Edge Rewrite
// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a44d68b1fea78cc1

Jump to content

Draft:Obscura VPN

From Wikipedia, the free encyclopedia
Obscura VPN
DeveloperSovereign Engineering Inc.
ReleaseFebruary 11, 2025; 19 months ago (2025-02-11)
Operating systemmacOS, iOS, Android, Windows
TypeVirtual private network
Websiteobscura.com

Obscura VPN is a virtual private network (VPN) service developed by Sovereign Engineering Inc., a United States–based software company. Released in February 2025, the service routes user traffic through two relays operated by separate companies: an entry relay operated by Obscura and an exit relay operated by the Swedish VPN provider Mullvad.[1][2] The client software is open source and available for macOS, iOS, Android, and Windows.[3][4]

History

[edit]

Obscura VPN was founded by Carl Dong, a former contributor of Bitcoin Core.[5]The service launched on 11 February 2025 with support for macOS; an iOS version followed on 19 August 2025.[6]

An Android version was released in May 2025, distributed through Google Play and Obtainium.[7][8] In November 2025, the service added Monero as a payment method alongside Bitcoin's Lightning Network.[9] A Windows application followed on 26 August 2026, at which point the number of simultaneous connections per account was increased from three to five; the company stated that a Linux version was in development.[4]

Design

[edit]

The service uses a two-hop architecture in which each hop is operated by a different legal entity. A user's device connects first to an entry server operated by Obscura, which can observe the user's IP address but not the traffic's destination; the traffic is then relayed through an exit server operated by Mullvad, which can observe the destination but not the user's original IP address.[1][2] This differs from conventional VPN services, in which a single company operates both ends of the connection.[10][5]

The service uses the WireGuard protocol, with client traffic carried over QUIC. According to the company, this makes VPN traffic more difficult to distinguish from ordinary web traffic; it describes the design as influenced by Apple's iCloud Private Relay and the Internet Engineering Task Force's MASQUE working group.[5] Accounts are identified by a randomly generated number rather than an email address.[11] The client software is written in Rust, with platform-specific components in Swift and TypeScript, and is published on GitHub.[3]

Security audit

[edit]

In May 2025, the German security firm Cure53 conducted a penetration test and source code review of the service's macOS application, network extension, and protocol design. The audit, whose results were published in December 2025, identified one medium-severity and one low-severity vulnerability along with four informational findings, and found no high- or critical-severity issues. Cure53 verified that the identified issues were subsequently fixed and concluded that the implementation did not suffer from major security problems within the defined threat model.[12][13]

Reception

[edit]

Reviewers have generally focused on the service's trust model and its performance costs. TechRadar described the two-party design as a response to past incidents in which VPN providers' no-logging claims were contradicted by law enforcement records, such as IPVanish's 2016 disclosure of user logs to Homeland Security and the use of PureVPN logs in a 2017 cyberstalking prosecution.[10][14][15] Tom's Guide examined the company's claims of censorship resistance and later published a full review of the service.[5][11]

A review by PrivacyTools.io noted that the split-operator architecture prevents either party from independently logging a user's full activity, but cited limited platform support as the service's main practical drawback at the time of review.[16] Testing by Blockdyor in 2026 measured a download speed reduction from 69 Mbps to 60 Mbps on a connection to Tokyo, with increased latency attributed to the double-hop routing; the review considered the service adequate for browsing and streaming but noted the latency could affect real-time applications such as gaming.[17]

See also

[edit]

References

[edit]
  1. 1 2 "Mullvad has partnered with Obscura VPN". Mullvad. 11 February 2025. Retrieved 28 August 2026.
  2. 1 2 "Mullvad Partners with Obscura VPN to Offer Two-Hop VPN System". CyberInsider. 11 February 2025. Retrieved 28 August 2026.
  3. 1 2 "obscuravpn-client". GitHub. Sovereign Engineering. Retrieved 28 August 2026.
  4. 1 2 "Obscura VPN lands on Windows, bringing its "next-gen" privacy to PC users". TechRadar. 26 August 2026. Retrieved 28 August 2026.
  5. 1 2 3 4 "Introducing Obscura VPN – the privacy-focused VPN that claims to outsmart internet censorship". Tom's Guide. 11 February 2025. Retrieved 28 August 2026.
  6. ↑ @obscuravpn (19 August 2025). "iOS app now available" (Tweet). Retrieved 1 September 2026 – via X (formerly Twitter).
  7. ↑ "Android users have just gained access to a new VPN app as Obscura VPN lands on Google Play and Obtainium". TechRadar. July 2025. Retrieved 28 August 2026.
  8. ↑ "Obscura VPN finally arrives on Android – and it's offering a launch discount". Tom's Guide. July 2025. Retrieved 28 August 2026.
  9. ↑ "Obscura VPN Review: No-KYC VPN & Privacy Score". KYCnot.me. Retrieved 1 September 2026.
  10. 1 2 "Obscura VPN promises to "set the standard for the next-generation of VPNs"". TechRadar. 11 February 2025. Retrieved 28 August 2026.
  11. 1 2 "Obscura VPN wants to be the best darn VPN out there – can it?". Tom's Guide. 2026. Retrieved 28 August 2026.
  12. ↑ "Obscura VPN just aced its first independent audit". TechRadar. December 2025. Retrieved 28 August 2026.
  13. ↑ "Obscura VPN passes first independent audit". Tom's Guide. December 2025. Retrieved 28 August 2026.
  14. ↑ Van der Sar, Ernesto (5 May 2018). "IPVanish "No-Logging" VPN Led Homeland Security to Comcast User". TorrentFreak. Retrieved 28 August 2026.
  15. ↑ Farivar, Cyrus (9 October 2017). "VPN logs helped unmask alleged cyberstalker, say feds". Ars Technica. Retrieved 28 August 2026.
  16. ↑ Holmberg, Marcus (2026). "Obscura VPN Review: Private VPN in 2026". PrivacyTools.io. Retrieved 28 August 2026.
  17. ↑ "Obscura VPN Review 2026". Blockdyor. 2026. Retrieved 28 August 2026.
[edit]