How can we help?

A decentralized WireGuard VPN that runs on the Flux cloud. One tap routes your traffic through independent Flux nodes worldwide. No account, no logs.

No. On first launch the app generates a WireGuard key on your device — that key is your only identity. No email, password, or phone number, ever.

Open the app, pick a country, and tap connect. On the first connection your phone shows a standard operating-system VPN-permission prompt — approve it once.

Yes, forever. It's capped at 100 KB/s (fine for browsing and chat), with no payment details and no trial.

Every gateway in the fleet — 30+ countries at launch — and the list updates live from the network.

No activity logs. Gateways hold minimal routing state in RAM only, erased on disconnect or restart. Your browsing, DNS queries, and traffic are never recorded. See the privacy policy for the full detail.

A WireGuard keypair generated on your device. The private key is never sent to us or to a gateway; only the public key is shared, to route your tunnel. It's a pseudonym, not tied to your identity. The phone app keeps an encrypted backup of the key so reinstalling keeps it — you can turn that off in Settings. You can also save it as a recovery key and restore it on any phone, tablet or computer.

Like any VPN exit, real-time encrypted flow metadata — but no log we create, and never your traffic contents. Turn on multi-hop so no single server sees both who you are and where you're going.

It routes your traffic through two gateways, so no single server sees both your IP and your destination. It's slower — the app tells you how much — and it's off by default.

No. CumulusVPN protects you from local-network snooping, ISP logging, and geo-restrictions, but it is not anonymity software like Tor. We say so plainly.

On the web at vpn.cumulusvpn.com — with FLUX from your own wallet (cheapest) or by card, Apple Pay or Google Pay. Where the iOS or Android app offers an in-app subscription, you can subscribe there through Apple or Google instead. Your device unlocks on its own about a minute after payment confirms.

FLUX is the cryptocurrency of the Flux network. Buy it on an exchange and hold it in a wallet such as Zelcore or SSP, then pay from there.

Your entitlement is computed from the public blockchain and keyed to your public key, so every gateway flips that key to full speed within about a minute — on all servers at once, for 30 days. It unlocks whichever device holds that key — there is no account. Save your recovery key to restore it on any phone, tablet or computer; it works best on one device at a time, or on devices connected to different countries.

Yes. Send a multiple of the monthly amount and the extra months stack (up to 24).

Yes. On the web, cards, Apple Pay and Google Pay are handled by Stripe; where an app offers an in-app subscription, Apple or Google handles it. The processor holds your payment details — we never see them, and there is still no account. Paying in FLUX from your own wallet stays the cheapest option.

Your Premium belongs to your key, not to one device — and each app makes its own key when it is installed, so your other device has a different one. Save the recovery key on the device you paid for (in its Settings, or on the Connect page on the web) and restore it on the other device. It works best on one device at a time, or on devices connected to different countries; two devices on the same server would keep knocking each other off. To give the other device its own Premium instead, copy its Device code from Settings → About and paste it into the box on the upgrade page.

Yes. Save your recovery key and restore it on each device — Premium belongs to the key, so it comes along. It works best on one device at a time, or on devices connected to different countries: two devices on the same server knock each other off. Or give each device its own Premium by paying for its Device code (Settings → About).

By default, Cloudflare (1.1.1.1). In the web app you can switch to Google Public DNS, which filters nothing, Quad9, which blocks known malicious sites, DNS4EU, an EU-based resolver that blocks malware and phishing, AdGuard DNS, which blocks ads and trackers, or Cloudflare for Families, which blocks malware and adult content. The mobile apps get the same choice from version 1.3.1. Your look-ups travel inside the tunnel to our server, which sends them on encrypted (DNS over HTTPS) to the provider you picked, so the provider sees the server's address, never yours, and we keep no DNS logs. We briefly offered Mullvad DNS too; Mullvad is closing it by 2 November 2026, so look-ups sent to it now go to Quad9, which Mullvad recommends instead.

Nothing is lost, but it will not unlock on its own. A payment only grants premium if it carries your exact CVPN1: code and covers at least one day. Email support with the transaction id and the Device code from Settings → About, and we will credit it by hand — you will be asked to prove you hold the key. Automated claiming is on the roadmap.

Your device probably has no working internet, or a captive portal (hotel/airport Wi-Fi) is blocking the gateway probe. Reconnect and reopen the app — discovery retries automatically.

Approve the operating-system VPN-permission prompt on the first connect. If another VPN is already active, disconnect it first, then try again — or pick a different country.

The free tier is capped at 100 KB/s server-side. Upgrade to premium for full speed.

Android and iOS require your explicit consent before any app can create a VPN tunnel. It's the operating system asking, once — approve it to connect.

Disconnect, then regenerate or delete your key in the app's settings. That severs the pseudonymous link; gateway state is RAM-only and already clears when you disconnect.