How it works
How Vyntez VPN protects each kind of device
There are two technologies behind Vyntez VPN: WireGuard for phones and computers, and an HTTPS proxy for the browser extension. They cover different things, so here they are side by side.
WireGuard: phones and computers
Covers all traffic from the device: every app, not just the browser.
- 1Your device makes a WireGuard key pair. On Android and iOS the Vyntez VPN app does this; for Windows, macOS and Linux your dashboard does it inside your browser.
- 2Only the public key is sent to us. The private key stays on your device. We can't read it, and so we can't give it to anyone.
- 3You pick a location. We add your public key as a peer on a server there and give your device a tunnel address.
- 4Your device connects to that server over an encrypted WireGuard tunnel. DNS queries go to a resolver on the same server, which has query logging off.
- 5Configs send IPv4 and IPv6 into the tunnel but only give an IPv4 address there, so IPv6 is dropped inside the tunnel instead of leaking around it.
On a computer you use the official, open-source WireGuard app made by the WireGuard project. Your dashboard gives you a .conf file or QR code to import into it.
Extension: one browser only
Covers only the traffic of the browser it is installed in. Other apps on that computer, and other browsers, are not covered.
- 1Browsers can't run WireGuard, so the extension uses the same servers as an HTTPS proxy instead.
- 2The browser opens a TLS connection to the server on port 443, then asks it to connect onward to each site.
- 3The proxy login is a short-lived signed token (about an hour) that the server checks by itself. The extension renews it before it runs out.
If you want every app on a computer covered, use WireGuard with a config from your dashboard instead of, or as well as, the extension.
This website and the installable web app
You can install this site as an app (a PWA), but it cannot tunnel any traffic: no browser lets a web page route a device's traffic. It is your account dashboard, the WireGuard config maker for computers, and the place to download the apps.
How servers learn about your device
Each VPN server runs a small agent that asks our control server for its list of peers (public keys and tunnel addresses) and applies changes within a second or two. Servers never accept control connections from outside. They report their load and byte counters so we can show load per location and count data for the Free plan cap; we keep a monthly byte total per user, not per-connection records. See exactly what is stored on the no-logs page.