Description
Calyx VPN is a free, open-source Virtual Private Network service developed and maintained by the Calyx Institute, a nonprofit organization dedicated to defending digital privacy.
Key Features
- Anonymous by design — No user accounts, no registration, and no logging of any kind.
- Censorship circumvention — Built-in pluggable transports (Bridge mode) disguise VPN traffic as normal web traffic to bypass deep packet inspection (DPI) and censorship systems.
- No DNS or IPv6 leaks — Client and server are configured to prevent any leaking of DNS requests or IPv6 traffic.
- Free and open source — Both the client application and server software are 100% free and open source, licensed under GPLv3.
- Encrypted connections — All network traffic is securely encrypted and routed through Calyx's servers, preventing ISP surveillance.
Use Cases
Calyx VPN is ideal for journalists, human rights defenders, and anyone who needs to protect their online activity from surveillance or censorship. It works as an always-on privacy layer on Android devices, and is preconfigured to connect directly to the Calyx Institute's trusted VPN infrastructure.
Highlights
Pros
- No user accounts or registration required — connects completely anonymously without collecting any personal data from users.
- Operated by the Calyx Institute, a registered nonprofit organization dedicated to defending digital privacy and advancing connectivity.
- Built-in bridge mode uses pluggable transports to disguise VPN traffic as normal HTTPS, helping bypass deep packet inspection and censorship systems.
- Client and server are configured together to prevent DNS leaks, with all DNS requests handled anonymously by Calyx when the VPN is active.
- Fully open source (GPL-3.0) with both client and server code publicly available for independent audit and verification.
Cons
- Limited server network of approximately 20 servers across only 5 countries, offering far fewer location choices than most VPN services.
- Android-only availability with no native apps for Windows, macOS, iOS, or Linux desktop users.
- Supports only OpenVPN and Bitmask protocols with no WireGuard, IKEv2, or other modern protocol options available.
- IPv6 support is reportedly broken in practice, with IPv6 connections timing out rather than routing through the VPN properly.