What's New

Reliable updates and self-repairing VPN service

• Fixed an update that could leave the VPN service unregistered, so the app reported it could not communicate with the helper until P4PN was reinstalled.
• P4PN now detects an unresponsive VPN service on launch and offers to repair it.
• A failed installation is reported instead of silently completing.
• Clearer message when the VPN service is not running.

Enhanced server selection

• The server picker now measures real reachability and speed to each server and ranks them, so the best connection for you is at the top.

Miscellaneous Fixes

• Refreshing the server list is now lighter and more predictable — it updates when you open the server picker (if it is more than 10 minutes old) and whenever you refresh manually.
• The app always prefers the primary connection address and only falls back to alternates, in a fixed order, when it must.
• Removed an unnecessary delay, so server requests respond faster.
• Connection diagnostics now show the same signal strength and load you see in the server picker.
• Minor display and stability fixes.

Offline config implemented

• Connect without reaching our site: import a profile file (.p4pn or .ovpn) that we send you by email or you saved earlier — it works even when the website and login are blocked.
• Import in any convenient way: Settings > Import Profile, drag the file onto the P4PN window, or simply double-click it.
• Servers from the file appear in the usual server picker, with latency and accessibility measured from your own network.
• If the chosen server fails, the app automatically tries the other servers from the file.
• The imported profile is remembered across restarts until you dismiss it with one click.
• Improved connection diagnostics: the app now reports the full connection story, so support can see what went wrong without asking you for logs.

Server selection and redundancy

• New server picker: every location with its latency, load, and how well your own connection reaches it.
• The server button now names the country in use, and the server you pick stays for the session.
• Servers your network cannot reach are ranked down automatically, so the top of the list is always the best one for you.
• Locations known to be censored are marked, and confirmed before use.
• Connecting starts from the saved server list instead of waiting on a network request first.
• If our main address is blocked, the app now reaches the API through the VPN servers themselves — several routes are tried at once and the fastest one wins.
• Update checks and downloads travel that same path, so updating keeps working when the website is unreachable.
• Downloaded installers are verified by their Apple signature before anything is installed.

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Split-channelling implemented

Preferred country checkup

Exit IP verification implemented

• Exit IP verification implemented
• Russian localization added for connection/exit-IP log messages

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification implemented

• Exit IP verification implemented

Connection verification simplified

• Connection check now just confirms the tunnel carries traffic
• Removed the country mismatch indicator

Country verification

• Connection is now verified through our own server instead of a third-party service
• Shows a marker when the exit country cannot be verified
• Automatically restores normal routing if connection verification fails

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

Enhanced server selection

• The server picker now measures real reachability and speed to each server and ranks them, so the best connection for you is at the top.

Server selection and redundancy

• New server picker: every location with its latency, load, and how well your own connection reaches it. Pick any server — if one is blocked, the app fails over to another automatically.
• Keeps working where the site is blocked: the app reaches our servers through several routes, including the VPN nodes themselves.
• Connects instantly from the saved server list, which refreshes in the background.
• Offline profile import: load a .p4pn or .ovpn file (from Settings, or just open the file) and connect even when login is unavailable — using the same server picker.
• In-app updates: update checks and downloads travel the same resilient path, and the app installs the verified update itself.
• Improved connection diagnostics for faster support.

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• On Android you can choose apps as well as sites.
• Add your own, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

Preferred country checkup

Exit IP verification added

• Exit IP verification added

Connection verification

• Verifies the tunnel is actually carrying traffic before showing Connected
• Uses our own server for the check instead of a third-party service

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

Smoother updates

• Updating no longer stalls on a "close the running application" prompt — the installer now closes the app and service itself.
• In-app updates now install directly instead of falling back to the download page.

Enhanced server selection

• The server picker now measures real reachability and speed to each server and ranks them, so the best connection for you is at the top.

Enhanced server selection

• The server picker now measures real reachability and speed to each server and ranks them, so the best connection for you is at the top.

Choose sites to send only through the VPN

• This is the opposite of the bypass list. Instead of picking the sites that skip the VPN, you pick the only sites that should go through it — and everything else uses your normal connection. It's handy when you just need the VPN for a few specific sites and want the rest of your traffic to stay fast and direct.
• Add your own sites, or load our ready-made list. Your choices take effect the next time you connect.

Choose sites to skip the VPN

• Some sites — like banks or government portals — work best on your normal connection. Now you can choose which sites open without the VPN: add your own, or load our ready-made list. Everything else stays protected.
• Your choices take effect the next time you connect.

DPI scaling fix

• Windows: proper DPI scaling for high-DPI displays (150%, 200%, etc.)

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers

No tunnels

• Removed H2 and QUIC tunnel transport from all platforms
• Direct UDP with obfuscation only — simpler and more reliable
• Network testing scripts (Linux, macOS, Windows) with result upload
• Admin viewer role (read-only access)
• IPv6 connection block fix (correct IPv6 address in profiles)
• Testing mode shows active + testing servers

API accessibility with DNS failover. Major cleanup

• Removed experimental DNS multi-IP failover from CLI (URL-level failover only)
• Fixed Windows CLI build: 3-URL failover was missing (CMake BOOL bug with URLs)
• Fixed Windows CLI CMakeLists.txt generator expression for URL defines
• All platforms verified: 3 API URLs + beta.p4pn.net site URL baked in
• Build scripts output installers to Release/ (deploy stages to Site/download/)

Cloudflare WebSocket VPN

• WebSocket transport in OpenVPN3 core (all platforms)
• iOS WebSocket transport via NWConnection (Partout)
• WebSocket-to-UDP relay daemon on VPN servers
• Cloudflare CDN proxy with Flexible SSL
• DNS multi-IP failover with fast path (all platforms)
• Testing mode with hardcoded test token (all platforms)
• CDN proxy standardized across all 10 VPN servers
• Automatic LE cert distribution to CDN servers