Encryption and protocols
Everything that leaves your device while you are connected travels inside an encrypted tunnel to a TVPN server. Your internet provider or the Wi-Fi owner can see that you are connected to a VPN, but not the pages you open or the data you send. OpenVPN and IKEv2 connections use AES-256-GCM, and WireGuard uses ChaCha20, on every plan.
Every plan includes WireGuard, OpenVPN over UDP or TCP, and IKEv2. WireGuard connects quickly and suits most people, OpenVPN TCP helps on networks that block UDP, and IKEv2 copes well when a phone moves between Wi-Fi and mobile data. You can switch under Settings > Connection > Protocol. The protocol changes speed and stability, not what we log.
DNS leak protection
Your device looks up the address of each site before opening it. If those lookups go to your internet provider outside the tunnel, the provider can see a list of the sites you visit even though the traffic itself is encrypted.
While you are connected, TVPN sends all lookups through the tunnel to its own DNS servers and blocks lookups that try to go elsewhere. These servers do not log queries. It is on by default and needs no setup.
Kill switch
A VPN connection can drop when the signal is weak, when a laptop wakes from sleep or when your phone changes networks. Without protection, apps keep sending data over your normal connection with your real IP address.
The kill switch blocks internet access until TVPN reconnects. Turn it on once and leave it on, especially on public Wi-Fi.
- Windows, macOS, Linux, iOS: Settings > Connection > Kill switch
- Android: turn on the kill switch in the app, then enable Always-on VPN and Block connections without VPN for TVPN in Android settings
If authorities ask for user data
We follow the law that applies to us. If we receive a valid legal request, we can only hand over what we actually store, which is the account and payment data listed at the top of this page.
We have no browsing history, DNS logs, original IP addresses or connection times to give, because we never record them. A request cannot produce records that do not exist.
Payments without card details
You top up a dollar balance with cryptocurrency through PayGate, then buy plans from that balance. TVPN does not accept cards or PayPal, so we never receive card numbers or bank details.
Our records show the amount, the coin, the date and the plan you bought. Keep in mind that most blockchains are public, so a transfer from your wallet can be seen on the chain by anyone who knows the wallet address.
Keeping your account safe
Your email and password are the only keys to your account. TVPN does not send emails, so there is no password reset link and we cannot recover an account by email.
A few habits go a long way:
- Use a long password that you do not use on any other site
- Save it in a password manager when you sign up
- Log out of the dashboard on shared or public computers
- Do not share your login with other people