Cloudflare WARP (1.1.1.1 + WARP) review
Cloudflare WARP is a practical pick if you want a free VPN with signup that requires no email, plus tools for selective routing. Watch the audit scope: the public assurance report covers Cloudflare’s DNS resolver, not the WARP traffic tunnel.
How we make money: links may become affiliate links, but our scoring code never sees commissions, and most providers listed pay us nothing.
Score breakdown
One formula for every commercial vpn, explained on how we score VPNs.
Plans and the true 3-year price
| Plan | Term | Monthly | Renews at | 3-year cost | Devices |
|---|---|---|---|---|---|
| WARP (free) | 1 month | $0 | $0 | $0 | Unknown |
| WARP+ Unlimited | 1 month | See site | See site | See site | 5 |
Providers change prices often, and we regularly verify prices against their own pricing pages, though small differences from current prices are possible. Prices checked 11 Oct 2026. Refund window: Unknown.
Who it's for
Pick it if
- You want a free plan with no email required at signup.
- You use a Linux CLI in your workflow.
- Split tunnelling and a SOCKS5 proxy match your routing needs.
- You value named leadership and public transparency reporting.
Skip it if
- You require independent assurance covering the VPN tunnel’s privacy commitments.
- You want to pay with cash, Monero or Bitcoin.
- Your main task is private access to your own machines, which needs a separate access-design comparison.
Audit evidence
| Date | Auditor | Type | Scope | Report |
|---|---|---|---|---|
| 23 Mar 2026 | KPMG LLP | No-logs assuranceSibling product, not scored | Controls over the 1.1.1.1 Public DNS Resolver's privacy commitments, period 2024-01-01 to 2024-12-31. Covers the DNS resolver only, not the WARP traffic tunnel. | Public report |
Ownership
Security and features
- WireGuardYes
- RAM-only serversUnknown
- Full-disk encryptionUnknown
- Post-quantum optionYes
- Open-source appsUnknown
- Kill switchUnknown
- Split tunnellingYes
- Multi-hopUnknown
- Port forwardingUnknown
- IPv6Unknown
- WireGuard config exportUnknown
- SOCKS5 proxyYes
- Custom DNSUnknown
- Linux app (GUI)Unknown
- Linux CLIYes
- Dedicated IPUnknown
Network Provider-reported
- ServersNot stated
- CountriesNot stated
Account and payment privacy
- Sign up without emailYes
- Account-number loginUnknown
- CashNo
- MoneroNo
- BitcoinNo
Our take
The main privacy question is what the independent evidence actually covers. KPMG LLP’s no-logs assurance engagement, dated 23 Mar 2026, examined controls over the public DNS resolver’s privacy commitments. Its report is public, but the resolver is a sibling product: the engagement does not cover the WARP traffic tunnel. You should not treat it as independent assurance of WARP’s traffic handling. WireGuard support and a post-quantum option are useful security features, but neither establishes what happens to data after it reaches the service.
Cloudflare, Inc. owns WARP, with no parent group found. Named leadership, a transparency report and a warrant canary give you identifiable accountability and material to examine when deciding whether to trust the operator. Those disclosures serve a different purpose from an audit of the tunnel’s privacy commitments. Incidents: none found in our review. That finding is limited to what the review uncovered; it is not proof that nothing has ever happened or a guarantee about future handling.
WARP (free) has a listed term of 1 month, starts at $0 a month and renews at $0 a month. Its total across the comparison period is $0, so an introductory discount expiring is not the budget concern here. WARP+ Unlimited has a listed term of 1 month; decide whether to subscribe by checking the checkout terms against a specific need. Support runs through in-app feedback and bug reports, which you should factor into any team adoption decision.
WARP fits developers who can put its Linux CLI, split tunnelling and SOCKS5 proxy to use, and privacy-minded readers who want to start without handing over an email address. Against alternatives such as Mullvad VPN, IVPN and Proton VPN, compare the scope of privacy evidence and your required controls before choosing on cost alone. WARP’s resolver assurance should not stand in for that comparison. If your actual goal is reaching your own machines, first define device authentication, access permissions and revocation. Our Cloudflare Tunnel vs Tailscale guide addresses that separate access decision.
FAQ
Has Cloudflare WARP been independently audited for privacy?
The public KPMG LLP no-logs assurance engagement dated 23 Mar 2026 covers controls over the public DNS resolver’s privacy commitments. It concerns a sibling product and does not cover the WARP traffic tunnel, so it cannot establish WARP’s tunnel privacy claims.
Is Cloudflare WARP free after the initial term?
WARP (free) starts at $0 a month and renews at $0 a month, with a listed term of 1 month. The free plan’s listed renewal does not introduce a subscription charge.
Can I use Cloudflare WARP without an email address?
Yes, signup without email is supported. That reduces the personal information needed to get started, but it does not establish what data the tunnel processes or retains.
Does Cloudflare WARP work with a Linux command line?
WARP has a Linux CLI, and its feature set includes split tunnelling and a SOCKS5 proxy. Check how the routing controls apply to your intended setup before making them part of a development or team workflow.
Should I choose Cloudflare WARP to reach my own servers?
Start by defining which devices and people need access, how they authenticate and how you will revoke access. Use our Cloudflare Tunnel vs Tailscale comparison to assess that requirement separately from WARP’s commercial VPN features.