Exclusive offer for Alyssa Grenfell viewers The VPN built so it can’t see what you do online.
Most VPNs can see who you are and where you browse. Obscura separates that information between independent providers, so no single company sees both.
Only $6/month. Code ALYSSA automatically applied.
Open source • Independently audited • iPhone, Android, Windows, Mac and Linux.
Private by Design:
Our Two-Party VPN Protocol
Obscura never sees your traffic
Obscura’s servers relay your connection to exit servers but can never decrypt your traffic.
Your traffic is always end-to-end encrypted via WireGuard® to the exit server.
Exit hops never see who you are
Exit servers (run by Mullvad) connect you to the internet but never see your personal info.
Obscura masks your real IP address when relaying to the exit server.
It’s simple:
We can’t leak what we don’t have.
FAQs
Questions?
We’re here to help.
Here are the most common questions we’re asked, but if we haven’t covered yours, don’t hesitate to reach out via one of our handles.
What makes Obscura different from existing VPNs?
Unlike VPNs with a “no-logs” policy, Obscura is provably private by design.
Even “no-logs” VPNs see both your identity and your internet activity, meaning you have to blindly trust their pinky-promise for privacy. This is exactly why some privacy-conscious folks will tell you not to use a VPN at all.
Obscura is different – we never see your decrypted internet packets. It’s simply impossible for us to log your internet activity, even if we were compelled to, or if our servers were compromised. You can even verify this yourself.
Obscura’s stealth protocol is much harder to block.
Our unique stealth protocol is designed to blend in with regular internet traffic. It does so by leveraging QUIC – the same technology that powers HTTP/3 – making it far harder for censors or network filters to detect or block.
Want more technical details? See here.
What user data can Obscura see?
Obscura only sees your connecting IP address and necessary payment info – never your actual internet traffic.
We physically can’t decrypt your internet traffic (see how) and never log your connecting IP address.
For even more privacy, we actively support privacy-friendly payment methods like Bitcoin over Lightning and Monero. Learn more about accepted payment methods here.
How do I know Obscura does what it claims?
I like the way you think! 😎
Don’t trust — verify. Our app’s entire source code is on GitHub for you to verify that we do what we say.
We also plan to provide reproducible builds of our app, meaning anyone can confirm that the app you download matches the code we publish.
Additionally, our app displays your current exit hop’s WireGuard public key on its “Location” page. You can check this key against what Mullvad publishes here to ensure that you’re connected via a genuine Mullvad exit hop!
Give me the technical details!
Obscura’s servers relay the WireGuard tunnel between your device and Mullvad’s servers. Essentially, WireGuard-over-QUIC.
This looks something like:
<user> --> Obscura Server --> Mullvad Server --> <internet>This ensures that no single party has the information to leak or correlate your traffic and your identity, since:
- Obscura’s servers are unable to decrypt the WireGuard packets it relays, since they are encrypted to a Mullvad server’s WireGuard pubkey.
- Mullvad’s servers never see your connecting IP since Obscura’s servers are effectively doing NAT.
Your device connects to Obscura’s servers over QUIC, meaning:
- Obscura connections are harder to detect or block since they look like regular internet traffic (HTTP/3 uses QUIC for transport).
- Obscura avoids the TCP-over-TCP meltdown problem since we use QUIC’s unreliable datagram extension.
Still curious? Read our blog post on Obscura’s design.
How many devices can I use Obscura on?
Each Obscura account has 5 simultaneous connection slots. This is different from ”5 devices”.
If you’re connecting with our Obscura app…
- You can log in on as many devices as you’d like.
- A device only uses 1 slot while it is actively connected (see the “Connection” tab in the app).
If you’re connecting with our WireGuard configs…
- Each config reserves 1 slot as long as it exists on your account, even when the device is not connected.
- To free a slot, delete the config from your account here.
Examples
- Only using our Obscura app: Unlimited sign-ins; up to 5 devices connected at the same time.
- Only using WireGuard configs: You can keep up to 5 configs total (i.e., 5 devices).
- A Mix: If you have 1 WireGuard config on your account, it uses 1 of 5 slots, leaving 4 slots open for the Obscura app to connect from any signed-in devices.