Privacy and freedom, engineered in.

Obfuscated AmneziaWG protocol

AmneziaWG is built on WireGuard, the modern VPN protocol known for its speed and small, well-reviewed codebase, and adds traffic obfuscation designed to defeat deep packet inspection.

• Junk packets of random size are sent before each handshake
• Handshake messages are padded and use custom header values unique to each server
• Servers listen on random high UDP ports, not well-known VPN ports

Modern, proven encryption

Connections use the same cryptography as WireGuard: Curve25519 key exchange, ChaCha20-Poly1305 encryption and BLAKE2s hashing, with fresh session keys every few minutes.

• Device keys are unique to each of your devices
• Perfect forward secrecy: old traffic stays safe even if a key leaks later

Strict no-logs design

Our servers never record the websites you visit, your DNS queries, your traffic or the IP address you connect from. Servers report only data volume totals, which we use for usage limits and your usage chart.

Leak protection

Your DNS requests travel inside the encrypted tunnel to privacy-respecting resolvers. All IPv4 and IPv6 traffic is routed through the VPN, so nothing leaks around it.

Isolated and abuse-protected

Devices on our network can't reach each other, and outgoing mail ports are blocked to stop spammers. This keeps our IP addresses clean and your connection reliable.

Every platform, one account

Use PadVPN on Android, iPhone, iPad, Windows, macOS, Linux and compatible routers. Manage all your devices from one place in your hub.

Live server status

See every location's status before you connect. Pick the closest server for speed, or a specific country for content.

Private payments

Pay with cryptocurrency, with no card or bank details. Your hub shows every invoice and your remaining time at a glance.