With WireGuard
WireGuard is a simple and modern VPN protocol. We recommend using it when available.
- Download and install the WireGuard software from its official website.
-
Create a new WireGuard key in your account and download the configuration file.
You need one for each device that you want to associate with your account. -
Import the configuration in WireGuard.
- On Android and iOS, open the app and scan the QR code from your account
- On Windows, mac OS and Linux, import a configuration file downloaded from your account
-
Activate the newly imported configuration in WireGuard.
You can check your IP address by refreshing this page (or opening it on the device) and looking at the bottom.
If you are asked to fill settings manually, refer to this table:
| Option | Value |
| Host or Gateway | Pick one in the server list. |
| Server Port | Either 51820 (default), 443 (same as HTTPS), or 53 (same as DNS) |
| Server Public Key | QFbr19X11tqUZRerZgItb25FnBsNsd7NyJvAkWTRU1U= |
| Client Address/Keys | In your downloaded config file, after Address = and PrivateKey =. |
| DNS Servers | 10.128.0.1 |
With OpenVPN
OpenVPN is an older VPN protocol and software, still considered secure and one of the best VPN protocols available.
Some devices will let you upload and import a VPN configuration; the "Other / GNU/Linux" configuration option is made to be compatible. For most other devices and client applications, including most routers supporting OpenVPN, you will need to fill in a few parameters as described below:
| Option | Value |
| Host or Gateway | Pick one in the server list. |
| Port / Protocol | 1196 in UDP mode (or 443 in TCP mode; prefer UDP unless blocked) |
| Interface Type | tun |
| CA certificate | Download the following file: vpn.ccrypto.org/ca.crt |
| Client / Server certificates | None |
| User name and Password | The same as on this site. |
| LZO Compression | Disabled |
| Cipher / HMAC |
AES-256-GCM, or BF-CBC + SHA1 for ancient clients.
|
| DNS Server | 10.99.0.20 |