How to use Cloudflare WARP on RDP


Install WireGuard

  1. Download the official WireGuard client from wireguard.com/install.
  2. Run the installer and follow the prompts to install WireGuard. It’s quick and straightforward.
  3. Once installed, open the WireGuard app to confirm it’s ready.

Download wgcf Tool

  • Visit the wgcf GitHub releases page and download the latest wgcf binary for Windows (e.g., wgcf_windows_amd64.exe).
  • Save it to a folder you can easily access, like C:\wgcf.
  • Rename the file to wgcf.exe for simplicity.

Register a Cloudflare WARP Account

Open the Command Prompt:
Press Win + R, type cmd, and hit Enter.

  • Navigate to the folder where you saved wgcf.exe:
cd C:\wgcf
  • Register a free WARP account by running:
wgcf.exe register

This creates a file called wgcf-account.toml in the same folder. Keep it safe!

Note: If you have a WARP+ license key (optional for better performance), edit wgcf-account.toml with Notepad, add your license key under license_key = “YOUR_KEY”, and run:

wgcf.exe update

Generate a WireGuard Profile

In the same Command Prompt, generate a WireGuard configuration file:

wgcf.exe generate

This creates a file named wgcf-profile.conf in the C:\wgcf folder.


Import the Profile into WireGuard

  1. Open the WireGuard app.
  2. Click Import tunnel(s) from file.
  3. Browse to C:\wgcf and select wgcf-profile.conf.
  4. Click Open. The tunnel will appear in the WireGuard app with a name like wgcf-profile.

 Add rule to Wireguard to allow RDP

    • Open the Command Prompt:
      • Press Win + R, type cmd, and hit Enter.
    • Type ipconfig and copy the ip of the default gateway

  • add default gateway to allowed ip’s
[Peer]
PublicKey = bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
AllowedIPs = [YOUR_GATEWAY_HERE]/32, 0.0.0.0/1, 128.0.0.0/1, ::/1, 8000::/1
Endpoint = engage.cloudflareclient.com:2408

  • Uncheck the block untunneled traffic option

Activate the VPN

In the WireGuard app, click on the imported tunnel and select Activate.
You should see a green status indicating the tunnel is active.

To confirm WARP is working, visit cloudflare.com/cdn-cgi/trace in your browser. Look for warp=on (or warp=plus if using WARP+).

fl=67f97
h=cloudflare.com
ip=2a09:bac5:2aa5:2a0::43:61
ts=1747689164.305
visit_scheme=https
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
colo=TXL
sliver=none
http=http/2
loc=DE
tls=TLSv1.3
sni=plaintext
warp=on
gateway=off
rbi=off
kex=X25519MLKEM768

Test and Enjoy

Check your internet speed or browse a few websites to ensure everything works.
To disconnect, return to the WireGuard app and click Deactivate.


If you found this post helpful, you can support me by making a donation. Your contribution is greatly appreciated!

USDT / Network ✅ TRON: TPKZiQmmyzrfn9nGR9zyLJtC7qWQfzmykF

USDT Network ✅ BSC BNB Smart Chain (BEP20): 0x133879bb1968563a5d72df6f5621d2df98e7ef76

BTC / Network ✅ BSC BNB Smart Chain (BEP20): 0x133879bb1968563a5d72df6f5621d2df98e7ef76