Skip to content
SPECIFICTION
Get listed

Cloudflare WARP

one.one.one.one

Free plan WebWindowsmacOSLinuxiOSAndroid
Visit one.one.one.one
Spec score 9.3 #2 of 43 in Free VPN Services

What it is

Cloudflare WARP is a client that sits between a device and the Internet, with modes intended to provide a faster, more secure and more private connection. Its 1.1.1.1 with WARP mode replaces the device's Internet connection with an optimized protocol, and WARP encrypts more traffic leaving the device to limit snooping. It runs on the same network as Cloudflare's 1.1.1.1 DNS resolver. WARP+ subscribers can access a larger network with more cities, which may reduce latency to a Cloudflare data center and improve browsing speed. Organizations can integrate WARP with Gateway to enroll devices and protect remote workers. The client supports Android, iOS, Linux, macOS, web and Windows, with up to five simultaneous devices. Cloudflare says it collects limited DNS query and traffic data, excluding payload, while the app is enabled. Some app and site traffic using microphone or camera access can bypass WARP and expose the original IP. Encryption may reduce throughput, particularly for desktop users on high-speed broadband, and location-dependent licensed content may not work properly.

Spec sheet

What it does
Cloudflare WARP routes device traffic through Cloudflare to provide a faster, more secure and more private Internet connection.Read 19 Oct 2026 · developers.cloudflare.com
Purpose
The WARP client sits between a device and the Internet and offers connection modes for a faster, more secure, and more private experience.Read 11 Oct 2026 · developers.cloudflare.com
Platforms
The consumer WARP setup documentation provides download and installation guidance for Android, iOS, Linux, macOS, and Windows.Read 11 Oct 2026 · developers.cloudflare.com
Free plan
YesRead 22 Sep 2026 · cloudflare.com
Privacy
The WARP client privacy documentation says it collects limited DNS query and traffic data, excluding payload, when the app is enabled.Read 11 Oct 2026 · developers.cloudflare.com
Support
The WARP FAQ directs users who cannot find an answer to Cloudflare's community page for more resources.Read 11 Oct 2026 · developers.cloudflare.com
Headquarters
San Francisco, California, United StatesRead 28 Sep 2026 · one.one.one.one
Founded
2009Read 28 Sep 2026 · one.one.one.one
Android requirement
The Android client requires Android 5.0 or newer.Read 19 Oct 2026 · developers.cloudflare.com
API and SDKs
Cloudflare provides public REST API documentation and official Go, TypeScript and Python SDKs, but the WARP consumer documentation exposes warp-cli rather than a dedicated consumer WARP API.Read 19 Oct 2026 · developers.cloudflare.com
Cloudflare network
Cloudflare reports serving data from 335 cities in more than 125 countries and handling about 115 million HTTP requests per second on average.Read 19 Oct 2026 · cloudflare.com
Company founded
LinkedIn lists Cloudflare as founded in 2009.Read 19 Oct 2026 · linkedin.com
Company headquarters
LinkedIn lists Cloudflare headquarters in San Francisco, California.Read 19 Oct 2026 · linkedin.com
Company size
LinkedIn lists Cloudflare's company size as 1,001 to 5,000 employees.Read 19 Oct 2026 · linkedin.com
Compatibility
Some apps and sites that rely on location for content licensing may not function properly while using WARP.Read 11 Oct 2026 · developers.cloudflare.com
Connection
1.1.1.1 with WARP replaces the connection between a device and the Internet with an optimized protocol.Read 11 Oct 2026 · one.one.one.one
Data collected
Cloudflare says it stores limited service data such as installation ID, transferred volume, average speed and aggregate traffic by website and region.Read 19 Oct 2026 · developers.cloudflare.com
Data use
Cloudflare says it stores the minimum data it believes is needed to provide the service and does not sell, rent, share, or otherwise disclose personal information except as described.Read 11 Oct 2026 · developers.cloudflare.com
DNS-only mode
DNS-only mode encrypts DNS requests with DNS-over-HTTPS or DNS-over-TLS without tunneling other device traffic.Read 19 Oct 2026 · developers.cloudflare.com
Documentation
Cloudflare publishes consumer WARP documentation covering modes, operating-system clients, installation, privacy and troubleshooting.Read 19 Oct 2026 · developers.cloudflare.com
Encryption
WARP encrypts more of the traffic leaving a device to prevent snooping.Read 11 Oct 2026 · one.one.one.one
Families filtering
The client supports 1.1.1.1 for Families modes that block malware or malware plus adult content.Read 19 Oct 2026 · developers.cloudflare.com
iOS requirement
The current WARP documentation lists iOS 15 or newer as supported.Read 19 Oct 2026 · developers.cloudflare.com
IP behavior
WARP replaces a user's original IP address with a Cloudflare IP, but traffic from apps or sites using microphone or camera access can bypass WARP and expose the original IP.Read 11 Oct 2026 · developers.cloudflare.com
Licence
Cloudflare's BoringTun WireGuard implementation is open source under the 3-Clause BSD licence, while the WARP client product itself is distributed as proprietary applications.Read 19 Oct 2026 · github.com
Limit
Cloudflare says WARP trades some throughput for enhanced privacy by encrypting traffic to and from the device, and desktop users on high-speed broadband may notice a drop.Read 11 Oct 2026 · developers.cloudflare.com
Limit: app support
TechRadar says Cloudflare documentation is thorough but aimed mainly at developers and that connection support is not reliably available outside community channels.Read 19 Oct 2026 · techradar.com
Limit: audit scope
VPN Scorecard says Cloudflare's independent KPMG examinations cover the 1.1.1.1 DNS resolver rather than the WARP tunnel itself.Read 19 Oct 2026 · vpnscorecard.com
Limit: missing kill switch
TechRadar reports that WARP lacks a kill switch, creating potential exposure if the tunnel drops.Read 19 Oct 2026 · techradar.com
Limit: no anonymity
Wired says WARP does not provide the endpoint choice or anonymity expected from a conventional VPN and is not suitable for bypassing regional restrictions.Read 19 Oct 2026 · wired.com
Limit: no location choice
TechRadar reports that users cannot select a VPN server location and are assigned a nearby Cloudflare location.Read 19 Oct 2026 · techradar.com
Limit: speed value
TechRadar measured about 197 Mbps on its 1 Gbit test line and found WARP+ speeds nearly identical, questioning the upgrade's value.Read 19 Oct 2026 · techradar.com
Limit: streaming
TechRadar found WARP unsuitable for dependable geo-unblocking and could not access BBC iPlayer in testing.Read 19 Oct 2026 · techradar.com
Linux CLI
Linux installation uses the cloudflare-warp package and the warp-cli command for registration, connection, modes, protocols and diagnostics.Read 19 Oct 2026 · developers.cloudflare.com
Linux requirements
Supported Linux distributions include RHEL 9/10, Debian 12/13, Fedora 43/44 and Ubuntu 22.04/24.04/26.04, with AMD64 or ARM64 processors.Read 19 Oct 2026 · developers.cloudflare.com
Local proxy
Desktop clients support HTTPS and SOCKS5 local-proxy mode so selected applications can use WARP while other traffic remains direct.Read 19 Oct 2026 · developers.cloudflare.com
macOS requirements
Supported Macs use Intel or Apple silicon and require Sequoia 15.1+, Tahoe 26.0+ or Golden Gate 27.0+.Read 19 Oct 2026 · developers.cloudflare.com
Network
WARP is built on the same network as Cloudflare’s 1.1.1.1 DNS resolver.Read 11 Oct 2026 · one.one.one.one
Praise: basic privacy
TechRadar says WARP is a reasonable choice for basic privacy because it encrypts traffic and DNS without requiring a conventional VPN subscription.Read 19 Oct 2026 · techradar.com
Praise: network reach
VPN Digger describes WARP as free, unlimited and fast, with Cloudflare's edge network close to many users.Read 19 Oct 2026 · vpndigger.com
Praise: simplicity
TechRadar praises WARP for being free, easy to set up and usable on unlimited devices.Read 19 Oct 2026 · techradar.com
Privacy limitation
Cloudflare states that WARP does not provide anonymity and cannot make a user appear to be browsing from another country.Read 19 Oct 2026 · developers.cloudflare.com
Protocols
The Linux client documents WireGuard and MASQUE tunnel protocol selection, with MASQUE as the default.Read 19 Oct 2026 · developers.cloudflare.com
Rating on Apple App Store
4.5 out of 5 from 216K ratingsRead 19 Oct 2026 · apps.apple.com
Rating on Google Play
4.1 out of 5 from 1.34M reviewsRead 19 Oct 2026 · play.google.com
Security design
Cloudflare says WARP uses a VPN profile or service to intercept and secure DNS queries and transmit traffic through its network.Read 19 Oct 2026 · developers.cloudflare.com
Simultaneous devices
5Read 22 Sep 2026 · cloudflare.com
Streaming support
NoRead 22 Sep 2026 · cloudflare.com
Team use
Organizations can integrate WARP with Gateway to enroll user devices and protect remote workers from online threats.Read 11 Oct 2026 · one.one.one.one
Traffic encryption
Traffic-and-DNS mode uses MASQUE to encrypt device traffic to Cloudflare and current clients can use post-quantum cryptography.Read 19 Oct 2026 · developers.cloudflare.com
Traffic-only mode
Traffic-only mode tunnels device traffic through WARP while leaving DNS resolution to the operating system.Read 19 Oct 2026 · developers.cloudflare.com
WARP+
WARP+ subscribers get access to a larger network with more cities, which may reduce latency to a Cloudflare data center and improve browsing speed.Read 11 Oct 2026 · one.one.one.one
WARP+ benefit
WARP+ Unlimited provides access to more Cloudflare cities intended to reduce latency and improve browsing speed.Read 19 Oct 2026 · developers.cloudflare.com
Windows requirements
Windows support covers Windows 10 LTSC, Windows 11 and Windows 365 Cloud PC on Windows 11, with .NET Framework 4.7.2 or later.Read 19 Oct 2026 · developers.cloudflare.com
WireGuard support
YesRead 22 Sep 2026 · cloudflare.com

Plans and prices

WARP+ Unlimited Price not published 5 devices Read 22 Sep 2026 · developers.cloudflare.com
WARP Free Free Free consumer WARP service Read 11 Oct 2026 · one.one.one.one
WARP Free free forever basic WARP tunnel · no bandwidth limit Read 19 Oct 2026 · blog.cloudflare.com
WARP+ Unlimited $4.99 a month monthly via Apple App Store or Google Play larger Cloudflare network · up to five devices Read 19 Oct 2026 · apps.apple.com
WARP+ Price not published The current consumer page does not state a price or billing term. Larger network · more cities to connect to Read 11 Oct 2026 · one.one.one.one

Every Cloudflare WARP plan and price →

Strong points and limits

Strong points

  • Supports six listed platforms
  • Allows five simultaneous devices
  • Encrypts more traffic leaving the device
  • Offers DNS-only and traffic-and-DNS modes

Limits

  • Some traffic can bypass WARP and expose the original IP
  • Encryption may reduce throughput
  • Location-dependent licensed content may not work properly

Who it suits

WARP suits individuals seeking encrypted device traffic and organizations that want to enroll remote-worker devices through Gateway. It is available across desktop and mobile platforms and supports up to five simultaneous devices.

Cloudflare WARP in depth

Read the full write-up

Cloudflare WARP is a connection client for encrypting device traffic and DNS across desktop and mobile systems. It is best suited to people who want a straightforward privacy layer for everyday browsing, not a service for dependable streaming access. The free option and five-device allowance are useful, but performance trade-offs and possible IP exposure in some circumstances make it a poor fit for users who need comprehensive anonymity.

Overview

WARP replaces a device’s usual internet connection with an optimized protocol running on the network behind Cloudflare’s 1.1.1.1 DNS resolver. The emphasis is on encrypted connections and DNS rather than location-based entertainment: streaming support is not provided, and some apps or sites that depend on location for content licensing may not work properly.

Key features

WARP offers traffic-and-DNS and DNS-only modes. The first encrypts more traffic leaving the device to help prevent snooping; the second is a narrower choice for people who do not want WARP applied to all traffic. WARP+ adds access to a larger network with more cities, which may reduce latency to a Cloudflare data center and improve browsing speed. That is a potential improvement, not a guarantee of faster connections.

WARP replaces the user’s original IP address with a Cloudflare IP, but traffic from apps or sites using microphone or camera access can bypass WARP and expose the original address. It should not be treated as an absolute IP shield. Cloudflare’s privacy documentation says the enabled client collects limited DNS query and traffic data, excluding payload. The company says it stores the minimum data it believes it needs to provide the service and does not sell, rent, share, or otherwise disclose personal information except as described.

Encryption has a performance cost: Cloudflare says WARP trades some throughput for enhanced privacy, and desktop users on high-speed broadband may notice a drop. That is a meaningful compromise for speed-sensitive work. Organizations can integrate WARP with Gateway to enroll devices and protect remote workers from online threats, giving it a team-use path beyond the consumer client.

Pricing

WARP is freemium, with a free plan. The WARP plan includes encrypted device traffic, encrypted DNS, and traffic-and-DNS or DNS-only modes. It is the clearest starting point for an individual who wants the core connection features without paying for a larger network. WARP+ offers more cities, while WARP+ Unlimited is described for five devices. Both WARP+ plans have custom pricing; the current consumer page does not state a price or billing term for WARP+.

The five-device limit is relevant to households or users with several personal devices. WARP+ Unlimited is the only named plan with that allowance; the WARP plan’s device cap is not established here. There is no stated consumer price or billing term to compare against the free plan, so prospective subscribers should confirm the terms before choosing an upgrade.

Platforms

WARP supports Android, iOS, Linux, macOS, Windows, and web. That range covers major desktop and mobile systems, though streaming support is absent. The service supports WireGuard, and the stated simultaneous-device count is five.

Who it's for

WARP makes sense for people seeking encrypted traffic and DNS on multiple kinds of devices, especially those content with the free plan and not dependent on streaming or location-sensitive services. It is less suitable for desktop users who prioritize maximum throughput, for anyone relying on apps that may bypass WARP, and for people who need location-based content to work consistently. Teams can consider it alongside Gateway when protecting remote-worker devices is the goal.

Pros and cons

Pros: Free core modes provide encrypted device traffic and DNS, making WARP a practical privacy option without a stated subscription charge.

Pros: Support for Android, iOS, Linux, macOS, Windows, and web gives it broad cross-platform reach.

Pros: WARP+ connects through a larger network with more cities, which may lower latency to a Cloudflare data center.

Cons: Encryption can reduce throughput, particularly noticeable to desktop users on high-speed broadband.

Cons: Microphone- or camera-using apps and sites can bypass WARP and reveal the original IP address.

Cons: No streaming support and potential failures with licensing-based location checks rule it out for some media use.

Cons: WARP+ pricing and billing terms are custom rather than stated on the current consumer page, complicating a cost comparison.

Alternatives

For a broader comparison, start with Free VPN Services or VPN services. Among named alternatives, Proton VPN is a better fit for someone who wants a stated free allowance of unlimited data across 10 countries, with one device at a time. Windscribe suits readers who prefer a free plan with a stated monthly data allowance and country count. TunnelBear offers a free 2 GB secure-browsing allowance, while its Unlimited plan is priced at $3.33 a month.

Betternet Free, hide.me, iTop VPN, Speedify, and Bitdefender Total Security are other alternatives to compare.

Verdict

Choose Cloudflare WARP if you want a free, cross-platform way to encrypt device traffic and DNS, with a possible larger-network upgrade for five devices. Its strongest case is the combination of broad platform support and useful connection modes; look elsewhere if you need streaming, consistent location-based access, stronger assurance that your original IP cannot escape, or predictable paid-plan terms.

Verdict

WARP provides encrypted connection modes across desktop and mobile platforms, with an option for organizational use through Gateway.

Where Specifiction places it

Alternatives to Cloudflare WARPAll alternatives →