Cloudflare's "1.1.1.1" app is one of the most common search queries sitting right at the intersection of DNS and VPN topics, and the confusion makes sense — the same app can run in two genuinely different modes. Let's break down what it actually is, and at what point it becomes a VPN at all.
Mode 1: DNS-only — this isn't a VPN
1.1.1.1 is, first and foremost, Cloudflare's public DNS resolver, launched in 2018 with a focus on speed and privacy: the service states it doesn't retain DNS query logs for advertising purposes beyond 24 hours, and has had that policy independently reviewed. In DNS-only mode, the app simply changes which server resolves domain names into IP addresses — everything else about your traffic stays unencrypted and your visible IP unchanged. That speeds things up and protects against DNS spoofing, but it isn't a VPN in the usual sense.
Mode 2: WARP — now it's actually a VPN
The app's second mode turns on WARP — a free WireGuard-based tunnel that encrypts all of your device's traffic and routes it through Cloudflare's network. Technically, that is a VPN: an encrypted connection into someone else's network. But WARP's feature set is quite different from a regular VPN subscription — see the full comparison in "WARP vs. a Regular VPN".
What WARP doesn't do, unlike a classic VPN
- No server country selection — WARP automatically connects to the nearest Cloudflare location, not wherever you'd need for a geo-location change.
- Doesn't unblock streaming geo-restrictions — Netflix and similar services don't treat Cloudflare's IP ranges as "safe" for catalog unblocking.
- No dedicated torrenting servers — WARP isn't positioned as a P2P traffic tool.
When WARP is a good choice
If the goal is hiding your traffic from your own ISP and speeding up an unstable Wi-Fi connection without paying a cent, Cloudflare WARP is a solid free option. The paid WARP+ tier adds Cloudflare's optimized routing (Argo) for more stable speed, but doesn't change the underlying geography limitations.
So is 1.1.1.1 a VPN or not?⌄
It depends which mode is active in the app. DNS-only mode is not a VPN. Mode with WARP turned on is, technically, a VPN — just with a smaller feature set than paid providers.
Is it safe to use 1.1.1.1?⌄
Yes, it's a legitimate public service from Cloudflare, one of the largest internet infrastructure companies. The real question isn't safety — it's whether WARP actually solves your specific problem (see the limitations section above).
How do I turn on WARP instead of just DNS?⌄
A step-by-step guide is in "Cloudflare WARP: How to Set It Up".
