One Video to Explain All Cloudflare VPNs & Get Free Enterprise Level Zero Trust VPN (WARP+, MASQUE)
Apr 12, 2026
My last video regarding Cloudflare WARP or WARP+ VPN was 2024. Since then the Cloudflare interface / dashboard layout has changed a lot, although the free vpn services are still same which I believe is most generous in the world so far, II do think now is a good time to refresh this topic and clear out some confusions coming from the vpn terms Cloudflare is using, such as 1.1.1.1, Warp, Warp+, Cloudflare One, Zero Trust, Tunnel, etc.
Basically, this video is to show you how to get a free individual / home user vpn (warp) even without an account, and how to get an enterprise level zero trust vpn (warp+ subscription, MASQUE protocol ) for free to connect to Internet. It is fast and secure since the whole backbone is based on Cloudflare global CDN network. The enterprise leve vpn is also easy to set up as long as you can get an email address to register an account , also provide a billing info. By the way, it is completely free for unlimited bandwidth and data usage, and only real limitation is for small team less than 50 users.
Related Post:
✍https://blog.51sec.org/2024/09/1111-free-dns-free-vpn-service-and-also.html
Related Videos:
🌟Free, Fast, Safe and Easy VPN from Cloudflare WARP+ with MASQUE Protocol - https://youtu.be/4_kMOV3pgkg
🌟Using Free Cloudflare VPN to Securely Access Your Home Internal Applications - https://youtu.be/KzpCWbS2l4Q
🌟Four Simple Steps to Create a Serverless Online Proxy through Cloudflare Workers - https://youtu.be/CC2krFoqL28
🌟[5 Mins Docker] Create Your Own Online Proxy Site to Bypass Certain Restriction - https://youtu.be/avr1XEKM-GI
🌟Create Your Own Free & High Performance Online Proxy Using Cloudflare Work - https://youtu.be/77-3clMa_lA
🌟Free Microsoft Built In VPN on Edge Browser - No Client Installation, Easy to Enable https://youtu.be/OQv1WvwCDLI
💖Chapters:
0:00 - Introduction
1:37 - Lets start it!
4:28 - 1. 1.1.1.1 Individual / Home User VPN
11:09 - 2. Get Free Cloudflare Account and Enroll into Free Enterprise Level Zero Trust VPN
14:53 - 3. Log in Free Cloudflare WARP+ VPN
23:48 - End Scene
✅#51Sec #NetSec #Cyber #Security #CyberSecurity #HomeLab
If you found this video has some useful information, please give me a thumb up and subscribe this channel to get more updates:
⚡https://www.youtube.com/c/Netsec?sub_confirmation=1
⚡Resource Collection and Bookmarks: https://sites.51sec.org/
Learning and Sharing - 🔊海内存知己,天涯若比邻! A bosom friend afar brings a distant land near!
Discord: https://discord.gg/fCW9phn, Blog: https://blog.51sec.org
Show More Show Less View Video Transcript
0:09
[music]
0:10
>> Hello everyone. Welcome back to my
0:12
channel. This is Johnny. In this video
0:14
I'm going to talk about the Cloudflare
0:17
VPN services. Everybody knows Cloudflare
0:20
providing free VPNs which you can find
0:23
out from 1.1.1.1
0:25
this website.
0:27
It's also providing zero trust
0:30
Cloudflare one. There's lots of terms
0:33
Cloudflare are using. They don't have a
0:36
good name convention and to represent
0:39
their service well. So even from their
0:42
own documentation it's not clear. As you
0:45
can see, they're talking about 1.1.1,
0:49
Warp, Warp Plus, and then they are
0:51
saying Warp Plus is paid service.
0:54
Actually, we can get it for free. You
0:56
don't have to pay. And that is
0:59
enterprise level free solutions provided
1:03
by Cloudflare.
1:05
You do see the Cloudflare one and then
1:07
you see zero trust and you see
1:10
Cloudflare access, Cloudflare tunnel. So
1:13
all those terms going to make you
1:15
confused. But in this video I'm going to
1:18
quickly walk you through and tell you
1:20
what's the best and why they are the
1:22
best and help you to get it set up in 10
1:26
minutes and then you can use it for your
1:29
home lab and then you can surf internet
1:32
without worrying about exposing your
1:34
privacy. Now, let's jump into it.
1:42
Actually, Cloudflare providing two types
1:45
of free VPN services. One is for
1:49
individual or home user personal usage.
1:54
1.1.1
1:57
a free app you can install on all your
2:00
devices without registering account and
2:03
then you can connect to internet to
2:04
protect your personal privacy.
2:08
Another type is enterprise level which
2:11
is for organization and for a
2:14
professional usage, but which is also
2:17
free with some limitation, but
2:21
still good for small team.
2:24
They call it zero trust or Cloudflare
2:27
one. And the difference between those
2:31
two type of free VPN services, I would
2:34
say it's one is called Warp, mostly free
2:38
to use and another is Warp Plus.
2:41
In the Warp Plus, even Cloudflare is
2:45
saying it's a paid subscription. You do
2:50
need to pay to get this Warp Plus
2:53
services. In this video I'm going to
2:55
show you a way to get it completely free
2:58
because as long as you have less than 50
3:01
users, then it's a free to use. You just
3:05
need to register account and then do
3:08
some basic setup. 10 minutes, you should
3:11
be able to bring your free Warp Plus
3:15
enterprise level VPN service and then
3:18
you can use it to protecting your
3:21
personal privacy and protecting your
3:24
home network and then go to internet.
3:27
The biggest advantage for the Warp Plus
3:30
is using Argo smart routing. What is
3:33
Argo smart routing? Basically, they can
3:36
choose the fastest the path to go to
3:39
your destination. Since it's free, why
3:41
we are not choosing this one? They give
3:43
you more benefit comparing to the free
3:47
Warp one. Of course, you have a new
3:49
protocol VPN protocol Mask you to use
3:54
which is also faster than WireGuard. It
3:57
can be easily configured from the Warp
4:00
Plus or zero trust portal. Comparing to
4:04
the free solution, you do have a way to
4:07
use it using command line, but I would
4:10
say let's use this enterprise level
4:13
configuration to enable it and use it
4:16
for free
4:18
without manually using command line to
4:21
tune your Cloudflare client on your
4:24
desktop. Now, let me show you how to do
4:26
it step by step.
4:33
I'm going to use Windows Sandbox to show
4:36
you how to get this because it's easier
4:40
for me to demonstrate when we are
4:42
testing it.
4:44
Let me start with 1.1.1 which is for the
4:47
individual and home users. So if you
4:51
have browser and then just open 1.1.1.1
4:56
this website, you should be able to get
4:58
this Cloudflare 1.1.1 page and then
5:01
download Windows since I'm using
5:03
Windows. It's a 129 megabyte file.
5:07
Depending on your downloading speed, it
5:09
shouldn't take long.
5:11
Open it, install it. It's quick, easy,
5:14
just a couple minutes and then you
5:16
should be able to get this up and
5:18
running. So we're going to see that
5:20
after this section, I'm going to show
5:22
you the enterprise level how we can use
5:26
that for free.
5:32
The installation is simple. Just next
5:35
and install.
5:36
The setup wizard going to quickly
5:39
get you installed Cloudflare Warp. So
5:42
here they call it Cloudflare Warp. So
5:45
those terms are always confusing people.
5:48
What is 1.1.1? What is Warp? What is
5:51
Warp Plus? How about the zero trust?
5:53
What is Cloudflare tunnel? What is
5:55
Cloudflare one? And there is also
5:58
Cloudflare access. Quite confusing, but
6:01
basically they are still same. It's just
6:03
in backend how Cloudflare push the
6:06
policy into your Cloudflare client. They
6:10
are all using same client on your
6:13
machine with
6:14
no matter it's enterprise level VPN or
6:17
it's home user VPN, the client is the
6:21
same, the Warp client.
6:23
But in the backend, depending on
6:27
the subscription or how you install or
6:30
configure it, they were using different
6:32
protocol and different services for you.
6:44
Now, finish it.
6:48
We do see there's a Cloudflare icon.
6:51
Click on it.
6:53
You will see this Cloudflare Warp
6:54
service is not available. Try rebooting.
6:57
Let me tell you this. You don't need to
6:59
reboot. You just need to go to
7:03
service.msc.
7:05
Just enable service. We need it.
7:09
You will find out Cloudflare Warp
7:11
services here. It doesn't allow you
7:14
because there's a dependency.
7:17
If you look at the Cloudflare
7:20
Warp dependencies
7:22
here they were telling you which service
7:25
they needed before they can start it.
7:27
It's WLAN AutoConfig services.
7:32
Let's go down.
7:34
Almost at the end
7:35
you will find the list WLAN AutoConfig.
7:39
In Sandbox, it's been disabled. So we
7:42
just put it to manual
7:44
and then we start this
7:46
WLAN AutoConfig service
7:49
and go back Cloudflare service and start
7:52
it.
7:54
Cloudflare Warp
7:56
Now we can start it.
7:58
Go back to your icon. Click on it.
8:01
Now you should be able to see something
8:03
here.
8:04
What is Warp? They're going to give you
8:06
some introduction.
8:09
Next.
8:11
Accept.
8:12
So your internet is not private. Of
8:15
course, we haven't
8:17
enable our VPN yet. Let's look at my IP.
8:27
This is my IP and location.
8:32
So if you do connect
8:36
you don't need to register anything
8:38
here. You don't need account. You just
8:41
connecting download the VPN client, Warp
8:44
client and then you can connect to it.
8:47
Now your internet is private. Let's
8:50
refresh
8:51
the page.
8:53
You will see
8:55
our IP just changed.
8:57
Cloudflare data center in Mississauga,
9:00
Ontario, Canada.
9:02
Our client
9:04
Cloudflare Warp client automatically
9:08
connecting to this data center.
9:11
From now on
9:12
your public IP going to be on this
9:15
public IP. Whenever you visiting any
9:18
website, they will show just this IP.
9:22
There's more I want to show is the
9:24
configuration.
9:27
So right now you can see there's two
9:29
mode. 1.1.1.1
9:32
is 1.1.1.1 with Warp which is default
9:35
mode
9:36
we are using.
9:39
You can see we are using Warp protocol.
9:41
DNS also using Warp which is WireGuard
9:45
VPN protocol to encrypt all your
9:48
traffic.
9:49
Your DNS, your connection.
9:52
You also can enable 1.1.1.1 for families
9:55
block malware and adult content as well.
10:00
If you look at the connectivity,
10:03
connected or connected.
10:08
We are still connecting to.
10:11
So, you can see all those
10:12
connectivities, connections, and the
10:14
traffic in and out, tunnel latency or
10:17
packet loss, all those things.
10:19
All good at this moment. It does also
10:23
has some
10:24
network configurations,
10:26
split tunnel, domain fallback, all those
10:29
things.
10:30
For the home user, individuals don't
10:32
need to worry about that at all.
10:34
So, now you know how to use Cloudflare
10:37
if you just want to download it without
10:40
hassle to register account using
10:42
enterprise level free VPN solution from
10:45
Cloudflare, then you can stop here
10:48
because all connections has been
10:51
encrypted, your internet is safe.
10:54
But, the for the next, I'm going to show
10:56
you how to
10:59
log with Cloudflare Zero Trust. That
11:01
will bring us some benefit from Warp
11:04
Plus subscription.
11:06
So, now let's go to next section.
11:14
Now, let's get Cloudflare free account
11:17
from Cloudflare webpage. It's completely
11:20
free. What you need is just an email
11:23
address.
11:25
Click start for free. And then here is
11:29
the sign up. You can use your Google
11:31
account, Apple account, GitHub account.
11:34
For me, it's easier to get a Google
11:36
account. I already have one, so let me
11:38
log in from here. So, this is the first
11:40
time for me to use this account to
11:42
register service from Cloudflare. So,
11:45
they can have some questions. What
11:47
you're going to use for?
11:49
I'm going to use for personal
11:51
and uh IT
11:53
and just myself.
11:55
Connect.
11:57
Public website, private apps.
11:59
Doesn't matter which you are choosing.
12:02
Eventually, they will come into here.
12:04
It's at
12:05
Cloudflare Zero Trust. You can go to
12:07
next.
12:09
Here is choose your team name. But, for
12:11
now, I will just cancel and exit here. I
12:14
don't want to go through this wizard
12:16
because not everyone will get that. Uh
12:18
once you register account for free, then
12:21
you will see this page. Let's log in to
12:24
the dashboard for your Gmail account.
12:27
Starting from here, you need to enroll
12:29
yourself only at Zero Trust
12:33
solution. So, click on the Zero Trust on
12:36
the left panel here. And then you need
12:39
to get it started. You might get a
12:41
wizard after you signed up your free
12:43
account, you might not based on your uh
12:45
selection. So, here is the way if you
12:48
didn't get that, then you can
12:50
directly go to the Zero Trust menu.
12:53
Get started. I do want to show you
12:57
the whole process, create your team and
12:59
then purchase because you do need to put
13:01
your credit card or PayPal information
13:04
in to start use this solution.
13:07
I'm going to use in this as an example
13:10
to create a team.
13:12
Zero Trust free. Select plan.
13:15
So, here is the payment. You do need to
13:18
provide your payment letter information.
13:20
You will need it if you want to use
13:22
enterprise level VPN and Zero Trust VPN
13:26
solution, you do need to provide certain
13:28
information. For me, I'm using PayPal,
13:31
so which is much easier.
13:35
Perfect. Agree and the continue.
13:39
Now,
13:41
your PayPal information has been added
13:43
in. You do need to provide your billing
13:46
address, which is
13:49
your PayPal information.
13:52
Review and purchase.
13:54
Don't be worry about the
13:56
cost you need to pay because it's
13:58
completely free here. You will see this
14:00
50 seats
14:02
limit, 24-hour longer retention, five
14:05
digital experience monitoring test to
14:07
API Casbian and the SSPN agent list and
14:10
client
14:12
based Zero Trust remote access. So, what
14:14
we are going to use in is client based
14:17
Zero Trust remote access.
14:21
Because we're going to install a client.
14:24
So, purchase it's $0 cost. For now,
14:27
there's a another wizard that you click,
14:29
you can start it based on your
14:31
situation, but we can skip this for now.
14:35
So, we need in this case,
14:38
you can get a tour
14:40
or you will get a tour later. Um we are
14:42
on the
14:43
Cloudflare One dashboard.
14:47
From here, we can uh start to use our
14:50
Zero Trust enterprise level VPN.
14:58
Now, we are at this Cloudflare
15:01
One overview page.
15:03
We can get started with Zero Trust.
15:07
How we can get started? Go to settings.
15:11
You're going to see your team name. We
15:13
already
15:13
knows that, so you can change it if you
15:16
need it.
15:19
But, we were using same 51sec-ca.
15:23
So, this is your team domain. Remember
15:25
that. We will use it later on to connect
15:27
with Here is download. Download latest
15:30
version Cloudflare One client and the
15:33
Cloudflare D. What is Cloudflare One
15:36
client? Let's look at it.
15:39
Windows.
15:40
Download it. You have beta option. You
15:42
have download release.
15:45
This is exactly same
15:49
what we have downloaded. As you can see
15:51
here, we downloaded before.
15:53
Now, they download just another copy,
15:55
same name, same size.
15:58
It's same thing. So, basically, we are
16:01
using same client
16:04
as a normal individual user or home user
16:08
used the one. So, we don't have to
16:10
re-download it or
16:13
reinstall it. We can use same.
16:15
Actually, in here, there's a account. We
16:18
can log in with Cloudflare Zero Trust
16:21
account.
16:22
So, here is another explanation
16:26
what is Cloudflare Zero Trust.
16:29
Lots of confusion things.
16:32
Now, you need to enter your team name
16:34
here.
16:35
We already know we have set it up.
16:39
51sec-ca.
16:40
Okay.
16:42
But, as you can see, we got an error
16:43
message. Enrollment request is invalid.
16:47
We haven't creating any enrollment
16:49
policy or rules for our devices or for
16:52
our user. So, we have to do that.
16:55
Of course, anybody can join into your
16:58
VPN, can use it without any loss
17:01
indication. That's what we going to do.
17:03
Uh it's a little bit confusing how you
17:05
can do that. Um you need to go to your
17:09
Cloudflare team center resource pages.
17:12
There's devices pages. Add a device. Um
17:16
here is a wizard. They're going to show
17:17
you the process and guide you to do
17:21
those policies, make it this much
17:23
simpler, it's easier. You don't need to
17:25
click download release. You mean you
17:27
don't have to download. Just continue.
17:29
Here is the
17:31
important part. They're going to create
17:32
an enrollment policies for you.
17:35
Um
17:35
They will ask you to add approved user,
17:38
whoever able to log in
17:41
using this account.
17:43
Basically, it's email and password.
17:45
They're going to ask you to have this
17:47
email. Okay, we can add more.
17:50
Uh let's do add a new policy to
17:53
enrollment. Continue.
17:55
And the select service mode. Uh from now
17:59
on, just do
18:00
next, next, next.
18:02
Continue, continue, continue.
18:05
We already complete the client
18:07
installation.
18:09
You can review the details.
18:12
View the rules
18:15
and the view the profile. Let's review
18:17
the rule.
18:18
So, we already have
18:20
created one before for my testing, but
18:22
doesn't matter. You can remove one of
18:25
them
18:28
because they are same. So, basically,
18:32
you will see one
18:34
allow email address. You are able to
18:40
reconfigure it.
18:43
Add more.
18:45
So, basically, you just add more email
18:46
address.
18:49
So, that's the allow emails we created.
18:52
Session duration is 24 hours. You can
18:54
change that to
18:56
whatever you need it.
18:58
From now on, you have policy. Now, we
19:01
should be able to get in again.
19:05
So, right now, we are using Warp. We are
19:07
not using Zero Trust.
19:11
We are using 1.1.1.1
19:14
with Warp.
19:17
The connection is Warp. DNS also using
19:19
Warp. This is our public IP, 161.212.6.
19:23
Remember those.
19:25
Connection.
19:27
Account. Here, we're going to make a
19:28
change. We're going to
19:30
con-
19:31
fig Cloudflare Zero Trust login.
19:38
That's our team name.
19:40
We're going to connect into there. But,
19:42
right away, we can uh get
19:46
this
19:49
prompt to asking you which email
19:51
address. If type the different email
19:54
address than you authorized before, then
19:57
you won't get the code because this is
19:59
my email address. I will get the code.
20:04
Here is the code I got. Latest code.
20:08
We can easily copy paste it in.
20:12
Now, you signed in.
20:14
You see, unable to connect. It will
20:17
disconnect it and then switch it from
20:20
Warp to Zero Trust.
20:23
Of course, you need to click this
20:25
connection
20:28
to
20:29
confirming tunnel connection.
20:31
And then you will see disconnected. Your
20:34
internet is protected here.
20:38
Let's see the difference.
20:40
Wow, the connection became Warp Plus.
20:43
DNS using HTTPS. The co-location center
20:46
is still YYC, but the public IP is
20:50
different comparing to previous one.
20:53
Well, that's good.
20:55
Uh connection here, you will see those
20:59
changes. Account change.
21:02
Connectivity change.
21:07
Advanced page still here.
21:10
If you want to check your IP address,
21:12
you can do that.
21:18
Cloudflare
21:19
Warp IP
21:21
It's in uh
21:24
different city. Now, it's not in
21:27
Mississauga. It's in different city.
21:30
It resolved into because it's a
21:33
different IP address than what we got in
21:35
Mississauga. It's in Windsor,
21:38
Ontario.
21:40
Again, that reason why we are using this
21:43
free enterprise level VPN is because of
21:47
the benefit we can get
21:50
from Cloudflare Warp Plus the
21:53
subscription.
21:55
You will get this Masque you VPN
21:58
protocol, which is better than
22:00
WireGuard.
22:02
You will get Argo Smart Routing
22:05
by default, which is using optimized the
22:08
path to go to internet.
22:11
One thing we do want to check is uh So,
22:15
we will see the user one user connected.
22:18
This is the user. We do want to see the
22:20
device profile. So, we created
22:23
onboarding device profile by using a
22:26
wizard. It's automatically created. You
22:28
don't even have to touch it.
22:31
So, we will see
22:34
which
22:36
protocol they're using.
22:38
By default, they're using WireGuard.
22:41
So,
22:43
we do need to switch from WireGuard to
22:46
Masque you if you want to take advantage
22:48
of that.
22:50
Confirm changes. So, now we can now use
22:53
in Masque you if you reconnect it again.
22:56
>> [snorts]
22:57
>> So, that's how easy you can switch it.
22:59
But if you don't use Zero Trust this
23:02
enterprise level VPN, then you even
23:06
won't have that option from your Warp
23:08
client. That's all for this video. I
23:12
hope you got the idea how to use
23:15
Cloudflare free enterprise Zero Trust
23:19
VPN for yourselves, for your family.
23:23
And also there are more videos you can
23:25
watch to get some ideas how to use in
23:29
Zero Trust VPN to access your home
23:31
network, access your home application,
23:34
how do you expose your internal
23:36
application to internet. That's all for
23:39
this videos. Please subscribe to my
23:41
channel if you haven't. And also give me
23:43
a thumb up if you like this video. See
23:46
you in my next one.
23:49
>> [music]
24:01
[music]
#Science
