The fast, modern default. The right choice for almost everyone.

WireGuard is the protocol we recommend first: a small, audited codebase, sub-second reconnects, and excellent battery life on phones. You get a config file, import it into the official WireGuard client, and you're online.

- Cipher: ChaCha20-Poly1305 (AEAD)

- Key exchange: Curve25519, 1-RTT handshake

- Transport: UDP

- Clients: native apps on Windows, macOS, Linux, iOS, Android

- Reconnects in well under a second after switching networks

Choose this if: you want the fastest, lowest-overhead tunnel, and your network doesn't actively block UDP or VPN handshakes.