Cloudflare WARP — What It Is and How to Use It

Cloudflare WARP is a free app that encrypts your internet traffic and routes it through Cloudflare's global network. It is not exactly a VPN, but it provides many of the same benefits: encryption, privacy protection, and improved performance through Cloudflare's massive infrastructure.

WARP started as the 1.1.1.1 app, Cloudflare's DNS resolver. Over time, Cloudflare added the WARP feature to encrypt all traffic, not just DNS. Today, WARP is used by millions of people worldwide as a privacy tool and performance booster.

What Is Cloudflare WARP?

WARP is a free service that uses WireGuard to encrypt your device's internet traffic and route it through Cloudflare's network. WireGuard is a modern VPN protocol that is faster and more secure than older protocols like OpenVPN or IPSec.

Unlike a traditional VPN, WARP does not hide your IP address or let you appear to be in a different country. It uses your real IP address but encrypts the connection between your device and Cloudflare's network. From Cloudflare's network, your traffic continues to its destination using Cloudflare's fast, optimized routes.

WARP+ is the paid version that uses Cloudflare's Argo Smart Routing to find the fastest possible path through the internet. This can improve performance for high-latency connections. The free version uses standard routing but still benefits from Cloudflare's network presence.

WARP vs Traditional VPN

WARP and VPNs serve different primary purposes. A VPN is designed to change your virtual location and hide your IP address. WARP is designed to encrypt your traffic and improve performance. If you need to appear as if you are in another country, you need a VPN. If you want to encrypt your browsing and potentially speed it up, WARP works well.

WARP is faster than most VPNs because it uses WireGuard and Cloudflare's global network. WireGuard is significantly more efficient than OpenVPN, the protocol most VPNs use. Cloudflare also has more network capacity than most VPN providers, so congestion is rarely an issue.

WARP is free. There is no data cap, no speed limit, and no subscription on the standard version. WARP+ costs a small monthly fee for the routing optimization. Most users will be satisfied with the free version.

WARP is also simpler to set up. Download the app from your device's app store, install it, and toggle it on. There is no server selection, no protocol configuration, no advanced settings to worry about.

How to Set Up Cloudflare WARP

On Windows and Mac, download the WARP client from 1.1.1.1. Install it like any other application. After installation, the app runs in the background. Click the toggle to enable WARP. The app shows a connected status when the encrypted tunnel is active.

On iOS and Android, search for "1.1.1.1: Faster & Safer Internet" in the App Store or Google Play. Install the app and tap the toggle to enable WARP. The app requests permission to configure a VPN connection — this is how WARP routes your traffic. Grant the permission.

Once enabled, all your internet traffic goes through Cloudflare's network. You can verify this by visiting 1.1.1.1/help in your browser. The page shows whether you are connected to WARP, your DNS resolver, and your connection type.

If you encounter issues with specific websites or services, you can add them to the WARP split tunnel or disable WARP temporarily. The app has a settings section where you can configure exclusions.

DNS and WARP

WARP uses Cloudflare's 1.1.1.1 DNS resolver by default. All your DNS queries go through the encrypted WARP tunnel and are resolved by 1.1.1.1, which supports DNSSEC validation and DNS over HTTPS.

This combination provides strong DNS privacy. Your ISP cannot see your DNS queries because they are inside the encrypted WARP tunnel. The queries are resolved by Cloudflare, which has a strict no-logging policy for DNS data. And the responses are validated with DNSSEC.

If you prefer a different DNS provider, WARP allows you to configure custom DNS settings. You can use Google 8.8.8.8, Quad9 9.9.9.9, or any other resolver. The DNS traffic still travels through the encrypted WARP tunnel, so your ISP still cannot see it.

Performance and Limitations

WARP generally improves connection speeds, especially for users with poor ISP routing. Cloudflare's network has direct peering with major ISPs and content providers, which often results in faster data paths than the default ISP routing.

However, WARP can sometimes increase latency. The encryption and routing through Cloudflare's network adds overhead. For most users, this overhead is small and outweighed by the routing improvements. Users with very fast fiber connections might notice a slight slowdown.

WARP does not work with all services. Some streaming platforms block known VPN and proxy IPs. Since WARP uses Cloudflare's IP ranges, some streaming services block them. You might need to disable WARP to use these services.

For a comparison with other DNS-based privacy tools, see our guide on DNSCrypt and Stubby.