What is Cloudflare WARP?
WARP is a free client from Cloudflare that replaces the connection between your device and the internet with what Cloudflare calls a modern, optimised protocol, routing traffic through its own network. It is offered together with the 1.1.1.1 DNS resolver, and the vendor's claim is that it prevents snooping by encrypting more of the traffic leaving the device. A paid tier, WARP+, adds access to a larger network of locations, on the reasoning that being nearer a Cloudflare data centre reduces latency. It runs on macOS and Windows as well as on mobile, and can be integrated with Cloudflare Gateway for organisations. It suits people who want their device traffic encrypted to a trusted resolver without configuring a VPN.
Verified product facts
- Type
- VPN clientEditorially reviewed
- Platform
- macOS
- Pricing
- FreemiumDeveloper-stated
- Developer
- CloudflareDeveloper-stated
- Relationship to Nuanyue
- Third-party product — not published by NuanyueEditorially reviewed
- Current version
- 2026.7.1376.0Developer-stated
- Official website
- 1.1.1.1/
Last updated . Facts marked developer-stated come from the developer and are not independently confirmed; editorially reviewed marks a Nuanyue judgement.
Key features
What Cloudflare WARP does at a glance.
Replaces the device's connection to the internet
With an optimised protocol
Routes traffic
Through Cloudflare's network
Encrypts more of the traffic leaving the device, to prevent snooping
Pairs
With the 1.1.1.1 DNS resolver
WARP+ adds access to a larger network of locations to reduce latency
Available
For macOS and Windows as well as mobile platforms
Can be integrated
With Cloudflare Gateway to enrol an organisation's devices
What you can use Cloudflare WARP for
- Encrypting traffic on an untrusted network without setting up a VPN
- Using Cloudflare's DNS resolver with the traffic encrypted to it
- Giving an organisation's devices a managed route through Cloudflare Gateway
Who is Cloudflare WARP for?
- People who want their device traffic encrypted without configuring a VPN
- Organisations already using Cloudflare that want device enrolment through Gateway
Who is Cloudflare WARP not for?
- Anyone who needs a traditional VPN that changes their apparent location — the vendor describes WARP as encrypting traffic, not as relocating it
- Users who need the client to be open source, which it is not
Limitations
- The WARP+ subscription price is not stated in the sources Nuanyue tracks
- The pages checked do not state whether WARP hides the device's IP address, so no claim is made here either way
- Closed source, so the client cannot be independently audited
- Apple Silicon support is not stated in the sources Nuanyue tracks
Strengths and trade-offs
What Cloudflare WARP does well, and what to weigh before choosing it. Points marked developer-stated come from the developer’s own material and have not been independently confirmed.
Strengths
- Free, including the full WARP service rather than a limited tier.Developer-stated
- Encrypts more of the traffic leaving the device, which the vendor states prevents snooping.Developer-stated
- Runs on the same network as Cloudflare's 1.1.1.1 DNS resolver.Developer-stated
- The vendor states it will not sell user data.Developer-stated
- Can be integrated with Cloudflare Gateway to enrol an organisation's devices.Developer-stated
Trade-offs
- The WARP+ price is not published in the sources Nuanyue tracks, so the cost of the larger network has to be checked at purchase.Editorially reviewed
- The vendor does not state on the pages checked whether WARP hides the device's IP address, which is what many users expect a VPN-like tool to do.Editorially reviewed
- Closed source, so the client's behaviour cannot be independently verified.
- Traffic is routed through Cloudflare's network, which makes Cloudflare a party to every connection.Derived
First-use experience
What the app asks of you when you set it up. Only established facts appear here; anything we could not confirm is left out rather than guessed at.
- Installation
- A macOS package is published by Cloudflare for direct download.
- First launch Derived
- No account is required for the free service; the client is switched on from the menu bar.
- System integration Derived
- Installs as a system-level client so that device traffic is routed through Cloudflare's network.
What it does
WARP replaces the connection between your device and the internet with a different one, routed through Cloudflare’s network. The vendor’s framing is about encryption rather than relocation: it states that 1.1.1.1 with WARP prevents snooping by encrypting more of the traffic leaving the device. It is offered alongside the 1.1.1.1 DNS resolver and runs on the same network.
WARP+ is the paid tier, and what it sells is reach rather than features: a larger network of locations, on the reasoning that more cities to connect to means you are more likely to be near a Cloudflare data centre, which can reduce latency. For organisations, WARP can be integrated with Cloudflare Gateway so that user devices are enrolled and routed under the organisation’s policy.
What is not claimed here
Two things commonly assumed about tools like this are not stated on the pages Nuanyue checked, so this entry does not assert them. The first is whether WARP hides the device’s IP address — Cloudflare describes encrypting and routing traffic, not changing apparent location. The second is the price of WARP+, which the checked pages do not publish.
The client is also closed source, and routing traffic through Cloudflare’s network means Cloudflare is a party to every connection. That is the trade inherent in using any hosted resolver or relay, and it is the reason the vendor’s own promise not to sell data is the relevant claim to weigh.
Questions about Cloudflare WARP
Is Cloudflare WARP free?
Yes. The vendor describes it as the free app that makes your internet safer, and the full WARP service is included at no cost. WARP+ is a paid subscription that adds access to a larger network of locations.Developer-stated
What does WARP actually do to my traffic?
Cloudflare states that 1.1.1.1 with WARP replaces the connection between your device and the internet with a modern, optimised protocol, and that it prevents snooping by encrypting more of the traffic leaving your device. Traffic is routed through Cloudflare's network.Developer-stated
What does WARP+ add?
WARP+ subscribers get access to a larger network. Cloudflare's stated reasoning is that more cities to connect to means you are more likely to be closer to a Cloudflare data centre, which can reduce latency between your device and Cloudflare and improve browsing speed.Developer-stated
Does WARP change my IP address or location?
The pages Nuanyue checked do not state this. Cloudflare describes WARP in terms of encrypting traffic and routing it through its network rather than in terms of changing the user's apparent location, so no claim is made here either way.Editorially reviewed
Competitors
Direct competitors: overlapping features aimed at the same users.
Tailscale
WireGuard-based mesh network for connecting devices and services.
Both provide identity-aware access to a private network without a conventional VPN concentrator, but Tailscale builds a peer-to-peer mesh between your own devices while WARP routes traffic through Cloudflare.
Similar apps
Related in purpose, but not a straight swap.
Mullvad VPN
Flat-rate privacy VPN with anonymous accounts and no logging.
Both encrypt traffic leaving the device, but Mullvad is an anonymity-focused paid VPN that hides your address from destinations while WARP is a free client that routes through Cloudflare.
Windscribe
VPN with a permanent free tier and open-source desktop clients.
Both offer a free tier alongside a paid upgrade, but Windscribe is a conventional VPN with location selection while WARP+ sells a larger network rather than a choice of countries.
Links
Sources
Facts on this page are checked against the sources below. Last updated .
