Obscura VPN ships on Linux with a two-hop design it says makes logging impossible

Obscura, a VPN provider that markets itself as the first service architecturally incapable of logging user activity, has released a Linux client. The launch rounds out coverage across macOS, iOS, Android and Windows, according to the company's website, which reached the front page of Hacker News on 22 September.

A VPN split in two

Conventional VPNs concentrate trust in a single operator: the provider's servers see the customer's real IP address on one side and every destination they visit on the other. A "no-logs" policy is therefore a promise about what the operator chooses to record, not a property of the system.

Obscura's answer is a two-party protocol. According to the company, the client establishes a WireGuard tunnel that runs end-to-end to an exit server, passing through Obscura's own relay servers along the way. The relays know your IP address but carry only ciphertext they cannot decrypt. The exit servers, which Obscura says are operated by Mullvad, terminate the tunnel and connect you to the wider internet, but they see the relay's address rather than your real one.

The consequence, the company argues, is that neither party can produce records linking a person to their browsing history. Data that was never collected cannot be handed over, breached or sold — though note that Obscura's relays do handle your IP address, and the claim that those addresses are not logged rests on policy rather than architecture.

Anonymous accounts and crypto payments

Sign-up requires only a randomly generated account number, with no name, email address or phone number. Payments can be made over Bitcoin's Lightning Network or with Monero, so no card details are needed either. Users can also generate a standard WireGuard configuration rather than being tied to a custom app.

Built to evade network filters

Beyond privacy, Obscura says its traffic is shaped to resemble ordinary internet traffic, making it harder for censorship systems to detect and block VPN connections. The company positions this as a way to keep internet access open on restricted networks.

Who is building it

The site identifies founder Carl Dong, who describes himself as the project's head janitor, and a small team with credentials across the open-source and privacy world: service on the Nix RFC steering committee, implementation of the 64-bit random number generator in Go's standard library, security fixes for hardware security tokens, Monero bug bounties, and work on reproducible builds in Bitcoin.

Claims worth scrutinising

The "first VPN that can't log" framing is marketing, and it comes entirely from the company's own materials — the page summarised here references a technical FAQ but includes no independent audit. Several established providers offer multihop routing, though typically both hops belong to the same company, which is precisely the weakness Obscura is targeting. The separation also echoes Tor, where no single relay holds both the sender and the destination; the site raises a Tor comparison in its FAQ, but the answer is not part of the material surfaced here.

Finally, as with any split design, the guarantee depends on the two operators not combining what they know: if a relay provider and an exit provider pooled records or cooperated with the same adversary, timing analysis could in principle bridge the gap. Users are ultimately trusting both Obscura and Mullvad to operate their halves as described.

Why it matters

Most VPN privacy is contractual — a policy, ideally backed by an audit, that the operator is not looking. Obscura is attempting to replace that with a structural property: if the relay genuinely cannot decrypt traffic and the exit genuinely cannot see your IP, then a subpoena, a breach or a policy change at either party yields only half the picture. If the design holds up under outside review, it raises the bar for what a "no-logs" claim can mean, and it puts pressure on single-provider multihop offerings that ask customers to trust one company with both halves of the connection. The Linux release matters too, since it extends the model to the platform favoured by many of the privacy-conscious users most likely to evaluate such claims critically.