Cloudflare One Agent1.12.6 - App Store

Cloudflare Zero Trust Client - the Enterprise-supported application that makes your Internet more private and secure.

The Cloudflare Zero Trust Client allows you to protect corporate devices by securely and privately sending traffic from your device to Cloudflare’s global network, where Cloudflare Gateway can apply advanced web filtering. Cloudflare Zero Trust Client makes it possible to apply Zero Trust policies that check for a device’s health before being able to access corporate applications.

. A better way to connect
Cloudflare Zero Trust Client replaces the connection between your phone and the Internet with a modern, optimized, protocol that protects your device and access to corporate resources.

. Stronger privacy
Cloudflare Zero Trust Client prevents third-party surveillance by encrypting more of the traffic leaving your phone. We believe privacy is a right. We won't sell your data.

. Increased security
Cloudflare Zero Trust Client protects your device from security threats like malware, phishing, crypto-mining and other security threats.

. Easy to use
One-touch setup for a safer and more private Internet. Install it today and experience increased privacy in seconds.

Version History New Cloudflare One app changes:
- Added support for DNS resolution of bare domain names and wildcard entries.
- Fixed a networking issue that could lead to increased CPU and battery utilization.
- Fixed an issue where managed network profiles would not properly update when switching networks.
- Fixed an issue where the dashboard would not reflect the device’s managed network.
- Fixed an issue with excessive retries during managed network detection.

Zero Trust docs:
https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/ 1.12.6 4d ago - Fixed an issue where the client failed to switch device profiles when transitioning between managed and unmanaged networks.
- Fixed a crash where the app entered a continuous connect/disconnect loop and crashed following a device registration deletion in the Cloudflare dashboard. The client now detects this surfaces a ‘Reset All’ option to recover.
- Added wildcard domain support to split tunnel exclude and include configurations. The client now dynamically resolves and routes wildcard entries at DNS query time.
- Fixed a crash that occurred when triggering "Reset All Settings" while the app was disabled for a specific Wi-Fi connection.
- Fixed an issue where the admin-override pause timer took precedence over the device profile auto-connect timer. Auto-connect now correctly takes priority. 1.12.5 Aug 12 New Cloudflare One app changes:

- Adjusted TCP fallback time for MASQUE tunnels to further improve connectivity on unreliable networks.
- Reduced events logged to reduce diagnostic log size and legibility. 1.12.4 Jul 1 New Cloudflare One app changes:

- Added a TCP fallback for the MASQUE tunnel protocol to improve connectivity on networks that block UDP or HTTP/3.
- DNS Resolver Policies now correctly resolve custom .local domain suffixes.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/ 1.12.3 Apr 12 New Cloudflare One app changes:

Bug fixes and performance improvements.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.12.2 Mar 11 New Cloudflare One app changes:

Bug fixes and performance improvements.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.12.1 Feb 20 New Cloudflare One app changes:

Bug fixes and performance improvements.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.12.0 Feb 13 - Improvements to reduce device battery use when running the client
- Additional bug fixes and performance improvements. 1.11.1 08/11/2025 - DNS over HTTPS traffic is now included in the WARP tunnel by default.
- QLogs are now disabled by default and can be enabled in the app by toggling on ‘Enable qlogs’ under Settings > Advanced > Diagnostics > Debug Logs. The QLog setting from previous releases will no longer be respected.
- The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be enabled by MDM. 1.11.0 07/01/2025 - Improved error messages displayed in the client GUI.
- Improved URL handling for URL team name insertion feature. 1.10.1 05/14/2025 New Cloudflare One app changes:
- Improved in-app error messages
- Improved mobile client login with support for team name insertion by URL
- Bug fixes and performance improvements
Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.10 03/19/2025 New Cloudflare One app changes:
- Fixed an issue where the MDM parameters were not correctly applied to the WARP client.
Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.9 02/13/2025 - Added support for per-app VPN configuration.
- Fixed issue where some users couldn't connect unless they rotated their keys after update.
- Fixed a potential crash when connecting to the tunnel.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.8 12/19/2024 - Resolved an issue where devices were incorrectly marked as Disconnected in the Dashboard.
- Resolved an issue preventing users from connecting to the WARP tunnel after updating the app to version 1.5.
- Fixed inconsistent notifications and occasional crashes when a user’s device is connected to a non-RFC1918 network.
- Fixed incorrect classification of IP packets.
- Fixed an issue where DNS starts failing after switching to a NAT64 network
- Fixed an issue where the first connection attempt always failed after rotating the WARP keys for a new tunnel protocol.
- Added support for the MASQUE protocol.
- Added support for admin to define tunnel protocol in the MDM file.
- Added support for admins to add multiple configurations in the MDM file. The user can switch among the multiple available configurations.
- All API and DNS traffic is now FIPS-compliant.
- Fixed a crash while deserializing the data from the MDM file.
- Fix to disable the logout from the Zero Trust organization when the MDM file is present.
Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.7.1 12/06/2024 - Resolved an issue preventing users from connecting to the WARP tunnel after updating the app to version 1.5.
- Fixed inconsistent notifications and occasional crashes when a user’s device is connected to a non-RFC1918 network.
- Fixed incorrect classification of IP packets.
- Fixed an issue where DNS starts failing after switching to a NAT64 network
- Fixed an issue where the first connection attempt always failed after rotating the WARP keys for a new tunnel protocol.
- Added support for the MASQUE protocol.
- Added support for admin to define tunnel protocol in the MDM file.
- Added support for admins to add multiple configurations in the MDM file. The user can switch among the multiple available configurations.
- All API and DNS traffic is now FIPS-compliant.
- Fixed a crash while deserializing the data from the MDM file.
- Fix to disable the logout from the Zero Trust organization when the MDM file is present.
Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.7 11/21/2024 Re-release of previous version (1.4) version due to issues customers experienced with 1.5 update. Features previously introduced in 1.5 will be re-added in a coming release.

Notable changes:
- Fixed an issue with endpoint IP settings in MDM files
- Cleaned up some erroneous links
- Updated the Terms of Service 1.6 10/01/2024 New Cloudflare One app changes:

- Added support for the MASQUE protocol.
- Added support for admin to define tunnel protocol in the MDM file.
- Added support for admins to add multiple configurations in the MDM file. The user can switch among the multiple available configurations.
- All API and DNS traffic is now FIPS-compliant.
- Fixed a crash while deserializing the data from the MDM file.
- Fix to disable the logout from the Zero Trust organization when the MDM file is present.

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.5 09/30/2024 New Cloudflare One app changes

Notable changes:
- Fixed an issue with endpoint IP settings in MDM files
- Cleaned up some erroneous links
- Updated the Terms of Service

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.4 06/27/2024 New Cloudflare One app changes

- The app displays Gateway Network and HTTP block notifications
- Fixed an issue with iOS 17.x with the iPhone entering a loop while trying to connect
- Fixed an issue to resolve DNS servers when the default path DNS servers is empty
- Fix a problem with re-auth notification banners not appearing after the device sleeps
- Delivered additional bug fixes, connectivity improvements, and increased stability

Zero Trust docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp 1.3 01/04/2024 Our latest iOS client with improvements and bug fixes to keep your DNS fast and connection secure on the Internet.

Notable changes:
* Added iOS Rapid Security Response extra version field support to OS Version posture check.
* Fixed an issue with local domain fallback feature to match DNS query name with longest suffix.
* Fixed an issue with tunnel connection on certain Managed networks.

Known Issue:
We currently do not support Gateway DoH subdomain without logging into ZT 1.2 08/31/2023 1.1 08/17/2023