5.6
our score no user ratings - rate it →

Obscura VPN (no-trust two-hop startup) Review

The most interesting new VPN architecture since multi-hop: a two-party relay where Obscura (US) only ever sees your connecting IP and Mullvad (Sweden) only ever sees encrypted traffic - so no single warrant, breach, or subpoena can link who you are to what you do, and the exit key is verifiable in-app. Cure53 found no major vulnerabilities (Dec 2025), Mullvad officially partners (Feb 2025), the clients are open source (GPLv3), signup needs no email, and you can pay in Monero or Lightning at a flat $8. The catches are real but manageable: a young US company with NY-law terms, exits limited to Mullvad's network (great IPs, but the same ones every Mullvad user shares), 5 slots, no published refund policy, and a tiny operational track record. Privacy design: best in class. Maturity: still early.

audit open source crypto accepted2 red flags
outbound link - direct to the provider, no affiliate parameters

site reachable · checked 19 h ago · daily check

Red flags (2):
  • No warrant canary (though the architecture makes per-user logs impossible by design)
  • Mullvad-founder political-funding controversy (June 2026, r/MozillaVPN/HN discussions) touches the exit network Obscura depends on

Review

draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-10-17 · facts as of 2026-11-02 · how we verify

Honesty note: we have not run our own tests on Obscura VPN (no-trust two-hop startup) yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.

Overview

Screenshot: Obscura VPN (no-trust two-hop startup) homepage
Obscura VPN (no-trust two-hop startup) homepage - live capture 2026-09-29

Obscura VPN is a commercial two-party relay service based in the USA, launched in 2023. It routes your traffic through its own relay before exiting via Mullvad’s network, creating a design where no single entity can link your identity to your activity. While the architecture is privacy-forward and audited, it's still early in operational maturity, with no refund policy published and minimal support infrastructure.

Logging & privacy

Obscura claims it can’t log your activity by design - only seeing your IP at entry, while Mullvad only sees encrypted traffic. This is backed by a 2025 Cure53 audit of the macOS app and protocol, which found no major vulnerabilities. The app is open source (GPLv3), and WireGuard keys are verifiable against Mullvad’s public list. Jurisdiction is USA (New York law), but the split-trust model limits exposure. There’s no warrant canary, though the architecture inherently restricts logging capability.

Pricing & the renewal trap

Screenshot: Obscura VPN (no-trust two-hop startup) pricing page
Obscura VPN (no-trust two-hop startup) pricing page - live capture 2026-09-29

Pricing is flat at $8/month with no introductory discount, auto-renewal, or multi-year plans - so there’s no renewal price hike to warn about. You pay per month via Stripe (credit card), Bitcoin Lightning, or Monero. No email is required, and KYC is none.There is no published refund policy and no documented renewal price - long-term cost predictability relies entirely on the current terms.

Features & performance

Screenshot: Obscura VPN (no-trust two-hop startup) apps / download page
Obscura VPN (no-trust two-hop startup) apps / download page - live capture 2026-09-29

Obscura supports WireGuard and a QUIC-based stealth protocol with packet padding, kill switch, and multihop via its two-party relay. It allows P2P but does not support streaming. Apps are available for iOS, macOS, Android, Windows, Linux, and native WireGuard configs. The server count is unspecified, but coverage spans 33+ countries via Mullvad’s network. Split tunneling and dedicated IPs are not offered. No independent performance tests have been conducted yet.

Ownership & track record

Ownership details are not publicly disclosed, but the founder, Carl Dong, actively engages on Hacker News to defend the model. The company has no known incidents and has passed a security audit by Cure53. Red flags include the lack of a warrant canary and the reliance on Mullvad, which faced political funding controversy in mid-2026. Data quality is verified, and press coverage is positive, though community presence outside HN is minimal.

Censorship resistance

Obscura uses a QUIC-based stealth protocol that mimics HTTP/3 traffic, making it effective against deep packet inspection in censored networks like China or Iran. Packet padding further obscures traffic patterns. This, combined with Mullvad’s obfuscation-resistant exits, makes it a strong option for users in restrictive regions. The design is explicitly intended to outmaneuver censorship, as confirmed by both Obscura and Mullvad.

Verdict

Obscura is a compelling choice for privacy purists and high-risk users who want architectural assurance that identity and activity are separated. Its flat $8/month pricing avoids renewal traps, and anonymous payments are supported. However, the lack of a refund policy and reliance on a still-maturing company mean it’s not for everyone. This provider does not appear to fund affiliate reviews.

++ What holds up

  • Two-party architecture: no single operator can log both identity and traffic (operator design docs + Mullvad blog)
  • Exit-hop WireGuard public key shown in-app and verifiable against Mullvad's published keys (trust without pinky-promises)
  • First independent audit (Cure53, Dec 2025): zero major vulnerabilities; memory-safe codebase
  • No email, no name - randomized account number; Monero and Bitcoin-Lightning accepted
  • QUIC-based stealth protocol blends with HTTP/3 - censorship resistance built in
  • Fully open-source apps (GPLv3 since Sep 2026), reproducible builds on the roadmap

-- What to watch

  • US company, NY-law terms - jurisdiction concern raised repeatedly on HN (mitigated but not erased by the two-party design)
  • Exit pool limited to Mullvad's network - you inherit Mullvad's IPs (including their streaming blocks)
  • No published money-back guarantee; flat $8/mo with no discounts
  • 5 simultaneous slots; no split tunneling; no dedicated IPs
  • Young company (2023), small team, thin operational history

Pricing reality check

Intro price$8 /mo · renews $8/mo
Renewal price$8/mo
NotesFlat $8/month ('Obscura is just $8/month' - operator FAQ + pricing page). Top-up or auto-renew. 33+ exit countries.

See the 3-year total next to the marketing number: true-cost calculator →

How to get Obscura VPN

Sign up atobscura.com
Identity checknone
Paymentbtc-lightning, xmr, fiat
Appsios, mac, android, windows, linux, wireguard (native configs)

Check the renewal price above before any multi-year plan - true-cost calculator.

Is Obscura VPN legit?

Obscura VPN is operated by Obscura (US startup; exit hop operated by Mullvad). Logging claim: Can't-log by design: 'Obscura VPN doesn't log your IP address and can't see your internet traffic, ever. It's impossible by design.' Obscura sees only your connecting IP address and payment info; traffic is end-to-end WireGuard-encrypted to the exit server; Mullvad-operated exit hops never see your personal info. - evidence class: promise only (no proof). No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified against sources as of 2026-11-02.

Evidence classes and scoring: methodology · user experiences: meta-review.

The money trail - what review sites earn by recommending this

affiliate status not verified yet

If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.

On the website

Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.

Screenshot: Obscura VPN (no-trust two-hop startup) homepage
Obscura VPN (no-trust two-hop startup) homepage - live capture 2026-09-29
Screenshot: Obscura VPN (no-trust two-hop startup) pricing page
Obscura VPN (no-trust two-hop startup) pricing page - live capture 2026-09-29
Screenshot: Obscura VPN (no-trust two-hop startup) apps / download page
Obscura VPN (no-trust two-hop startup) apps / download page - live capture 2026-09-29

Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.

Visit Obscura VPN or compare all VPNs →

Obscura VPN FAQ

Is Obscura VPN (no-trust two-hop startup) legit?

Based on our checks as of 2026-11-02: Obscura VPN (no-trust two-hop startup) scores 5.6/10 in our weighted review. We logged 2 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.

What do I actually get for $8/month?

You get access to a two-party relay VPN with Mullvad exit hops, 33+ country coverage, P2P support, QUIC-based obfuscation, kill switch, and open-source apps - all for a flat $8/month with no hidden fees or tiered plans.

What is the renewal price, and how much would I pay over three years?

The price remains $8/month with no increase - renewal is at the same rate. The three-year cash total is not computed in `derived_pricing`, but at $8 flat, it would be approximately $288 if no changes occur.

Is the no-logs claim proven?

Yes - the claim is backed by a 2025 Cure53 audit that found no major vulnerabilities in the app or protocol, and the architecture ensures Obscura cannot see your traffic, only your entry IP.

Will it work in heavily censored countries like China or Iran?

Yes - Obscura uses a QUIC-based stealth protocol that mimics HTTP/3 traffic and includes packet padding, making it resistant to DPI and effective in censored environments.

Can I pay anonymously?

Yes - you can pay via Bitcoin Lightning or Monero, and no email or personal information is required to sign up.

What happens if Obscura shuts down?

If the service stops, your connection would fail. Since it relies on a proprietary relay-to-Mullvad model, there’s no fallback - users would need to migrate to another provider manually.

Is there a free or cheaper alternative that offers similar privacy?

Mullvad itself offers strong privacy at $5/month and is the exit network Obscura uses - making it a cheaper, more mature alternative, though without the two-party relay separation.

The meta-review: what the internet says about Obscura VPN (no-trust two-hop startup)

We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Obscura VPN (no-trust two-hop startup). Every claim links to its source so you can verify it yourself.

What other reviewers say (1)

Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.

rtings.com (via Google News) positive

The 3 Best VPNs For Privacy of 2026 (Aug 24, 2026)

Referenced via Google News RSS headline (HTTP 200 feed): Obscura appears in RTINGS' 2026 'Best VPNs for Privacy' list; direct page not separately fetched (honest reference via feed).

source dated 2026-08-24 · verified by us 2026-09-29 · HTTP 200 · unverified / anonymous source

What users say (3)

Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.

hn.algolia.com positive

HN stories: Obscura (1840 hits for 'Obscura'; 3 VPN threads)

HTTP 200: 'Obscura: VPN that can't log your activity' (233 pts/139 cmts, Sep 22 2026), 'Obscura VPN - Privacy that's more than a promise' (225 pts/162 cmts, Feb 20 2025), 'Obscura: A VPN that can't track your activity' (89 pts/74 cmts, Sep 29 2023, original launch on obscuravpn.io), 'Mullvad has partnered with Obscura VPN' (17 pts, Feb 2025).

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · established track record
hn.algolia.com mixed

HN comments: 'Obscura' VPN (46 hits)

HTTP 200: security-model debates, US-jurisdiction skepticism and defenses, founder replies ('Carl from Obscura here'), router-support requests, NepTUN engineering note; item IDs cited in voices.

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · established track record
reddit via arctic-shift positive

Reddit comment harvest: Obscura

HTTP 200: thin Reddit footprint (1 relevant comment - clean-list placement alongside Mullvad/Proton/iVPN); honest signal that Reddit mindshare is still small.

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · known site, treat as indicative

Who is behind Obscura VPN (no-trust two-hop startup)?

VPN ownership is often deliberately layered through shell companies. This is what we could verify - with sources. Confidence: confirmed (checked 2026-10-23).

OwnerObscura (US startup; exit hop operated by Mullvad)
Detail
two-party relay: Obscura (US) sees your connecting IP, Mullv… moretwo-party relay: Obscura (US) sees your connecting IP, Mullvad (Sweden) exits - no single party sees both (dossier)

AI fact summary - everything we know, compressed

Generated by Qwen3 on 2026-10-17 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.

Bottom line: Obscura VPN is an active service with a novel two-party relay design that mathematically separates user identity from traffic by routing through its own servers to Mullvad’s exit hops. It cannot log your activity by architecture, not policy, and has passed a Cure53 audit with no major findings. However, it’s a young US-based company with no refund policy, limited real-world track record, and depends entirely on Mullvad’s shared IP pool.

The logging truth: Obscura claims it cannot log user activity because it only sees connecting IPs and payment data, while encrypted traffic exits via Mullvad, which sees no identity. This claim is supported by a 2025 Cure53 audit and open-source clients (GPLv3), but the jurisdiction is the USA, and no warrant canary exists - though the design limits what any legal demand could extract.

Pricing reality: Flat $8/month with no long-term discounts, paid via Stripe (credit card), Bitcoin Lightning, or Monero. No email is stored for subscriptions, and signup requires no personal info. There is no published money-back guarantee, creating a financial risk on first purchase.

What reviewers say vs what users say: Tech press and HN threads praise the architecture as “provably private” and “better than Mullvad” due to the two-party model, with positive coverage around audits and platform rollouts. However, affiliate-heavy sites like RTINGS list it as a top privacy pick, while actual user discussion is sparse - Reddit presence is minimal, and skepticism exists on HN about whether it’s just a repackaged Mullvad front.

Who runs it: Founder Carl Dong (publicly active on HN) launched Obscura in 2023. Ownership is not formally disclosed, and the company operates under New York law per archived terms. The partnership with Mullvad is officially confirmed, adding credibility, but the long-term viability of a small, US-based team remains unproven.

Sources & how this review was built

Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.

Evidence classes on this page: [A] A: 6[B] B: 4[C] C: 3[D] D: 0 (D stays empty until our own test phase)

  1. [1][A] operator obscura.com - Homepage (incl. FAQ) fetched 2026-09-29 · HTTP 200
  2. [2][A] operator obscura.com - Pricing page fetched 2026-09-29 · HTTP 200
  3. [3][A] operator obscura.com - Blog: Obscura's First Independent Audit by Cure53 (Dec 16, 2025) dated 2025-12-16 · fetched 2026-09-29 · HTTP 200
  4. [4][A] operator obscura.com - Blog: Bootstrapping Trust (design rationale) dated 2025-02-11 · fetched 2026-09-29 · HTTP 200
  5. [5][A] operator obscura.com - Blog index (platform rollout log) fetched 2026-09-29 · HTTP 200
  6. [6][A] operator mullvad.net - Mullvad has partnered with Obscura VPN (Feb 11, 2025) dated 2025-02-11 · fetched 2026-09-29 · HTTP 200
  7. [7][B] news omgubuntu.co.uk - Obscura VPN now offers a desktop app for Linux (Sep 22, 2026) dated 2026-09-22 · fetched 2026-09-29 · HTTP 200
  8. [8][B] news news.google.com - Google News RSS: Obscura VPN (47 items) fetched 2026-09-29 · HTTP 200
  9. [9][C] community hn.algolia.com - HN stories: Obscura (1840 hits for 'Obscura'; 3 VPN threads) fetched 2026-09-29 · HTTP 200
  10. [10][C] community hn.algolia.com - HN comments: 'Obscura' VPN (46 hits) fetched 2026-09-29 · HTTP 200
  11. [11][C] community reddit via arctic-shift - Reddit comment harvest: Obscura fetched 2026-09-29 · HTTP 200
  12. [12][B] review rtings.com (via Google News) - The 3 Best VPNs For Privacy of 2026 (Aug 24, 2026) dated 2026-08-24 · fetched 2026-09-29 · HTTP 200
  13. [13][B] watchdog obscura.com (legal paths) - Privacy/Terms direct paths 404 (JS app) fetched 2026-09-29 · HTTP 404

Rate Obscura VPN (no-trust two-hop startup)

Community score: no ratings yet

One rating per user and provider. Smoothed display (statistical prior) prevents single-vote manipulation.

User comments (0)

No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.

Alternatives to Obscura VPN (same kind)

Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.

hide.me

A rare genuinely usable free plan (no card, P2P allowed on the 10 GB free tier) plus audited no-logs claims twice over - DefenseCode 2015 and Securitum 2024…

7
audited crypto accepted
intro €2.69/mo (about $3.04/mo)
Malaysia commercial vpn 20 d ago

Mullvad VPN

The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…

6.6
court-proven no-logs audit open source crypto accepted
intro €5/mo (about $5.65/mo)
Sweden commercial vpn 11 d ago

IVPN

The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual…

6.1
audit canary open source crypto accepted
intro $5/mo
Gibraltar commercial vpn 42 d ago