IVPN

Independently Security Audited VPN with anonymous signup, no logs, no cloud or customer data stored, open-source apps and website. Strong ethics: no trackers, no false promises, no surveillance ads. Accepts various payment methods including cryptocurrencies.

Security Audited Open Source

IVPN Privacy Policy

Privacy Policy Summary

  • Users agree not to use the service for illegal purposes
  • This service prohibits users from attempting to gain unauthorized access to other computer systems
  • There is a date of the last update of the agreements
  • This service prohibits users sending chain letters, junk mail, spam or any unsolicited messages.
  • This service has a no VPN logs policy
  • Users should revisit the terms periodically, although in case of material changes, the service will notify
  • Users agree not to submit libelous, harassing or threatening content
  • The service allows you to use pseudonyms
  • Third-party privacy-focused cookies are used for statistics
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • Users shall not interfere with another person's enjoyment of the service
  • This service assumes no liability for any losses or damages resulting from any matter relating to the service
  • Third parties are involved in operating the service
  • The service is provided 'as is' and to be used at the users' sole risk
  • This service offers an anonymous payment method
  • Any liability on behalf of the service is only limited to the fees you paid as a user
  • The service can suspend your account for several reasons
  • Personal information that is shared outside its jurisdiction is processed according to the original jurisdiction’s data protection standards
  • The court of law governing the terms is in Gibraltar
  • The apps are open-source
  • Users are entitled to a refund if certain thresholds or standards are not met by the service
  • The service claims to be GDPR compliant for European users
  • You can access most of the pages on the service's website without revealing any personal information

Score

B

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #2748

IVPN Source Code

Author

ivpn

Description

Official IVPN Desktop app

#ivpn#openvpn#privacy#security#vpn#vpn-client#wireguard

Homepage

https://www.ivpn.net/apps/

Repository

  • LicenseGPL-3.0
  • Created14 May 21
  • Primary languageGo
  • Size53,002 KB
  • Stars524
  • Forks61
  • Watchers524

Language Usage

Language Usage

Project Health

  • Last commit5 days ago
  • Open issues66
  • Latest releasev3.15.15

Top Contributors

Recent Commits

  • Alexandr Stelnykovych(03 Sept 26)

    Update CHANGELOG.md v3.15.15

  • Alexandr Stelnykovych(01 Sept 26)

    Merge branch 'development' into QA/v3.15.15

  • Alexandr Stelnykovych(01 Sept 26)

    build(Windows): sign uninstaller PE via !uninstfinalize before embedding in installer https://github.com/ivpn/desktop-app/issues/435

  • Alexandr Stelnykovych(28 Aug 26)

    v3.15.15 + npm audit fix

  • Alexandr Stelnykovych(28 Aug 26)

    fix(macOS/helper): correct is_safe_dir ownership check && was used instead of ||, so a file owned by root:non-wheel was incorrectly treated as safe and skipped the chown -R repair.

  • Alexandr Stelnykovych(28 Aug 26)

    docs(macOS): add README for helper, uninstaller, and libivpn projects

  • Alexandr Stelnykovych(27 Aug 26)

    UI: Update icon and text for "Unhealthy connection" state

  • Alexandr Stelnykovych(25 Aug 26)

    build(Windows): sign all staged .exe/.dll, verify signer identity - Remove explicit binary list; sign everything under bin/temp/ via Get-ChildItem instead of a maintained per-file list - Move SHA256 checksum verification before signing so hashes are checked on original bytes - Extend signature verification from .exe-only to .exe + .dll - Replace signtool-per-file verification loop with Get-AuthenticodeSignature; print one line per file with signer CN - Enforce signer identity in verification: thumbprint must match CERT_SHA1, or file must be catalog-signed (Microsoft redistributables) - Print signed/verified file counts after each phase https://github.com/ivpn/desktop-app/issues/435

  • Alexandr Stelnykovych(25 Aug 26)

    (windows) Sign OpenVPN dll-s

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request: Add WireGuard connection health checker and UI notifications Introduce a health checker for WireGuard connections that actively probes the tunnel state. The application now surfaces an "unhealthy" state in the UI, providing users with notifications when the connection is not functioning properly. This includes updates to the daemon responses, UI indicators, and tray status. ivpn/desktop-app-shadow#207

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #609 from ivpn/feature/2026-07-app_update_imporovements app-updater: minOsVersion gating, optional notes, macOS permission fixes (#565) #### - `minOsVersion` OS compatibility gating Adds support for an optional `minOsVersion` field in the update JSON. When present: - The automatic update checker silently skips the notification if the running OS is older than the required version. - The manual "Check for updates" dialog shows an informational warning and hides the download button instead of offering an uninstallable update. - Omitting the field keeps existing behavior (fully backward-compatible). Supported format: `"X"`, `"X.Y"`, or `"X.Y.Z"` (e.g. `"12"` for macOS 12+, `"10.0.19041"` for Windows 10 build 19041+). The check **fails open** - if the OS version cannot be parsed, the update is shown. #### - Optional `generic.notes` in the update dialog The update dialog now renders `generic.notes` (if present in the update JSON) as pre-formatted text above the release notes section. #### - macOS updater: umask and permission handling (#565) - Sets `umask 022` at the top of `install.sh` so files copied during an update are world-readable even when the parent process runs with a restrictive umask (e.g. `077`).

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #607 from ivpn/dependabot/github_actions/github/codeql-action/analyze-4.37.7 build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.7

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #606 from ivpn/dependabot/github_actions/github/codeql-action/autobuild-4.37.7 build(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.7

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #604 from ivpn/dependabot/github_actions/github/codeql-action/init-4.37.7 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.7

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #605 from ivpn/dependabot/github_actions/github/codeql-action/upload-sarif-4.37.7 build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.7

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #587 from ivpn/dependabot/github_actions/actions/stale-11.0.0 build(deps): bump actions/stale from 10.3.0 to 11.0.0

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #583 from ivpn/dependabot/github_actions/ruby/setup-ruby-1.321.0 build(deps): bump ruby/setup-ruby from 1.316.0 to 1.321.0

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #573 from ivpn/dependabot/github_actions/actions/checkout-7.0.1 build(deps): bump actions/checkout from 7.0.0 to 7.0.1

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #566 from ivpn/dependabot/github_actions/actions/setup-go-7.0.0 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #563 from ivpn/dependabot/github_actions/securego/gosec-2.28.0 build(deps): bump securego/gosec from 2.27.1 to 2.28.0

  • Alexandr Stelnykovych(20 Aug 26)

    Merge pull request #562 from ivpn/dependabot/github_actions/actions/setup-node-7.0.0 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0

  • Alexandr Stelnykovych(20 Aug 26)

    fix(UI): prevent Chromium from accessing OS keychains on macOS and Linux

  • Alexandr Stelnykovych(20 Aug 26)

    cli: Print "Unhealthy Connection" status

  • Alexandr Stelnykovych(17 Aug 26)

    fix: An unauthenticated local client may be able to crash the IVPN daemon process by triggering a nil pointer dereference during connection cleanup before the initial Hello authentication handshake is completed. Affected files: daemon/protocol/protocol.go daemon/protocol/protocol_private.go Vulnerability type: CWE-476: NULL Pointer Dereference CWE-248: Uncaught Exception The daemon accepts local TCP connections and starts handling them through processClient(). Before successful Hello authentication, the client is not registered in the internal connection map. The authentication flow returns before clientConnected() is called when: - the first command is not Hello; - the Hello secret is incorrect; However, processClient() always executes deferred cleanup: ``` defer func() { disconnectedClientInfo := p.clientDisconnected(conn) }() ``` Inside clientDisconnected(), the connection information is retrieved: ``` var ret *connectionInfo if ci, ok := p._connections[c]; ok { ret = ci } ``` For unauthenticated connections, ret remains nil. Later the code executes: ` interoperability.ClientDisconnected(ret.Type) ` which dereferences the nil pointer and causes a panic.

  • dependabot[bot](17 Aug 26)

    build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.7 Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](17 Aug 26)

    build(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.7 Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.36.2 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](17 Aug 26)

    build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.3 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot](17 Aug 26)

    build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.7 Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.36.2 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

  • Alexandr Stelnykovych(06 Aug 26)

    fix(macOS updater): avoid post-copy permission normalization to prevent daemon rights regressions (#565) - keep restrictive-umask mitigation via umask 022 in update install script - remove updater-side chmod/chown normalization step from execution path - document why normalization is disabled (daemon requires strict rights for bundled static files in Contents/Resources/etc) - retain normalization snippet as commented reference only https://github.com/ivpn/desktop-app/issues/565

  • Alexandr Stelnykovych(06 Aug 26)

    app-updater: show optional notes text above release notes in update dialog

IVPN Security

6.3/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review0/10
  • Dangerous-Workflow10/10
  • PackagingN/A
  • Security-Policy10/10
  • Maintained10/10
  • Token-Permissions9/10
  • Binary-Artifacts0/10
  • CII-Best-Practices2/10
  • Fuzzing0/10
  • License10/10
  • Pinned-Dependencies7/10
  • Signed-ReleasesN/A
  • Branch-ProtectionN/A
  • SAST10/10

IVPN Website

Website

https://www.ivpn.net/en/

Redirects

Redirects to https://www.ivpn.net/en/

Security Checks

1 security checks failed (64 passed)

  • Robots Noindex

Server Details

  • IP Address198.50.177.216
  • Hostnameip216.ip-198-50-177.net
  • LocationGibraltar,Gibraltar,Gibraltar,EU
  • ISPOVH Hosting Inc.
  • ASNAS16276

Categories

Some proxies may block this service, as it falls into the following categories

  • VPN Provider

Associated Countries

  • USUS
  • GIGI
  • PLPL

Safety Score

Website marked as moderately safe

90%

Blacklist Check

www.ivpn.net was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

IVPN Android App

APK Info

De-Googled Compatibility

Native4.00/ 48 ratings
microG4.00/ 42 ratings
  • GrapheneOSNative4.0 / 4(8)

Tested on Android 13–16 · Updated 13 Jun 26 · View on Plexus →

Trackers

  • Google CrashLytics
  • Google Firebase Analytics

Permissions

  • Access Network State
  • Internet
  • Read External Storage
  • Receive Boot Completed
  • Wake Lock
  • Write External Storage
  • Receive
  • C2d Message

IVPN iOS App

App Info

IVPN - Secure VPN for Privacy

IVPN is a privacy-first VPN service that offers WireGuard, multi-hop connections and a built-in ad/tracker blocker. What makes our customers trust us: - Regular third-party audits since 2019. - Open-source apps without trackers. - Privacy friendly account creation - no email address required. - Transparent ownership, team. - Clear privacy policy and strong ethical guidelines. What can you expect when using IVPN for iOS: - Fast servers in more than 50 locations. - OpenVPN, IPSec with IKEv2 and WireGuard protocol support. - Improved security for Wi-Fi/LTE/3G/4G. - Use on up to 7 devices (Pro plan). - AntiTracker to block ads, web and app trackers. - Automatic Kill Switch. - Set trusted networks and use custom DNS. - Multi-hop connections for improved privacy. - 24/7 customer service assistance. What we do differently than other VPNs? - No logs and data collection. - No free tier, data mining and selling of browser history. - No third-party tools in app. - No misleading ads. - No false promises (e.g. full anonymous connection). - Privacy guides to help you improve your privacy. - Civilian grade encryption. Why use a VPN on iOS? - Improve your data privacy with a private connection on your iPhone and iPad. - Secure VPN for browsing at WiFi hotspots, airports and hotels. - Hide your connection and protect your private data from your ISP. - Hide your IP to prevent websites snooping on you. IVPN was founded in 2009 with a mission of protecting individual privacy. Our team includes information security experts and privacy advocates who are working towards a surveillance-free future. We believe that everybody has the right to freedom of opinion and expression online without interference. Review our clear, simple privacy policy: https://www.ivpn.net/privacy Terms of Service: https://www.ivpn.net/tos Privacy guides: https://www.ivpn.net/blog/privacy-guides WireGuard® is a registered trademark of Jason A. Donenfeld.

Rating

Rated 4.05 out of 5 stars by 251 users

Version Info

  • Current Version2.14.2
  • Last Updated11 Jun 26
  • First Released01 Feb 17
  • Minimum iOS Version15.0
  • Device Models Supported127

App Details

  • IPA Size60.61 Mb
  • PriceFree (USD)
  • Age Advisory4+
  • Supported Languages1
  • DeveloperIVPN Limited
  • Bundle IDnet.ivpn.clients.ios

Screenshots

  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot

IVPN Reviews

More Virtual Private Networks

  • Azire is a Swedish VPN provider, who owns their own hardware with physically removed storage and a no logging policy. Pricing starts at €3.25/mo, with crypto (including XMR) supported. Note that they've not yet been audited, and client applications are not open source, for more info, see #140.

    Not Open Source
  • Mullvad is one of the best for privacy, they have a totally anonymous sign up process, you don't need to provide any details at all, you can choose to pay anonymously too (with Monero, BTC or cash).

    Security Audited Open Source mullvad/mullvadvpn-app
  • A court-proven VPN service with support for Wireguard and OpenVPN support, and optional ad-blocking. Running on dedicated hardware, with no hard drives.

    No Security Audit
  • Crypto-native VPN with pay-as-you-go pricing. Accepts cryptocurrency only, including Monero. WireGuard and AmneziaWG protocols, no-logs policy, REST API for developers. No subscriptions or credit cards.

    Crypto Payments Accepted No Security Audit
  • From the creators of ProtonMail, ProtonVPN has a solid reputation. They have a full suite of user-friendly native mobile and desktop apps. ProtonVPN is one of the few "trustworthy" providers that also offer a free plan.

    Security Audited Open Source ProtonVPN/android-app
  • An audited and court-proven VPN with a free 10GB plan, in-RAM servers, browser extensions and open source WireGuard/IKEv2/OpenVPN clients. Supports split tunneling, customizable DNS blocking, MAC spoofing, decoy traffic and censorship circumvention.

About the Data: IVPN

Change History

  • Amended (androidApp, iosApp)

Edit IVPN Data

You can edit IVPN's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access IVPN's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/ivpn

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share IVPN

Help your friends compare Virtual Private Networks, and pick privacy-respecting software and services.
Share IVPN and Awesome Privacy with your network!