Jump to content

Draft:Obscura VPN

From Wikipedia, the free encyclopedia
Obscura VPN
DeveloperSovereign Engineering Inc.
ReleaseFebruary 11, 2025; 19 months ago (2025-02-11)
Operating systemmacOS, iOS, Android, Windows
TypeVirtual private network
Websiteobscura.com

Obscura VPN is a virtual private network (VPN) service developed by Sovereign Engineering Inc., a United States–based software company. Released in February 2025, the service routes user traffic through two relays operated by separate companies: an entry relay operated by Obscura and an exit relay operated by the Swedish VPN provider Mullvad.[1][2] The client software is open source and available for macOS, iOS, Android, and Windows.[3][4]

History

[edit]

Obscura VPN was founded by Carl Dong, a former contributor of Bitcoin Core.[5]The service launched on 11 February 2025 with support for macOS; an iOS version followed on 19 August 2025.[6]

An Android version was released in May 2025, distributed through Google Play and Obtainium.[7][8] In November 2025, the service added Monero as a payment method alongside Bitcoin's Lightning Network.[9] A Windows application followed on 26 August 2026, at which point the number of simultaneous connections per account was increased from three to five; the company stated that a Linux version was in development.[4]

Design

[edit]

The service uses a two-hop architecture in which each hop is operated by a different legal entity. A user's device connects first to an entry server operated by Obscura, which can observe the user's IP address but not the traffic's destination; the traffic is then relayed through an exit server operated by Mullvad, which can observe the destination but not the user's original IP address.[1][2] This differs from conventional VPN services, in which a single company operates both ends of the connection.[10][5]

The service uses the WireGuard protocol, with client traffic carried over QUIC. According to the company, this makes VPN traffic more difficult to distinguish from ordinary web traffic; it describes the design as influenced by Apple's iCloud Private Relay and the Internet Engineering Task Force's MASQUE working group.[5] Accounts are identified by a randomly generated number rather than an email address.[11] The client software is written in Rust, with platform-specific components in Swift and TypeScript, and is published on GitHub.[3]

Security audit

[edit]

In May 2025, the German security firm Cure53 conducted a penetration test and source code review of the service's macOS application, network extension, and protocol design. The audit, whose results were published in December 2025, identified one medium-severity and one low-severity vulnerability along with four informational findings, and found no high- or critical-severity issues. Cure53 verified that the identified issues were subsequently fixed and concluded that the implementation did not suffer from major security problems within the defined threat model.[12][13]

Reception

[edit]

Reviewers have generally focused on the service's trust model and its performance costs. TechRadar described the two-party design as a response to past incidents in which VPN providers' no-logging claims were contradicted by law enforcement records, such as IPVanish's 2016 disclosure of user logs to Homeland Security and the use of PureVPN logs in a 2017 cyberstalking prosecution.[10][14][15] Tom's Guide examined the company's claims of censorship resistance and later published a full review of the service.[5][11]

A review by PrivacyTools.io noted that the split-operator architecture prevents either party from independently logging a user's full activity, but cited limited platform support as the service's main practical drawback at the time of review.[16] Testing by Blockdyor in 2026 measured a download speed reduction from 69 Mbps to 60 Mbps on a connection to Tokyo, with increased latency attributed to the double-hop routing; the review considered the service adequate for browsing and streaming but noted the latency could affect real-time applications such as gaming.[17]

See also

[edit]

References

[edit]
  1. 1 2 "Mullvad has partnered with Obscura VPN". Mullvad. 11 February 2025. Retrieved 28 August 2026.
  2. 1 2 "Mullvad Partners with Obscura VPN to Offer Two-Hop VPN System". CyberInsider. 11 February 2025. Retrieved 28 August 2026.
  3. 1 2 "obscuravpn-client". GitHub. Sovereign Engineering. Retrieved 28 August 2026.
  4. 1 2 "Obscura VPN lands on Windows, bringing its "next-gen" privacy to PC users". TechRadar. 26 August 2026. Retrieved 28 August 2026.
  5. 1 2 3 4 "Introducing Obscura VPN – the privacy-focused VPN that claims to outsmart internet censorship". Tom's Guide. 11 February 2025. Retrieved 28 August 2026.
  6. @obscuravpn (19 August 2025). "iOS app now available" (Tweet). Retrieved 1 September 2026 via X (formerly Twitter).
  7. "Android users have just gained access to a new VPN app as Obscura VPN lands on Google Play and Obtainium". TechRadar. July 2025. Retrieved 28 August 2026.
  8. "Obscura VPN finally arrives on Android – and it's offering a launch discount". Tom's Guide. July 2025. Retrieved 28 August 2026.
  9. "Obscura VPN Review: No-KYC VPN & Privacy Score". KYCnot.me. Retrieved 1 September 2026.
  10. 1 2 "Obscura VPN promises to "set the standard for the next-generation of VPNs"". TechRadar. 11 February 2025. Retrieved 28 August 2026.
  11. 1 2 "Obscura VPN wants to be the best darn VPN out there – can it?". Tom's Guide. 2026. Retrieved 28 August 2026.
  12. "Obscura VPN just aced its first independent audit". TechRadar. December 2025. Retrieved 28 August 2026.
  13. "Obscura VPN passes first independent audit". Tom's Guide. December 2025. Retrieved 28 August 2026.
  14. Van der Sar, Ernesto (5 May 2018). "IPVanish "No-Logging" VPN Led Homeland Security to Comcast User". TorrentFreak. Retrieved 28 August 2026.
  15. Farivar, Cyrus (9 October 2017). "VPN logs helped unmask alleged cyberstalker, say feds". Ars Technica. Retrieved 28 August 2026.
  16. Holmberg, Marcus (2026). "Obscura VPN Review: Private VPN in 2026". PrivacyTools.io. Retrieved 28 August 2026.
  17. "Obscura VPN Review 2026". Blockdyor. 2026. Retrieved 28 August 2026.
[edit]