the Max Age you chose.
Settings · Integrations
Integrations
SuperFlare Cache can integrate with other caching plugins and hosting platforms so every cache stays in sync automatically. Enable or disable each detected integration on this tab; once enabled, it syncs automatically, matched to how that plugin or host clears its own cache. A self-hosted Varnish instance can also be told to purge alongside every full purge under Advanced.
Settings · Advanced
Advanced & debugging
Purge via cron URL
Turn this on to get a secret URL an external cronjob can hit to purge everything on a schedule. Change the secret key any time the URL leaks.
Debug log
Logs Cloudflare API requests and purge activity to help diagnose issues. View, download, or clear the log file from this tab. Turn it off again once you’re done, to avoid growing the log unnecessarily.
Data & uninstall
“Delete data on uninstall” is off by default, so removing the plugin never loses your connection, settings, or cached data by surprise. Turn it on only if you want a clean slate.
Reset settings
Resets every setting to its default while keeping your Cloudflare connection, so you never need to reconnect after a reset.
Still need help?
Our support team is ready to help you get SuperFlare Cache configured just right for your site.