A free, fast, one-tap encryption tool that is deliberately NOT an anonymity VPN - judge it as such. Cloudflare's own docs say the quiet part: WARP collects 'limited DNS query and traffic data (excluding payload)', keeps your app installation ID, transfer counters, average speed, and 'aggregate amount of traffic by website and by region', and hands your real IP to any site that runs on Cloudflare - which, on today's web, is a large share of destinations. There is no country selection and no streaming/geoblocking use case (AndroidPolice: 'WARP isn't a traditional VPN... doesn't provide location masking'). What you get for free is excellent: strong MASQUE encryption with post-quantum cryptography, one-tap setup, no account, no data cap, real protection on hostile Wi-Fi, and - per its China-using fans - often the most stable tunnel in censored networks, though India and Russia have blocked it by name. It replaces trust in your ISP with trust in a US advertising-adjacent CDN giant. For hiding from your school, your coffee-shop Wi-Fi or throttling: excellent. For hiding from Cloudflare itself, trackers, or a state: the wrong tool.
3 red flagsfacts verified - operator docs (WARP client overview/privacy/modes, master + app privacy policies, transparency hub), App Store listing, MakeUseOf review, AndroidPolice hands-on, Google News, HN thread and two Reddit archives fetched live 2026-09-29
'We do not use the data to identify who you are' comes with documented exceptions (aggregate traffic by website and region) - aggregation is the gray zone where de-anonymization risk lives
Cloudflare's dual role as both the tunnel and the destination for a big slice of the web makes 'privacy from Cloudflare' structurally impossible (HN critique)
US jurisdiction + global ClickHouse telemetry scale has fueled credible 'someone could tap this' arguments (HN FISA/PRISM thread) - no independent audit of the WARP telemetry pipeline exists
Review
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-10-21 · facts as of 2026-09-29 · how we verify
Honesty note: we have not run our own tests on Cloudflare WARP (1.1.1.1 app) yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.
Overview
Cloudflare WARP (1.1.1.1 app) homepage - live capture 2026-09-29
Cloudflare WARP (1.1.1.1 app) is a free consumer tunnel app from a US-based CDN giant, not a privacy-anonymity service. It offers one-tap encryption using MASQUE, replacing your ISP with trust in Cloudflare. The app collects limited traffic metadata and does not claim to be anonymous - its real value is fixing broken networks and bypassing local throttling, not hiding from states or trackers.
Logging & privacy
Cloudflare states it collects "limited DNS query and traffic data (excluding payload)" - including app installation ID, data transferred, average speed, and aggregate traffic by website and region. This is not a no-logs claim; it's a transparency report of structured telemetry. There is no audit, no warrant canary, and no court-tested privacy history. Jurisdiction is the US, with no legal barrier to data access. Traffic to Cloudflare-hosted sites reveals your real IP, making true privacy from Cloudflare impossible.
Pricing & the renewal trap
The base WARP service is free with unlimited data, no account, and no bandwidth cap. WARP+ - offering enhanced performance and unlimited data under subscription - is available via auto-renewing monthly in-app purchase, historically around $1.99/month, though exact pricing varies by platform and is not published on the web. Free WARP+ data can be earned through referrals.The 1.1.1.1 app is free and WARP+ is an optional subscription, so no renewal ratio or three-year total applies.
WARP uses MASQUE (a WireGuard predecessor with post-quantum encryption) and supports DoH/DoT in DNS-only mode. It includes obfuscation via HTTPS-like tunneling but lacks a kill switch, multihop, P2P, streaming support, or country selection. Split tunneling is available. Supported on Windows, Mac, Linux, Android, and iOS. Server count and country coverage are not disclosed. Performance varies: users report stability on hostile networks but increased latency in regions like India.
Ownership & track record
Operated by Cloudflare, Inc., a major US infrastructure company with global CDN and DNS reach. The data_quality is verified through official documentation and third-party reviews. Red flags include its dual role as network tunnel and web host, enabling IP leakage to Cloudflare-served sites, and its large-scale telemetry pipeline with no independent audit. No incidents of logging abuse are documented, but structural privacy risks remain unresolved.
Censorship resistance
WARP uses MASQUE obfuscation, making traffic resemble standard HTTPS, which helps evade deep packet inspection. It has shown unexpected resilience in censored environments - users in China report it outperforms dedicated tools on major carriers. However, it is blocked by name in Russia (Roskomnadzor) and India, limiting reliability in those regions. It is not designed for censorship evasion but can work where other tools fail.
Verdict
Use Cloudflare WARP if you need free, one-tap encryption for Wi-Fi safety, throttling bypass, or network fixes - not for anonymity or geo-unblocking. It shifts trust from your ISP to a US-based CDN with documented telemetry practices and no independent audits. Cloudflare does not pay review sites, and WARP’s transparency about its limits earns rare credibility in a dishonest market.
++ What holds up
Free with no data cap and no account (App Store listing + operator docs)
Strong modern crypto: MASQUE tunneling with post-quantum encryption (WARP modes docs)
Genuinely fast - users consistently report WARP beating commercial VPNs and even beating Psiphon/Lantern in China (r/VPN, r/chinalife)
One-tap simplicity on Android/iOS/desktop, no account, works from quick settings (AndroidPolice hands-on)
Split tunneling and multiple modes (DNS-only DoH/DoT vs full tunnel)
Backed by one of the world's largest networks - rarely down; encodes no ads and sells no data per its policy
-- What to watch
Metadata collection is the documented default: installation ID, transfer volumes, speeds, and aggregate traffic by website/region (WARP privacy docs)
No anonymity from Cloudflare: your real IP is disclosed to sites on Cloudflare's own network (HN voices + docs)
No location masking or country switching - cannot unblock geo-content (AndroidPolice)
Torrent-hostile in practice: detected by trackers/datacenters, no port forwarding (r/Piracy)
Trust model swaps ISP for a US company with PRISM-era baggage (HN debate); no warrant canary
Blocked by name in some jurisdictions (India, Russia per user reports); UX criticisms after feature changes (coywolf)
Pricing reality check
Intro price
see provider site
Notes
'1.1.1.1 with WARP is free, but WARP+ is a paid feature' - auto-renewing monthly in-app subscription (price set per platform/store, not published on the web; historically ~$1.99/month). Free WARP+ data accrues via referrals. (App Store listing fetched 2026-09-29.)
Check the renewal price above before any multi-year plan - true-cost calculator.
Is Cloudflare WARP legit?
Legal domicile: United States. Logging claim: Collects 'limited DNS query and traffic data (excluding payload)': app installation ID, amount of data transferred, average speed, and 'aggregate amount of traffic by website and by region'; states it does not use the data to identify users and does not sell/share it - evidence class: no logging claim at all. No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - operator docs (WARP client overview/privacy/modes, master + app privacy policies, transparency hub), App Store listing, MakeUseOf review, AndroidPolice hands-on, Google News, HN thread and two Reddit archives fetched live 2026-09-29 (not fully verified) as of 2026-09-29 - read the sources below.
The money trail - what review sites earn by recommending this
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
Cloudflare WARP (1.1.1.1 app) homepage - live capture 2026-09-29Cloudflare WARP (1.1.1.1 app) apps / download page - live capture 2026-09-29
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-09-29: Cloudflare WARP (1.1.1.1 app) scores 3.1/10 in our weighted review. We logged 3 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
What do I actually get with the free version?
Unlimited encrypted traffic via MASQUE, no account needed, with protection from local snoops and throttling. No country choice, no streaming unblocking, and your real IP goes to Cloudflare-hosted sites.
What is the renewal price and total cost over three years?
The base WARP service is free. WARP+ is a monthly auto-renewing subscription (historically ~$1.99/month), but `derived_pricing` shows no renewal ratio or three-year cash total due to lack of fixed multi-year billing.
What evidence supports the no-logs claim?
There is no no-logs claim - Cloudflare openly collects metadata including app ID, data transferred, speed samples, and aggregate traffic by site and region. No audits or court tests support privacy; evidence class is "none" for no-logs, and telemetry is confirmed.
Does it work in heavily censored countries like China or Iran?
Some users in China report WARP works more reliably than commercial VPNs across all major carriers. However, it is blocked by name in Russia and India, so performance depends on local filtering tactics.
Can I pay anonymously?
No payment is needed for the free WARP tier. WARP+ uses in-app purchases (Apple/Google), which tie to platform accounts. No crypto or anonymous payment options are offered.
What happens if the service shuts down?
Cloudflare could discontinue WARP at any time, as with any free consumer product. Past outages (e.g., London, Nov 2025) show it can be disabled regionally. No migration path or open-source fallback exists.
What’s the honest free or cheap alternative?
Apple Private Relay (for iCloud+ subscribers) offers similar scope with tighter privacy limits. For real anonymity, consider audited, independent providers - but expect to pay; true privacy isn’t free.
The meta-review: what the internet says about Cloudflare WARP (1.1.1.1 app)
We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Cloudflare WARP (1.1.1.1 app). Every claim links to its source so you can verify it yourself.
What other reviewers say (1)
Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.
Fetched 2026-09-29 (HTTP 200, Ankush Das, Dec 2022): 'Cloudflare WARP is technically a VPN, but it is not precisely like any commercial VPN service'; unlike traditional VPNs it uses Cloudflare's network 'to give you the fastest experience possible'; verdict: 'It provides you with the essentials for online privacy and keeps your network secure for free. That said, Cloudflare WARP is not a complete replacement for other VPNs, so evaluate your use cases before deciding.'
What users say (3)
Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.
Fetched 2026-09-29 (HTTP 200): 130 comments extracted - deep discussion of what WARP is (MASQUE/WireGuard tunnel), its IP-disclosure behavior to Cloudflare-hosted sites, why it is free, and trust questions (PRISM/FISA lineage, ClickHouse log-tapping debate).
Fetched 2026-09-29 (HTTP 200): 100 comments + 100 posts; permalinks cited in the voices.
AI fact summary - everything we know, compressed
Generated by Qwen3 on 2026-10-21 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.
Bottom line: Cloudflare WARP is a free, fast, one-tap encryption tool for mobile and desktop, not an anonymity service. It protects against Wi-Fi snoops and ISP throttling but does not offer country selection, streaming unblocking, or true privacy from Cloudflare. WARP+ is a paid upgrade for unlimited data, available via subscription or referrals.
The logging truth: Cloudflare admits it collects “limited DNS query and traffic data (excluding payload),” including your app installation ID, data transferred, average speed, and aggregate traffic by website and region - metadata that can de-anonymize users over time. This is documented in their own privacy policy, not contradicted by court cases, but it directly conflicts with any claim of being a no-logs VPN. Jurisdiction is the United States, with no independent audits of the telemetry pipeline.
Pricing reality: The base WARP service is free with no account, no bandwidth cap, and no data logging beyond metadata. WARP+ is an auto-renewing monthly subscription (historically ~$1.99/month, price varies by platform) for unlimited data; free WARP+ data can be earned through referrals. There is no long-term discount or multi-month billing - only monthly renewal.
What reviewers say vs what users say: Reviewers (AndroidPolice, MakeUseOf) accurately frame WARP as a non-traditional tunnel for speed and basic encryption, not a privacy or geo-unblocking tool. Users on Reddit confirm it works well for bypassing school or office filters and hostile networks, especially in China, but criticize its lack of privacy when visiting Cloudflare-hosted sites and increased gaming latency in regions like India. There is no affiliate bias detected - reviews and users align on WARP’s limits.
Who runs it: Cloudflare, Inc., a US-based global CDN and internet infrastructure company, operates WARP. This is critical: Cloudflare both routes your traffic and hosts a massive portion of the web, meaning your real IP is exposed to them on their own properties. WARP shifts trust from your ISP to a powerful, advertising-adjacent infrastructure player with no transparency on how internal data sharing is prevented.
Sources & how this review was built
Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.
Evidence classes on this page:[A] A: 8[B] B: 4[C] C: 3[D] D: 0(D stays empty until our own test phase)
A heavyweight free-mobile VPN from a Singapore entity with real strengths on paper - no account required, an unusually deep protocol lineup, a self-published…
auditcrypto accepted
intro $2.99 /mo
Singapore - LIGHTNINGLINK NETWORKS PTE. LTD. (own privacy policy and both app-store listings; Play developer address 8 Marina View #43-01 Asia Square Tower 1, Singapore 018960). Note: 2026 reviews still describe the operator as 'Free Connected Ltd., a private company based in Hong Kong' (Security.org) and 'Based in Hong Kong' (Cloudwards), while the operator's own live documents say Singapore - the entity migration is documented but the current corporate history is not publishedfree vpn 9 d ago
The most trustworthy free VPN on structural grounds: an anarchist Seattle collective that has run since 1999, funds itself by donations, asks no account…
VPN Gate is a legitimate, transparently-run academic experiment that is genuinely free forever and genuinely useful for one thing: getting past government…
auditopen source
intro $0 /mo
Japan - web site hosted at the University of Tsukuba campus (Tennodai 1-1-1, Tsukuba, Ibaraki 305-8573), administrator Daiyuu Nobori, Ph.D., Associate Professor, University of Tsukuba; the volunteer relays themselves are distributed worldwide and 'are not placed in the campus'; aggregated log servers are owned and managed by SoftEther Corporation, the joint research partner (about_us.aspx and about_abuse.aspx fetched 2026-11-03)free vpn 10 d ago
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.