1.1.1.1 with WARP is Cloudflare's free application combining a public DNS resolver with an optional encrypted tunnel for your device's traffic.
The two halves do different jobs and are worth separating. 1.1.1.1 is a DNS resolver: it translates domain names into addresses, and replaces whichever resolver your internet provider assigned. Cloudflare commits to not logging the IP addresses making queries and to discarding query logs within 24 hours, which is a meaningfully different position from most ISP resolvers. It supports encrypted DNS over HTTPS and TLS, so the names you look up are not visible to the network between you and the resolver.
WARP is the second half: an encrypted tunnel carrying all your device's traffic to Cloudflare's network, which then forwards it on. It is built on the WireGuard protocol and is free without a data cap. WARP+ is a paid tier routing traffic over Cloudflare's optimised backbone, which can reduce latency on some routes.
It is important to be clear that WARP is not a conventional VPN. It does not let you choose an exit country or present as being somewhere else, so it will not unblock region-locked services. What it does is encrypt your traffic against the local network and your ISP, and improve routing. For public Wi-Fi that is exactly the right tool; for changing apparent location it is the wrong one.
Available for Windows, macOS, Linux, Android and iOS.
