Post-quantum-ready WireGuard tunnel with a kill switch that's on by default and can't be disabled. No card. No email tricks. The free plan stays free.
True peer isolation, in-tunnel DNS, kill switch always on. Four enforcement layers — not one toggle. We can't disclose what we don't collect.
How peer isolation works →Modern WireGuard-class tunnel, owned metal, no resold-VPS supply chain. 10 Mbps free per user — honest cap, kernel-enforced, no fair-use fine print.
In-tunnel DNS details →Hybrid post-quantum key exchange on every connection. Traffic captured today stays unreadable in the quantum era. Not a roadmap promise — shipping now.
The PQC handshake →"Harvest now, decrypt later" is real. Adversaries with quantum programmes are storing encrypted traffic to break the day a cryptographically-relevant quantum computer ships. We use the NIST-ratified replacement — already, today, on every tunnel.
A modern hybrid key exchange runs on every connection. Classical security floor, quantum-resistant ceiling — turned on, not buried in an advanced setting.
Other users on the same exit cannot reach you. Enforced at multiple layers, verified by automated end-to-end testing on every release.
Every connection uses a resolver inside the tunnel. OS-level DNS is firewall-blocked while the tunnel is up, so DNS leaks are structurally impossible.
Engages automatically the moment the tunnel covers your traffic. Drop the tunnel, drop the network — packets do not leak in the gap.
Local devices on your home network keep working while the tunnel is up. Your printer, NAS, and smart-home gear stay reachable.
No credit card. No trial countdown. The free plan is built to stay free. A $2/month plan lifts the speed cap and adds 5-device support.
OllaVPN does not replace classical cryptography — it mixes it with a post-quantum key exchange on every connection. If either side of the hybrid holds up, your session stays private.
No anycast magic, no recycled commodity VPS. OllaVPN runs on infrastructure we operate directly — dedicated public IPs, modern Linux, and a tuned WireGuard data plane on every node.
Every connection gets the same post-quantum-ready protection, the same kill switch, the same DNS hygiene. The free plan and the $2 plan use the same security stack — the paid plan just removes the speed cap and adds 5-device support.
A free plan you can actually keep — no credit card, no trial countdown. When you want more speed and more devices, $2/month lifts the cap. That's the whole story.
A privacy product is only as good as the principles it refuses to bend on. These are ours.
OllaVPN does not log the sites you visit, the apps you use, or the traffic you send through the tunnel. Privacy isn't a marketing line — it's an architecture choice.
Post-quantum-ready handshake, kill switch, DNS-leak protection, peer isolation — identical on the free plan and the $2 plan. The paid plan just removes the speed cap.
The lifetime free plan is genuinely free. No "free trial, then auto-charge." No "premium servers" upsell. No 70%-off countdown banner.