Frequently asked questions

A VPN (virtual private network) creates an encrypted connection between your device and a VPN server. Your traffic travels through this "tunnel", so the local network and your internet provider cannot read it, and websites see the server's IP address instead of yours. See How it works for a diagram.

In most countries, including the EU, the UK, the US and Canada, using a VPN is legal. A few countries restrict or ban VPN use, so check local rules before you travel. Anything that is illegal without a VPN stays illegal with one.

No. A VPN improves privacy, but it does not make you anonymous. Websites can still recognize you through cookies, browser fingerprinting and accounts you sign in to. Combine the VPN with good habits such as private browsing windows and careful sharing of personal data.

HTTPS encrypts the content of a page, which is great. But the network can still see which sites you connect to, and websites see your IP address. A VPN hides both, and protects apps that may not encrypt everything.

Not on its own. A VPN protects data in transit. Keep your system updated, use built-in security protection, and be careful with unexpected links and attachments.

Slightly, because data is encrypted and travels via the server. With a nearby server and the WireGuard protocol the difference is usually small enough not to notice. Choosing a far-away server adds more delay.

For the best privacy, yes. Turn on auto-connect and keep the kill switch enabled. If one app has trouble, use split tunneling for that app instead of switching the VPN off completely.

Leave it on Automatic. If you want to choose: WireGuard for speed, OpenVPN (TCP) for networks that block VPNs, IKEv2 for phones that switch networks often. The protocol comparison has details.

Windows, macOS, Android, iOS and Linux. The steps in the setup guide are the same on each platform.

Yes, a nearby server keeps delay low. Some streaming services limit content by region in their terms of use. Please follow the terms of each service you use.

These networks often show a sign-in page first ("captive portal").

1. Disconnect the VPN.
2. Open your browser and visit any website. The sign-in page should appear.
3. Accept the terms or enter your room number.
4. Tap Connect in the VPN app again.
5. Still blocked? Switch the protocol to OpenVPN (TCP).

A DNS leak happens when the addresses you look up go to your provider's DNS server instead of through the tunnel. Keep DNS leak protection switched on in Settings → Connection. The app's Status tab shows a green checkmark when DNS requests are protected.

Turn on Allow local network access in settings, or add the related app to split tunneling. See example 6.

Some sites ask for extra verification when many people share one IP address. Complete the check, or switch to another server in the same country.

That's the kill switch doing its job. Tap Connect to restore the tunnel. If the connection keeps dropping, choose a closer server or a different protocol.