Taqin

Posted on Apr 4

I manage 11 Cloudflare domains from my phone now

#cloudflarechallenge #reactnative #api #mobile

Managing 11 Cloudflare domains used to mean opening the dashboard on a laptop every single time.

Change a DNS record? Laptop. Purge cache? Laptop. Check if traffic is spiking? Laptop.

Got tired of it.

So I made CloudFlare Mobile — an Android app that gives you full control of your Cloudflare account from your phone.

Open source. MIT license. No tracking. No telemetry.

What it does

Zone Management

All your domains in one scrollable list. Search by name, see status badges (active/pending), nameserver count. Tap any zone to dive into its settings.

DNS Records

Full CRUD. A, AAAA, CNAME, MX, TXT, SRV — all record types supported. Toggle Cloudflare proxy (orange cloud) on or off per record. Filter by record type. Search by name.

Adding a record is the same flow as the dashboard — pick type, enter name, content, TTL, proxy status, done.

SSL/TLS

Switch encryption mode between Off, Flexible, Full, and Full (Strict). See current certificate status and HTTPS settings. No more fumbling through the web dashboard to find that one toggle.

Firewall

View and manage firewall rules, IP access rules, rate limiting. See which rules are active. Block or challenge traffic patterns when you spot something suspicious in analytics — right there on your phone.

Cache

One-tap purge all cache. Toggle development mode when you're pushing updates and need to bypass cache for 3 hours. Check cache level and browser TTL settings.

This one alone saves me multiple laptop opens per week.

Analytics

Traffic volume, bandwidth usage, cache hit ratio, threat overview. Quick health check on how your sites are performing without logging into the dashboard.

Workers, KV, R2, Pages

View Worker scripts. Browse KV namespaces. Check R2 buckets. Monitor Pages projects and their latest deployments.

Multi-Account

Got personal and work Cloudflare accounts? Switch between them in settings. No need to log out and back in.

Page Rules

Configure URL-based rules per zone. Forwarding, cache level overrides, SSL mode per path — all manageable.

Security

This matters. You're handing an app your Cloudflare API credentials.

Here's how it works:

Supports API Token (scoped, recommended) and Global API Key authentication
Credentials are stored locally on your device using Android Keystore — hardware-backed encryption
Nothing gets sent anywhere except directly to api.cloudflare.com over HTTPS
No analytics SDK. No tracking. No telemetry. No Firebase. No Sentry. Nothing.
The app is open source — you can read every line of code before trusting it

I use API Tokens with scoped permissions. You should too. Create a token at dash.cloudflare.com/profile/api-tokens with only the permissions you need.

The UI

Dark mode, light mode, or follow system. Switches instantly.

English and Bahasa Indonesia. More languages easy to add — it's just JSON files with i18next.

Sensitive data (emails, account IDs) are masked by default in the UI. There's a toggle to reveal them in settings.

Tech stack

For those who care about what's under the hood:

React Native 0.81 + Expo 54 — cross-platform framework
Expo Router — file-based navigation, feels native
Expo Secure Store — wraps Android Keystore for credential storage
Axios — HTTP client hitting Cloudflare API v4 directly
i18next — internationalization
react-native-svg — entire icon system is custom SVG, no icon font dependencies
TypeScript — full type safety across the app

No state management library. Just React Context for auth and theme. Keeps it simple.

The Cloudflare API client (services/cloudflare.ts) has 100+ typed functions covering zones, DNS, SSL, firewall, cache, analytics, Workers, KV, R2, Pages, and more.

How to get your API Token

This is where most people get stuck, so here's the exact steps:

Go to dash.cloudflare.com
Click your profile icon (top right) > My Profile
Click API Tokens in the sidebar
Click Create Token
Choose a template or create custom:
- Zone:Read — view zones
- DNS:Read/Edit — manage DNS records
- Zone Settings:Read/Edit — SSL, cache, etc.
- Firewall Services:Read/Edit — firewall rules
- Analytics:Read — view analytics
- Worker Scripts:Read/Edit — manage Workers
Click Continue to summary > Create Token
Copy the token — you only see it once

Paste it into the app. Done.

Known limitations

Being transparent about what this can't do:

Rate limiting — Cloudflare API allows 1,200 requests per 5 minutes. Heavy usage may hit the limit.
No offline mode — everything is fetched live from the API. No local caching of zone data yet.
Workers editor — you can view scripts but can't edit code inline. Use the web dashboard for that.
iOS — not tested. Built Android-first. Should work with Expo but hasn't been validated.
Two-factor auth — the app doesn't handle 2FA directly. API Tokens bypass 2FA by design.

Running it yourself

git clone https://github.com/imtaqin/CFMobile.git
cd CFMobile
npm install
npx expo start

Scan the QR code with Expo Go, or run on an emulator with npx expo run:android.

What's next

Some things on my mind:

Offline caching for zone and DNS data
Push notifications for zone status changes
Bulk DNS record operations
More languages
iOS testing and App Store submission

Open to suggestions. What would you actually use?

DEV Community