After signing in, the home screen shows the suggested server for your network and a big Connect button. Suggested is usually the closest healthy server; you can pick any other location from the server list.
What happens when you tap Connect
- The app handshakes with the chosen server — TLS-shaped, indistinguishable from regular HTTPS to a passive observer.
- ML-KEM-768 + X25519 establish the session key. This step adds about 5 KB to the handshake but is otherwise invisible.
- Your device routes all traffic through the tunnel. The HUD shows live up/down throughput, ping, and the active region.
How to tell it's working
Visit the Free Tools section and open What's my IP? It should show the server's IP and location, not yours. The DNS leak test should show only our resolvers.