VPN encryption and security: how the tunnel stays hidden

A connection can let you down in two ways: someone reads it, or someone notices it and slows it down. Most VPN services deal with the first and say little about the second.

Why the tunnel does not stand out

• A filter running deep packet inspection sees an HTTPS visit to an existing website and has no reason to step in.
• Unlike OpenVPN or WireGuard, it has no telltale handshake that can be fingerprinted.
• Where a typical VPN app shows connected and then quietly stops passing data, this tunnel carries on.

Keeping traffic unreadable

Everything travels over TLS 1.3 with current ciphers. Your operator, whether that is Jio, Airtel or a broadband company, cannot read what passes through the tunnel, and neither can whoever runs the cafe hotspot or anyone else between you and our server.

Limits worth knowing

• Sign in to a service with your own account and that service knows it is you, tunnel or not.
• Malware already on your phone or laptop is untouched by a VPN.
• The sites you visit still see what you do there. The tunnel hides it only from the network along the way.

Your part

• Get clients from their official pages, not from APK mirror sites.
• Treat the key like a password. Anyone holding it is using your connection.
• If your client has a kill switch, switch it on, so nothing leaks out when the tunnel drops.