Secure Core in
120+ Countries
OllaVPN protects your privacy, keeps your data safe, and lets you access the open internet — anytime, anywhere.
Privacy that holds up
True peer isolation, in-tunnel DNS, kill switch always on. Four enforcement layers — not one toggle. We can't disclose what we don't collect.
How peer isolation works →Speed that flows
Modern WireGuard-class tunnel, owned metal, no resold-VPS supply chain. 10 Mbps free per user — honest cap, kernel-enforced, no fair-use fine print.
In-tunnel DNS details →Built for quantum
Hybrid post-quantum key exchange on every connection. Traffic captured today stays unreadable in the quantum era. Not a roadmap promise — shipping now.
The PQC handshake →Encryption you trust today is being recorded.
"Harvest now, decrypt later" is real. Adversaries with quantum programs are storing encrypted traffic today to break the day a cryptographically-relevant quantum computer ships. We use the NIST-ratified replacement — already, today, on every tunnel.
Hybrid post-quantum, by default
A modern hybrid key exchange runs on every connection. Classical security floor, quantum-resistant ceiling — turned on, not buried in an advanced setting.
True peer isolation
Other users on the same exit cannot reach you. Enforced at multiple layers, verified by automated end-to-end testing on every release.
DNS that doesn't leak
Every connection uses a resolver inside the tunnel. OS-level DNS is firewall-blocked while the tunnel is up, so DNS leaks are structurally impossible.
On by default. No bypass.
Engages automatically the moment the tunnel covers your traffic. Drop the tunnel, drop the network — packets do not leak in the gap.
Home network preserved
Local devices on your home network keep working while the tunnel is up. Your printer, NAS, and smart-home gear stay reachable.
A free plan you can actually keep
No credit card. No trial countdown. The free plan is built to stay free. A $2/month plan lifts the speed cap and adds 5-device support.
No "premium" countries.
No encryption tiers.
Every connection gets the same post-quantum-ready protection, the same kill switch, the same DNS hygiene. The free plan and the $2 plan use the same security stack — the paid plan just removes the speed cap and adds 5-device support.
Servers in 120+ countries
Connect to our global network of blazing-fast servers and enjoy secure access to your favorite content from anywhere in the world. Owned metal. No reseller supply chain.
View all locations →Choose your plan
Three plans, one security stack. Free for everyday use, Pro for power users, Business for teams.
Free
Security and privacy for everyone
- 1 device · 10 Mbps speed governance
- All countries unlocked (no geo-blocking)
- PQC handshake · kill switch · zero logs
- In-tunnel DNS · peer isolation
Pro
Advanced features and fastest speeds
- 5 devices · 10 Gbps per session
- Premium low-latency exits
- Same PQC + DNS + kill switch
- Stream + game without throttling
Business
For teams that ship secure by default
- Unlimited devices per user
- 10 Gbps + QoS priority routing
- Admin panel · audit · dedicated IPs
- Slack support + 4-hour SLA response
Hybrid by design.
Forward-secret on every session.
OllaVPN does not replace classical cryptography — it mixes it with a post-quantum key exchange on every connection. If either side of the hybrid holds up, your session stays private.
- NIST-standardized post-quantum key exchange (KEM)
- Continuous re-keying — forward secrecy on every session
- Hybrid by default, not an opt-in advanced setting
- Session secrets never traverse the wire in the clear
# 1. Classical Diffie-Hellman key exchange
classical = classical_dh(client, server)# 2. Post-quantum encapsulation (KEM)
pqc = pqc_kem.encapsulate(server.pq_pub)# 3. Mix both into the session tunnel key
tunnel_key = mix(classical, pqc)# 4. Open the cryptographically-secure tunnel
tunnel.open(tunnel_key)→ established · forward-secret · post-quantum-readyPrivacy you can actually verify.
A privacy product is only as good as the principles it refuses to bend on. These are ours.
We don't keep your activity
OllaVPN does not log the sites you visit, the apps you use, or the traffic you send through the tunnel. Privacy isn't a marketing line — it's an architecture choice.
Privacy Policy →Free and paid use the same stack
Post-quantum-ready handshake, kill switch, DNS-leak protection, peer isolation — identical on the free plan and the Pro plan. The paid plan just removes the speed cap.
Same security, every planNo credit card, no trial trap
The lifetime free plan is genuinely free. No "free trial, then auto-charge." No "premium servers" upsell. No 70%-off countdown banner.
Built to stay free