A WireGuard config for Cloudflare WARP, generated on the spot.
Private key generated locally, never sent anywhere. Free, no account needed.
Advanced options
How to use this config
Your warp.conf file contains a private key — treat it like a password. Import it with the official WireGuard app below, then delete stray copies once it's in.
1. Install the WireGuard app
- Windows: wireguard.com/install — download the .msi
- macOS: Mac App Store, or the .dmg on wireguard.com/install
- iOS / Android: App Store or Google Play (F-Droid also works on Android)
- Linux: your package manager, e.g.
sudo apt install wireguard
2. Import your config
- Phone: tap + in the app → Scan from QR code, then scan the QR code above. Or tap + → Import from file and pick the downloaded
warp.conf. - Windows / macOS app: click Import tunnel(s) from file and select
warp.conf. - Linux (CLI):
sudo mv warp.conf /etc/wireguard/wg0.conf && sudo wg-quick up wg0
3. Turn it on and verify
- Toggle the tunnel on in the app (or it's already active after
wg-quick upon Linux). - Visit 1.1.1.1/help — it should confirm
warp=ononce connected.
Notes
- Each
warp.confregisters one device. Generate a fresh config per device rather than reusing the same file everywhere. - If a network blocks the connection (hotel/school wifi, some carriers), try a different network — WireGuard uses UDP, which some networks restrict.
- To stop using it, just delete or deactivate the tunnel in the app — nothing else to clean up.
What actually leaves your browser
- Your private key never does — it's generated and stays in this page.
- Only your public key and device type are sent to Cloudflare's WARP registration API, via a CORS proxy since that API doesn't allow direct browser requests.
- No accounts, cookies, or analytics. Nothing persists between visits — reload the page and your key, config, and QR code are gone.
- Prefer not to trust a browser tab? Use the command-line script instead — same registration flow, runs entirely local.
Privacy Policy
This Privacy Policy explains what happens to data when you use warp-gen (the "Tool"), a static, client-side web page for generating a WireGuard configuration compatible with Cloudflare WARP. warp-gen is an independent project and is not operated by, or affiliated with, Cloudflare, Inc.
Data generated on this page
- WireGuard keypair. Your private and public keys are generated entirely in your browser using client-side JavaScript. Your private key is never transmitted anywhere and is never written to this operator's servers, because this Tool has no backend server that receives it.
- No local persistence of keys or configs. The Tool does not use cookies, sessionStorage, localStorage, or IndexedDB to store your keys, configuration, or anything else you generate. Everything lives only in page memory and is lost on reload, navigation, or tab close.
- Visible in the DOM while on screen. While a config is displayed, its text (including your private key) briefly exists in the page's DOM and in a canvas element for the QR code, like any on-screen web content. Browser extensions with broad page-content permissions (some clipboard managers, some password managers, accessibility/screen-reader tools, etc.) can technically read visible page content, independent of anything this Tool sends over the network. If you don't fully trust your browser's installed extensions, consider a clean/incognito profile with no extensions enabled, or the command-line script instead.
Data sent to third parties
- To register a device, your public key, device type, and locale are sent to Cloudflare's WARP device-registration endpoint. This is an unofficial, undocumented API that Cloudflare operates for its WARP client apps; we do not control it, and Cloudflare's own privacy practices apply to any data it receives.
- Because that endpoint blocks direct browser requests, the request is relayed through a third-party CORS proxy service. That proxy operator can see the request (including your public key and IP address) in transit, even though it is not the intended data controller. If you would rather avoid any third-party proxy, use the command-line script instead, which talks to Cloudflare directly from your own machine.
- Your private key is never included in any request sent by this Tool.
Analytics, tracking, and cookies
- This page sets no cookies and includes no analytics, advertising, or tracking scripts of its own.
- Fonts are loaded from a third-party font host and the QR code library from a third-party CDN; those requests may be logged by those hosts under their own respective policies, independent of this Tool.
Your responsibility
- The generated configuration file and QR code contain your private key. Treat them like a password: download, copy, or screenshot them only to places you trust, and use "Clear from screen" plus your own clipboard/downloads cleanup on shared or public devices.
- Your use of Cloudflare's WARP service, once registered, is governed by Cloudflare's own Privacy Policy and Terms of Service, not by this page.
Changes
Because this is a static page with no account system, there is no mechanism to notify individual users of changes. Check this section for the current version whenever you use the Tool.
Terms of Use & Disclaimer
Not affiliated with Cloudflare. warp-gen is an independent, unofficial, open-source community tool. It is not made by, endorsed by, sponsored by, or in any way officially connected to Cloudflare, Inc., WireGuard, or Jason A. Donenfeld. "Cloudflare," "WARP," and "WireGuard" are trademarks of their respective owners and are used here solely to describe interoperability.
No warranty
The Tool, its source code, and any configuration it generates are provided "as is" and "as available," without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, or that the Tool will be uninterrupted, secure, or error-free.
Unofficial API dependency
- The Tool relies on an unofficial, undocumented Cloudflare API and a third-party CORS proxy, neither of which we control or guarantee. Either can change, rate-limit, block, or shut down access without notice, at any time, which may break the Tool or cause registration failures.
- We make no representation that using the Tool will always successfully register a WARP device or that any given account tier, quota, or feature will remain available.
Your responsibilities
- You are solely responsible for complying with Cloudflare's Terms of Service and Acceptable Use Policy when you register a device through this Tool.
- You are solely responsible for safeguarding the private key and configuration file generated by the Tool. Loss, theft, or exposure of that key is your responsibility, not ours.
- You are responsible for verifying that use of a VPN/WARP tunnel is lawful in your jurisdiction and appropriate for your use case.
Limitation of liability
To the maximum extent permitted by applicable law, in no event will the creators, contributors, or operators of warp-gen be liable for any direct, indirect, incidental, special, consequential, or exemplary damages — including loss of data, loss of privacy, network downtime, or unauthorized access — arising out of or in connection with your use of, or inability to use, the Tool or any configuration it produces, even if advised of the possibility of such damages.
Indemnification
You agree to hold harmless the creators and contributors of this Tool from any claims, losses, or damages arising from your use of the Tool or your violation of any third party's terms of service, including Cloudflare's.
Open source
The full source is publicly available for review on GitHub, including the standalone command-line script, so you can audit exactly what the Tool does before trusting it with key generation.
Not legal advice
This page is general informational boilerplate provided for transparency and is not legal advice. If you need Terms of Service or a Privacy Policy tailored to your specific deployment, audience, or jurisdiction, consult a qualified attorney.