Obscura splits VPN traffic across two servers to block logging
Obscura is presented on its site as a VPN designed so that the company itself cannot see a user's browsing activity, rather than one that simply promises not to log it. The pitch is aimed directly at "no-log" VPN providers: those services still see both a customer's identity and their decrypted traffic, so privacy depends on trusting the provider's word. Obscura's claim is that it never has the decrypted traffic in the first place, so there is nothing to leak, hand over under compulsion, or lose in a server breach.
The mechanism is what Obscura calls a Two-Party Relay architecture, built as WireGuard-over-QUIC. A user's device connects to Obscura's own servers over QUIC, the transport behind HTTP/3. Those servers relay the WireGuard tunnel onward to a separate, independent exit hop, currently operated by Mullvad, without being able to decrypt it: the packets they forward are encrypted to Mullvad's WireGuard public key, not Obscura's. Mullvad's exit servers, in turn, never see the user's real connecting IP address, because Obscura's servers perform network address translation before the traffic reaches them. Obscura says this splits the two pieces of information that matter, identity and traffic, so that neither party in the relay holds both at once. The company contrasts this with a typical multihop VPN, where the same provider runs every hop and can therefore still link a user's identity to their traffic.
The QUIC-based transport doubles as a censorship workaround. Because it looks like ordinary HTTP/3 traffic, Obscura says it is harder for network filters and censors to detect or block than a conventional VPN protocol, and it avoids the so-called TCP-over-TCP meltdown that can slow other tunneling approaches, since QUIC's unreliable datagram extension is used instead. Obscura also positions itself as a faster alternative to Tor: it says Tor's volunteer-run network can be slow and vulnerable to denial-of-service problems, whereas its own two dedicated, high-performance hops aim to deliver much of Tor's privacy benefit without that usability cost.
Obscura offers ways for users to check its claims rather than simply trust them. The client app's source code is published on GitHub, the company says it plans to ship reproducible builds so a downloaded app can be verified against the published source, and the app itself displays the WireGuard public key of the exit hop a user is currently connected through, which can be checked against the list Mullvad publishes to confirm it is a genuine Mullvad server. On macOS, the app installs a Network Extension that Obscura describes as a fully sandboxed process with no kernel-level access to the system.
On pricing, Obscura costs $8 a month and can be topped up or renewed with a credit card via Stripe, or with Bitcoin over Lightning or Monero for users who want to avoid linking payment to identity; Obscura says Stripe may require an email address for subscriptions but that it never stores that email itself. Each account has five simultaneous connection slots, which the company is careful to distinguish from "five devices": using the Obscura app, a user can sign in on any number of devices but only occupies a slot while actively connected, whereas each WireGuard configuration reserves a slot permanently until it is deleted from the account, connected or not. Native apps are available for macOS, iOS, Android, Windows and Linux, and any WireGuard-compatible platform, including routers, can connect using a generated WireGuard configuration, though that route does not get the QUIC-based obfuscation used to get around censorship. Obscura lists exit-node locations across North America, Latin America, Europe, Asia, Africa and Oceania, alongside a separate, smaller set of relay (first-hop) server locations.
Key facts
- Obscura is a VPN built on a Two-Party Relay architecture, using WireGuard-over-QUIC, so that its own servers never see a user's decrypted traffic, only the connecting IP address.
- A separate, independent exit hop, currently run by Mullvad, relays the traffic onward but never sees the user's real IP address, because Obscura's servers perform NAT before forwarding it.
- The QUIC-based stealth protocol is designed to blend in with ordinary HTTP/3 traffic, making it harder for censors and network filters to detect or block than conventional VPN protocols.
- The service costs $8 a month, accepts Stripe, Bitcoin over Lightning and Monero, and gives each account 5 simultaneous connection slots, distinct from a device count.
- Obscura publishes its app's source code on GitHub, plans reproducible builds, and lets users check the exit hop's WireGuard public key against Mullvad's published list, though no independent third-party audit is mentioned.
Why it matters
Most VPNs that promise privacy do so as a policy: a "no-log" pledge that a customer has to take on trust, since the provider can technically see both who a user is and everything they do online. Obscura's argument is that this trust requirement is itself the weak point, and that splitting a VPN connection across two independent operators, one seeing only a connecting IP address and the other seeing only anonymised traffic, removes the need to trust either party's word, because neither one has enough information to expose a user even if compelled to.
Who it affects
The pitch is aimed at privacy-conscious users who have grown wary of "no-log" claims they cannot verify, and at people who need to get around internet censorship, since the stealth protocol is built to blend in with regular HTTP/3 traffic. Obscura ships native apps for macOS, iOS, Android, Windows and Linux, and anyone on a WireGuard-compatible platform, including router operating systems, can connect using a generated WireGuard configuration instead.
How to use it
Obscura costs $8 a month, payable by credit card through Stripe, or with Bitcoin over Lightning or Monero for users who want to avoid linking payment details to their identity. Each account gets 5 simultaneous connection slots: the Obscura app only occupies a slot while a device is actively connected, so a user can sign in on unlimited devices, while each WireGuard configuration reserves a slot permanently until it is deleted from the account. Users who prefer the standard WireGuard protocol can generate a configuration for any compatible device, though that path forgoes the QUIC-based obfuscation used against censorship.
How solid is it
Obscura backs its claims with a few concrete checks rather than asking for blind trust: the app's source code is on GitHub, the company says it plans to offer reproducible builds so a downloaded app can be matched against the published source, and the app displays the exit hop's WireGuard public key, which a user can compare against the list Mullvad publishes to confirm they are connected through a genuine Mullvad server. That still leaves the architecture resting on two parties, Obscura and Mullvad, staying independent of each other and each honest about what they do and do not log; the source material does not mention any independent third-party audit of the system.
Risks and caveats
The privacy guarantee depends on Obscura and Mullvad remaining genuinely separate operators that do not share data with each other, since the whole design assumes neither one alone can see both a user's identity and their traffic. The stealth protocol's resistance to censorship is also a moving target: it works by resembling ordinary HTTP/3 traffic today, but network filters evolve. The source material gives no launch date, no user or subscriber numbers, no named founders or team members, no independent audit of the no-log design, and no pricing tier other than the $8 a month figure.
“It's simply impossible for us to log your internet activity, even if we were compelled to, or if our servers were compromised.”
— Obscura, company FAQ