What's New

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• On Android you can choose apps as well as sites.
• Add your own, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification added

• Exit IP verification added

Connection verification

• Verifies the tunnel is actually carrying traffic before showing Connected
• Uses our own server for the check instead of a third-party service

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers