Privacy Stack by VPN for Android
Four interconnected tools engineered by our security team: VPN, email aliasing, DNS filtering, and application firewall.
Built to resist commercial mass surveillance by stopping telemetry at the network layer, the email identity layer, and the device operating system layer.
Portmaster
Services Overview
VPN for Android is an audited privacy tunnel service. We encrypt traffic between your Android device and our bare-metal gateway relays, preventing mobile carriers, public Wi-Fi sniffers, and network observers from recording your activity.
We focus on verifiable security rather than marketing hype: strict zero activity logging, no email required to create an account, open-source client code, and bare-metal servers operating exclusively on RAM.
VPN for Android features:
- > Open-source applications for Android, Windows, macOS, Linux, and iOS.
- > Bare-metal servers deployed in 58 locations across 41 countries.
- > WireGuard and OpenVPN protocols with automated daily key rotation.
- > Quantum-resistant WireGuard encryption enabled by default.
- > V2Ray obfuscation support to bypass restrictive network firewalls.
- > Built-in Kill Switch firewall and private DNS leak protection.
- > Multi-hop routing through multiple jurisdictions for high-threat scenarios.
- > AntiTracker to block advertising and tracker domains system-wide.
Mailx is an open-source email aliasing and forwarding tool that conceals your real primary email address from websites, apps, and mailing lists.
Your email address functions as a persistent tracking identifier across the web. Mailx prevents cross-service profiling by generating infinite unique disposable aliases that forward securely to your inbox.
Mailx features:
- > Create and manage unlimited email aliases across multiple private domains.
- > Forward to single or multiple verified destination recipients.
- > Instant on-the-fly alias creation using Wildcard aliases.
- > End-to-end PGP email content encryption before forwarding.
- > Granular forwarding analytics and sender reputation management.
modDNS is an audited, open-source DNS resolver that actively neutralizes ads, tracking endpoints, and malicious malware domains at the DNS level.
DNS lookups reveal your browsing destinations to ISPs and network operators. modDNS encrypts your DNS traffic via DoH, DoT, and DoQ, providing granular control over custom blocklists.
modDNS features:
- > System-wide configuration on Android, router hardware, and desktop browsers.
- > Curated open-source blocklists for trackers, adware, malware, and telemetry.
- > Fine-tuned custom whitelist and blacklist rules.
- > Modern encrypted protocols: DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC.
Portmaster
(Available on Windows & Linux)
Portmaster is an open-source application firewall that provides granular visibility into all outgoing background device connections, letting you block unauthorized software telemetry.
Operating at the system kernel layer, Portmaster inspects every connection by process name, enabling custom per-app rules and multi-hop routing capabilities.
Portmaster features:
- > Real-time connection inspection per app with IP, domain, and port attribution.
- > Block internet access for untrusted background apps and OS telemetry.
- > System-wide ad, tracker, and malware host protection.
- > Integrated multi-hop privacy network with built-in Kill Switch.
Product Plans
Our services are bundled within unified VPN for Android subscription tiers.
| Services Included | Standard | Plus | Pro Suite |
|---|---|---|---|
| VPN for Android | 5 devices | 5 devices | 10 devices |
| Mailx Email Aliasing | ✕ | Included | Included |
| modDNS Resolver | ✕ | Included | Included |
| Portmaster Pro | ✕ | ✕ | Included |
| Annual Price | $60 / yr | $80 / yr | $100 / yr |
Flexible weekly, monthly, and multi-year options are also available.
Unlinked Access Architecture
Under the Plus and Pro Suite plans, Mailx, modDNS, and Portmaster authorize access without receiving, linking, or storing your central VPN for Android account identifier.
When you activate an auxiliary service, our infrastructure transmits an ephemeral cryptographic token derived from your account. Auxiliary services authenticate a hash of that token to verify subscription validity, maintaining zero cross-service linkability.
Protect Your Entire Digital Footprint
Deploy our privacy suite across all your Android smartphones, tablets, and computers with no personal email required.
Generate Anonymous Account