The star that
can't be traced.
Astria VPN gives every user their own encryption port, their own key, and their own tunnel. Three protocols, zero logs, no shared infrastructure. Your ISP sees encrypted noise. We see nothing at all.
Why Astria VPN
Built differently
Most VPNs share tunnels between thousands of users. Astria isolates every account with its own encryption port, key, and DNS resolver.
No trace, no fingerprint
Your connection mimics a regular visit to a major website. Deep traffic analysis finds no VPN signature β your presence online leaves no trace.
Three protocols, one app
Shadowsocks for raw speed. VLESS+Reality when privacy matters most. SS+WS+TLS for triple-layer encryption. Auto mode tests your network and picks the best option.
DNS Guard with ad blocking
Every DNS query goes through our own recursive resolver β no Google, no Cloudflare, no third parties. 85,000+ ad and tracker domains are blocked before they reach your device.
Instant traffic lock on disconnect
The macOS app uses pf (packet filter) to block all network traffic the moment the VPN connection drops. Not a single packet leaks.
One user, one port, one key
Your account runs on a dedicated encryption port with a unique key. No shared tunnels, no cross-user traffic, no correlation attacks between accounts.
Live server metrics
CPU load on every node, updated every 30 seconds directly from our API. Pick the fastest server β or let Auto mode do it.
Getting started
Connected in 60 seconds
Create an account
Email address only. No phone number, no real name, no government ID. We don't want your personal data.
Pick a plan
$5/mo or $3/mo annually. Pay by card or crypto. Cancel from your dashboard β instantly, no support ticket needed.
Install the app
Native apps for Android and macOS. System-level encryption that covers every app on your device β not just the browser.
Connect
One tap. Your traffic is encrypted, your DNS queries are private, your real IP is hidden. Done.
Servers
Servers around the world
Europe, Americas, and new locations every month. Pick the nearest server for maximum speed or let Auto mode decide.
Encryption
Choose your encryption protocol
Each protocol trades off between speed, privacy, and network compatibility. Choose manually or let Auto mode decide.
Your traffic is wrapped in a genuine TLS handshake to a real website. Network observers see standard HTTPS β no VPN signature, no fingerprint, no metadata.
ChaCha20-IETF-Poly1305 encryption implemented in Rust. Minimal CPU overhead, maximum throughput. The fastest protocol for streaming, downloads, and video calls.
Shadowsocks encrypted stream, tunneled through a WebSocket connection, wrapped in TLS. Three independent encryption layers for networks with aggressive traffic analysis.
Native apps
System-level encryption, not a browser plugin
Built from scratch for each platform. Every app encrypts all traffic at the OS level β every browser, every messenger, every background sync.
Windows Β· iOS Β· Router Manager β coming soon
Pricing
One plan. Every feature.
No tiers, no feature gates, no upsells. The only difference between monthly and annual is the price.
- All server locations
- All 3 encryption protocols
- 2 devices simultaneously
- DNS Guard + 85K ad domains blocked
- All server locations
- All 3 encryption protocols
- 5 devices simultaneously
- DNS Guard + 85K ad domains blocked
- Priority email support
- Early access to new server locations
Why Astria
A star that guides β but can't be seen
Astria (Atria) β Ξ± Trianguli Australis β is the brightest star in the Southern Triangle constellation. Sailors of the southern seas navigated by its light, yet from the northern hemisphere it remains invisible. A star that guides β but cannot be observed from an outside vantage point. We named our VPN after it: your data flows, your path is protected β but to any outside observer, you don't exist.
No-log architecture
Our servers are configured to write nothing to disk about user activity. No connection logs, no timestamps, no bandwidth records. Not because of a policy β because the code doesn't have the capability.
Isolated by design
Each user gets a dedicated encryption port and a unique key. There are no shared tunnels. One compromised account cannot affect another.
Open infrastructure
We run our own recursive DNS resolvers, our own ad-blocking lists, our own monitoring. No third-party dependencies in the data path.
By the numbers
FAQ
Common questions
Architectural isolation. Most consumer VPNs funnel thousands of users through shared servers and shared IP addresses. Astria assigns each account a dedicated encryption port with a unique key. Your traffic is structurally separated from every other user on the same node.
No. Our VPN servers do not write connection metadata to disk β not timestamps, not source IPs, not bandwidth counters. The only data we store is your account email and payment token. We cannot correlate an identity with network activity because the records don't exist.
They are encryption protocols that wrap your traffic so it can't be read or identified. VLESS+Reality makes your connection look like ordinary HTTPS to a mainstream website β invisible to deep packet inspection. Shadowsocks uses ChaCha20 encryption for maximum speed. SS+WS+TLS adds three layers of encryption for the most restrictive networks.
Native apps are available for Android (5.0+) and macOS (12+). Windows, iOS, and router firmware are in development. Both apps encrypt all traffic at the system level β every app on your device, not just the browser.
We accept credit cards (via Stripe) and cryptocurrency. There is no free tier, but you can cancel any time from your dashboard β instantly, no support ticket needed. Annual plans are refundable within 7 days.
Amsterdam (Netherlands) and New York (United States), with Frankfurt (Germany) coming soon. All servers run on dedicated hardware in privacy-friendly jurisdictions. We control the full stack β no rented cloud instances.
Yes. All DNS queries are resolved through our own recursive servers β not Google, not Cloudflare, not your ISP. Additionally, 85,000+ ad and tracker domains are blocked at the DNS level before they reach your device.
Your privacy is an architecture decision
Create an account in 60 seconds. Email only β no personal data required.
Get Astria VPN β