No logs

Our VPN servers never save data that can be used to identify a customer.

Chaining supported

Don't trust that we're not logging?
Use multihop to connect to another VPN (or Tor) before you connect to us.

All server-side configs are public

Available for review here.

Security through transparency

(too many) details on how the network operates available on our blog and on our
privacy policy page.

Hashed tokens

Access tokens are hashed before connecting. Compromised or confiscated servers can't be used to identify clients.

Financials in several regions

No central office, anywhere.

Ed25519, Ed448, and secp521r1 instances

521-bit EC (~15360-bit RSA)

TLSv1.3 supported

AEAD authentication

256-bit AES or ChaCha20-Poly1305

Resistant to quantum attacks

Our least secure option is stronger than most VPN providers' strongest option

8192-bit RSA server certificate

521-bit EC (~15360-bit RSA) CA

8192-bit DH params

256-bit AES or ChaCha20-Poly1305

Safe from padding oracle attacks

ChaCha20 for symmetric encryption, authenticated with Poly1305, using RFC7539's AEAD construction

Curve25519 for ECDH

BLAKE2s for hashing and keyed hashing, described in RFC7693

SipHash24 for hashtable keys

HKDF for key derivation, as described in RFC5869

encrypted DNS servers

Chain DNS traffic with Anonymized DNS

DNSCrypt v2

Public DNSCrypt servers for encrypting your DNS traffic before you connect

Transparent .onion/.i2p access

Direct access to darknets

DNS/WebRTC leak protection

Stops IP leaks

DNS-based ad/tracker blocking

Prevents malicious trackers from working

Kill switch included

Many different killswitches available to prevents leaks if disconnected

SSH / HTTPS / obfs4 tunneling.

Obfuscate your VPN traffic to look like SSH or HTTPS traffic, or with obfs4, like nothing

Connect on any port

UDP or TCP (1-29999)

BitTorrent allowed

Port forwarding supported

No data caps, no throttling

Redundant load balancing

Minimizes downtime

Many IPs to choose from

Currently over 450 available IPs

Now with IPv6 support

Windows

Mac

iOS

Linux

Android

Routers