VLESS VPN access

Pay once in crypto and the order page appears immediately. It is reached by an eight-character magic code, which is the only credential in the whole system: no username, no password, no account, no email. Bookmark the page or write the code down, because it is how you come back for the configs, for another device, or to extend the plan.

On that page the VLESS section lists each location with a vless:// link, a copy button and a QR code. Desktop clients take the link from the clipboard; phone clients are usually quicker with the QR. The same credentials work on every device you own at the same time, up to five concurrent connections, so there is no per-device purchase and no re-issuing.

The link contains your account UUID. That is the entire authentication, so treat it the way you would treat a password: do not paste it into a public paste site, do not post it in a group chat, and if you think it has leaked, ask support to rotate it.

Android: v2rayNG is the long-standing option and imports either the link or the QR directly. Hiddify is friendlier if you would rather not think about transport settings. Both are on F-Droid or as direct APKs, which matters on a device with no Google services.

iOS and iPadOS: Shadowrocket and Streisand both accept a vless:// link. Note that these are paid apps from the App Store, and Shadowrocket in particular is region-restricted in some storefronts, which is worth knowing before you rely on it.

Desktop: v2rayN or Nekoray on Windows, Hiddify on Windows, macOS and Linux, and on Linux the Xray core directly with a JSON config if you prefer to run it as a service. Any of these can be set as a system-wide proxy or used per-application through a SOCKS port.

We do not publish our own client, and that is deliberate. A VPN app is a large piece of software with network privileges that you would have to trust on top of trusting the network. Handing over a standard configuration lets you use a client that other people audit.

VLESS is available from Singapore, Tokyo, Los Angeles and Berlin. Two in Asia because that is where the networks that need it most are, one on the US west coast, one in Europe.

The list is short because a CDN-fronted endpoint is not the same kind of object as a plain VPN server. It needs a domain, a certificate, a CDN configuration and a route that stays healthy, and every one of those parts can break independently. Four endpoints that are watched are worth more than forty that are announced. If the count changes you will see it on /vpn/status/ rather than in a marketing claim.

WireGuard and OpenVPN run on the full network, which spans dozens of countries, so the short VLESS list is not a limit on the account. Use the nearest ordinary server when the network is not fighting you, and switch to VLESS when it is.

Start with WireGuard over UDP. It is the fastest of the three, the lightest on battery, and on a normal home, mobile or cafe connection it simply works. There is no reason to reach for anything more exotic until it fails.

If the handshake never completes, the usual cause is UDP being blocked or throttled, which is common on hotel Wi-Fi, corporate networks and some campus networks. Switch to OpenVPN over TCP on port 443. It is slower, because you are now running a reliable protocol inside another reliable protocol, but it leaves on the same port as HTTPS and a lot of networks that drop UDP will pass it.

If that fails too, the network is looking at more than ports, and VLESS is the next thing to try. It is carried inside TLS to a CDN address, which is the hardest of the three to distinguish from ordinary browsing. Try the nearest of the four locations first, then the others, since CDN routing differs by region and a location that is slow for someone else may be the fast one for you.

What we will not tell you is that this always ends in a connection. It usually does. A network that permits only a whitelist of destinations will stop all three, and no provider that tells you otherwise is being straight with you.

One set of credentials works on every server in the network and on all three protocols. Five devices can be connected at the same time. Bandwidth is not metered and there is no speed tier: the ports are 1 Gbps and what you get depends on distance and the network in between. P2P traffic is allowed rather than quietly throttled.

Plans run from 7 days to 365 days, priced per plan on /vpn/, and nothing renews automatically. There is no stored card because there was never a card. When you want more time you open the order page with the same magic code, pay again, and the new period is added on top of your current expiry rather than replacing it.

The VPN is also an add-on at checkout for the UK number and travel eSIM. One payment, one magic code, both products on the same order page, which is the practical reason to buy them together rather than separately.

Payment is in crypto: USDT on TRC20, BEP20 or ERC20, plus ETH, BTC, SOL, TRX, XMR, USDC, BNB, TON and DOGE. Monero is the one that leaves the least behind, and paying with it is a normal path here rather than a special request. There is no account to create, no email required and no identity check.

On the network side: no logs, meaning source IP addresses and connection timestamps are not stored, and the servers run from RAM so a reboot leaves nothing on the machine. That is what we control and what we will state. It is not a claim that a VPN makes you untraceable, which no VPN does. A VPN moves what your local network and access provider can see onto the VPN network, and you decide whether that trade is worth making.

Refunds follow the same principle of only promising what can be delivered: if the service does not connect on any server after working through it with support, it is refunded. Changing your mind is not a refund, and one slow server is not a refund either, because switching server or protocol fixes that in seconds. The full wording is on /refund/.