Join millions using OllaVPN to protect their information and access a global internet, anytime, anywhere.
30-day money-back guaranteeA modern, privacy-first VPN with post-quantum security built directly into the core.
True peer isolation, in-tunnel DNS, kill switch always on. Four enforcement layers — not one toggle. We can't disclose what we don't collect.
Modern WireGuard-class tunnel, owned metal, no resold-VPS supply chain. 10 Mbps free per user — honest cap, kernel-enforced, no fair-use fine print.
Hybrid post-quantum key exchange on every connection. Traffic captured today stays unreadable in the quantum era. Not a roadmap promise — shipping now.
"Harvest now, decrypt later" is real. Adversaries with quantum programmes are storing encrypted traffic to break the day a cryptographically-relevant quantum computer ships. We use the NIST-ratified replacement — already, today, on every tunnel.
Get OllaVPN FreeNo compromises. The same advanced security architecture applies to all users on every single plan.
A modern hybrid key exchange runs on every connection. Classical security floor, quantum-resistant ceiling — turned on, not buried in an advanced setting.
Other users on the same exit cannot reach you. Enforced at multiple layers, verified by automated end-to-end testing on every release.
Every connection uses a resolver inside the tunnel. OS-level DNS is firewall-blocked while the tunnel is up, so DNS leaks are structurally impossible.
Engages automatically the moment the tunnel covers your traffic. Drop the tunnel, drop the network — packets do not leak in the gap.
Local devices on your home network keep working while the tunnel is up. Your printer, NAS, and smart-home gear stay reachable.
No credit card. No trial countdown. The free plan is built to stay free. A $2/month plan lifts the speed cap and adds 5-device support.
OllaVPN does not replace classical cryptography — it mixes it with a post-quantum key exchange on every connection. If either side of the hybrid holds up, your session stays private.
# 1. Classical key exchange classical = classical_dh(client, server) # 2. Post-quantum encapsulation pqc = pqc_kem.encapsulate(server.pq_pub) # 3. Mix both into the session key tunnel_key = mix(classical, pqc) # 4. Open the tunnel tunnel.open(tunnel_key) → established · forward-secret · post-quantum-ready
Every connection gets the same post-quantum-ready protection, the same kill switch, the same DNS hygiene. The free plan and the $2 plan use the same security stack — the paid plan just removes the speed cap and adds 5-device support.
Three plans, one security stack. Free for everyday use, Pro for power users, Business for teams.
A privacy product is only as good as the principles it refuses to bend on. These are ours.
OllaVPN does not log the sites you visit, the apps you use, or the traffic you send through the tunnel. Privacy isn't a marketing line — it's an architecture choice.
Privacy policy →Post-quantum-ready handshake, kill switch, DNS-leak protection, peer isolation — identical on the free plan and the $2 plan. The paid plan just removes the speed cap.
Same security, every plan →The lifetime free plan is genuinely free. No "free trial, then auto-charge." No "premium servers" upsell. No 70%-off countdown banner.
Built to stay free →