Cloudflare One Client

This app, built around Cloudflare's WARP protocol and 1.1.1.1 DNS resolver, sits between your device and the internet. It replaces the DNS resolver your ISP or network assigns by default and encrypts the connection between your device and Cloudflare's edge, so that intermediaries between you and Cloudflare cannot see which sites you visit or tamper with your DNS queries. It behaves similarly to a VPN in that it tunnels your traffic, though its stated purpose is privacy and connection reliability rather than location spoofing.

The core WARP service is free and unrestricted for individual use. Cloudflare also sells WARP+, a subscription upgrade that routes traffic through a larger, more geographically distributed set of Cloudflare data centers, aimed at reducing latency and improving throughput compared to the free tier.

On Windows, this same installer is also distributed as the "Cloudflare One Client," the device agent organizations use to enroll employee machines in Cloudflare's Zero Trust platform (SASE/Gateway policies, access control, etc.). When installed and configured by an organization, its behavior and settings are managed centrally rather than by the end user, which is a different use case from the free consumer app most people install for personal privacy and DNS.