Usque is an unofficial client for Cloudflare WARP that runs on Windows, Linux and Android. It gives you a system VPN, a SOCKS5 proxy and an HTTP proxy over the MASQUE protocol, plus chain proxy and routing rules for people who want more control over where their traffic goes.
Developer: GeorgeXie2333 · License: MIT (open source) · Price: Free
Before you start: download the APK only from https://github.com/GeorgeXie2333/usque-app/releases (use the universal APK if you are unsure of your device's ABI). When installing, Android will show an "unknown sources" or unknown-publisher style warning because the app is not from Google Play and uses a self-signed certificate; this is expected for this project and is covered in the docs/INSTALLATION.md Android developer verification notes. On first run you will register a Consumer WARP account (a WARP License Key is optional); the app does not accept importing an existing WARP Secret.
Official file from the developer's release · Nov 6, 2026 · SHA-256 1642f8e6566f8d91…
Key features
- System VPN (TUN), SOCKS5 proxy and HTTP proxy share one WARP connection and can run together
- Chain proxy lets WARP traffic exit through OpenVPN, WireGuard, Proton VPN, VPN Gate, HTTP or SOCKS5
- Routing rules (DIRECT / REJECT / PROXY) for domains and CIDRs, plus ad-blocking rules and country-based direct routing
- Encrypted DNS (DoH or DoT) for the WARP exit and for direct-rule queries
- Network diagnostics showing latency, packet loss and 60-second trends
- Profiles let you save and switch between local connection scenes
Why isn’t Usque on Google Play?
Pre-1.0 Android packages are installed outside Google Play and use a fixed, project-controlled self-signed certificate, so Android shows an install warning you should not bypass by disabling protections. It is published by its developer on GitHub, not on F-Droid.
Is Usque safe?
The project is open source under the MIT license, and the official APKs are published on the GitHub Releases page of GeorgeXie2333/usque-app. Before installing, the README recommends checking the package's SHA-256 against the published SHA256SUMS and GitHub's asset digest, and verifying the signer fingerprint listed in the release notes; stop if anything does not match. The app requests VPN permission on Android to route system traffic, and only asks for optional notifications beyond that. Usque comes straight from its developer rather than through Google Play, so it hasn’t gone through Google’s app review. As with any app, check the permissions it asks for and install it if you’re comfortable with them.
How to install
- Tap the download button above: the APK file downloads straight to your phone.
- When Android asks, allow your browser to install unknown apps.
- Open the file and tap Install.
FAQ
Is Usque free
The README does not list a price; it is an open-source MIT-licensed project you download and build or install yourself from GitHub Releases.
How do I turn on the VPN and proxies on Android
Open Proxy, turn on VPN under Device traffic, and turn on the SOCKS5 proxy or HTTP proxy switch at the top of its own section, then connect from Home. These settings share one WARP connection and can run at the same time.
Can I upgrade and then go back to an older version
Upgrading migrates your configuration schema forward (for example v0.3.4 migrates schema 26 to 27), and older clients cannot read the newer schema. Reinstalling an older package does not reverse this, so check the configuration compatibility notes in docs/INSTALLATION.md before upgrading.
More free apps you won’t find on Google Play: Open Source Apps · Best Android apps not on the Google Play Store.
Frequently Asked Questions
Is Usque free
The README does not list a price; it is an open-source MIT-licensed project you download and build or install yourself from GitHub Releases.
How do I turn on the VPN and proxies on Android
Open Proxy, turn on VPN under Device traffic, and turn on the SOCKS5 proxy or HTTP proxy switch at the top of its own section, then connect from Home. These settings share one WARP connection and can run at the same time.
Can I upgrade and then go back to an older version
Upgrading migrates your configuration schema forward (for example v0.3.4 migrates schema 26 to 27), and older clients cannot read the newer schema. Reinstalling an older package does not reverse this, so check the configuration compatibility notes in docs/INSTALLATION.md before upgrading.



















Leave a Comment