Obscura VPN
Open-source two-party VPN that cryptographically prevents both Obscura and its exit hop from seeing your traffic.
Obscura VPN is an open-source VPN built by Sovereign Engineering around a simple architectural claim: a VPN that can log your activity is one you have to trust, so Obscura was designed so that no single party can both identify you and see what you do. Its client apps, Rust VPN library, and CLI are fully open source, so the privacy claims can be verified against code.
It works as a two-party relay: your device connects over QUIC to Obscuras relays, which forward the encrypted WireGuard tunnel to an independent exit operator (Mullvad). Obscuras servers cannot decrypt the packets because they are encrypted to the exit hops key, and the exit servers never see your real IP because Obscura NATs it away. Even a no-logs policy becomes irrelevant when logging is impossible by design.
The QUIC transport makes traffic resemble ordinary HTTP/3 connections, which makes it markedly harder for censors and firewalls to detect or block than classic VPN protocols - one reason Obscura also competes with commercial VPNs on censorship-resistant access. Accounts are just randomized numbers, payments can be made with Bitcoin Lightning or Monero, and the app even displays the exit hops WireGuard public key so you can verify it against Mullvads published list.
Compared to commercial VPNs like NordVPN, ExpressVPN, or Surfshark, Obscura is not self-hostable and the service itself costs $8/month, but it removes the trust requirement those services rely on: there is no entity that holds both your identity and your browsing activity. Native apps exist for macOS, iOS, Android, Windows, and Linux, and a WireGuard compatibility mode covers routers and other platforms without native clients.
