Overview
This client does two related jobs. The first is the encrypted resolver: instead of sending name lookups in clear text to whatever server the network handed out, queries go over an encrypted channel to the operator's resolver, which stops the local network from reading or rewriting them. The second is the tunnel, which wraps the machine's traffic in an encrypted transport and sends it to the nearest edge location.
The tunnel is not a location shifting service and it is worth being straight about that. It hides traffic from the local network and the intermediate carrier, and it often improves routing because it hands packets to a large backbone early, but it does not present the machine as being somewhere else. On congested or badly peered connections the routing improvement alone is noticeable, particularly on video and gaming traffic.
Configuration is close to nonexistent by design. Install, toggle it on, and it runs. Beyond that there are split tunnel rules for excluding applications or address ranges, a family filtering mode that blocks malware and adult domains at the resolver level, trusted network detection so it stays off at home and switches on elsewhere, and a connection diagnostic panel that reports the edge location and latency.
What it does well
Encrypted name resolution
Lookups go over an encrypted channel rather than in clear text, so the local network cannot read or redirect them.
System wide tunnel
All traffic from the machine is wrapped and sent to the nearest edge location, not just browser traffic.
Split tunnelling
Exclude specific applications, address ranges or domains so local devices and internal services stay reachable.
Filtering modes
Optional resolver level blocking of known malware domains, with a stricter family mode available.
Trusted networks
Detect known networks and stay off there while switching on automatically everywhere else.
Changes in this build
- Reconnection after sleep or a network change is now far quicker.
- Split tunnel rules extended to match on process path as well as address range.
- Lower battery use on laptops during idle periods.
- Diagnostics panel added showing edge location, latency and protocol in use.
- Fixed a conflict with some third party firewall drivers that blocked the tunnel adapter.
What is in the package
- WARP client installer, 64-bit
- Tunnel adapter driver
- Encrypted resolver components
- Default split tunnel and filtering profiles
- Multilingual interface files, 12 languages
System requirements
| Processor | Any x64 processor |
| Memory | 2 GB minimum |
| Graphics | Not applicable |
| Storage | 300 MB free |
| Display | 1024 x 768 minimum |
| System | Windows 10 or Windows 11, 64-bit, administrator rights for the adapter |
Installation
- Extract the archive and close any other tunnel client first.
- Run the installer with administrator rights so the adapter driver registers.
- Reboot if prompted, the adapter needs it on some machines.
- Toggle the connection on and confirm the edge location in the diagnostics panel.
- Add split tunnel exclusions for anything that has to reach the local network.
Before you start
Two tunnel clients installed at once will fight over routing, keep only one.
Printers and network shares usually need a split tunnel exclusion to stay reachable.
This does not present the machine as being in another country, it is a privacy and routing tool.
Questions about this title
Does it change my apparent location?
No, it encrypts and reroutes traffic to the nearest edge but does not present you as elsewhere.
Is it system wide?
Yes, unlike a browser proxy it covers every application on the machine.
Can I exclude specific apps?
Yes, split tunnelling matches on application, address range or domain.
Does it block anything?
Optional resolver filtering blocks known malware domains, with a stricter mode available.
About this listing
This entry was checked on a clean install of Windows 10 / 11 (64-bit) before it was published, and it is rechecked whenever the package is rebuilt. The figures on this page come from the site index rather than from the publisher, so the download count is what people here have actually pulled.
If a mirror stops answering, use the contact form and it gets replaced. Reports about a specific title are handled faster than general messages because they name the file, the mirror and the point at which the transfer stopped.
Requests for a different version, a different language build or an older release go on the requests page. Older versions of a title are usually still held even when only the current one is listed.