LycheeVPN
What you actually get
No "military-grade AES-256" and no "10,000 virtual servers". Here is the honest list.
Key pair generated on-device
The app generates its key pair inside its own process and stores it in the app's private storage. The server only ever learns the public key — the part that is designed to be public.
Fastest-server selection
The app measures latency to every endpoint and ranks them. When measurement isn't possible, it falls back to the lowest load reported by the system.
Reconnect after reboot
With auto-connect enabled, the tunnel is rebuilt as soon as your device finishes booting — before you even open the app.
Control from the notification
A persistent notification shows the current server, connection time and a disconnect button — no need to open the app just to switch off.
A dedicated address per session
Every session gets its own /32 address within the node's range.
Close the session and the address is returned to the pool immediately.
Per-device revocation
Access tokens are bound to devices, not to your account. Remove a device on the account page and it loses access instantly — the others stay signed in.
What we haven't built yet
A features page that only lists strengths isn't credible. Here's what's missing, updated as real progress happens.
Per-app split tunneling
The platform already supports excluding individual apps from the tunnel, but the app-picker screen isn't finished, so the feature stays off for now.
iOS and desktop apps
Android only for now. Desktop clients are in development — we'll announce them here and in the app as soon as they're ready.
Automated payments
Paid plans are currently activated manually after a bank transfer. An automated payment gateway is on the roadmap.
Independent audit
We haven't commissioned an external audit yet. When we do, the report will be published here in full.
Try it before you trust it
The free plan needs no card and no email. Install and hit connect.