AmneziaVPN is a free VPN client that turns a personal virtual server into a private, self-hosted VPN. It installs and manages censorship-resistant protocols such as AmneziaWG, XRay Reality, OpenVPN and WireGuard from a single app.
AmneziaVPN is a client that creates a personal VPN on a virtual server you rent yourself, so your traffic never passes through a commercial provider's network. You enter the server's IP address, SSH login and password, and the app installs the server-side software, configures it and connects — a process that normally takes minutes of command-line work. From the same window you can add several servers, switch between protocols, and hand out access to people you trust. The practical value is control: you decide where the exit node sits, which encryption and masking layer runs on top of it, and who else can use it, without trusting a third party with your browsing.
Day to day, AmneziaVPN behaves like an ordinary VPN app: one toggle connects, and a status indicator shows whether the tunnel is up. Split tunneling decides which sites or applications travel through the tunnel, so local banking or streaming services can stay on your normal connection while everything else is routed abroad. A kill switch blocks traffic if the tunnel drops, and the built-in DNS option keeps name requests inside the VPN instead of leaking them to your internet provider. Sharing is simple — send a configuration file, a text key or a QR code, and the other person is online in seconds. If you already run a client such as v2rayN, you can export compatible configuration formats and keep both tools side by side.
The main benefit of AmneziaVPN is that your VPN stops being somebody else's service. Because the tunnel terminates on a server you control, there is no account history to subpoena, no shared IP address used by strangers, and no provider that can quietly raise prices, log connections or disappear overnight. You also get protocol choice as a defence: when a network starts blocking one tunnel, you switch to another and stay online instead of waiting for a vendor to react. AmneziaWG and XRay Reality are built to survive deep packet inspection, which matters most in countries where plain WireGuard and OpenVPN are detected within days. Setup is automated rather than expert-level, so the same app that a newcomer clicks through is flexible enough for someone who wants to tune junk packets, header ranges or camouflage sites later. Because the app takes care of upkeep instead of leaving you at a terminal, the same rented server keeps running without a Linux administrator on standby.
You supply your server's IP address plus an SSH username and password or key, and AmneziaVPN connects, installs the server-side components and configures the chosen protocols automatically. No terminal commands, package lists or configuration files are required, so a first self-hosted VPN can be running a few minutes after your server is ready.
AmneziaWG keeps WireGuard's small codebase, UDP transport and ChaCha20 encryption but rewrites the traffic shape that deep packet inspection looks for. Randomised header values, variable packet lengths, junk packet trains and optional content padding make each session look different, while throughput and battery use stay close to plain WireGuard.
Reality borrows a real website's TLS handshake, so a censor probing your server receives a genuine certificate from a popular site instead of evidence of a VPN. AmneziaVPN walks you through choosing the camouflage domain and installing the protocol in one step, which is why it keeps working in networks that block ordinary tunnels.
AmneziaVPN installs OpenVPN, WireGuard, IKEv2, OpenVPN over Cloak, Shadowsocks, XRay Reality and AmneziaWG from the same interface. If one tunnel is throttled or blocked, you install another on the same server and switch without rebuilding anything, which turns protocol choice into a practical fallback rather than a permanent decision.
Split tunneling lets you send only chosen destinations through the VPN, or exclude selected applications so they always use your normal connection. Local banking portals, printers and streaming accounts keep working untouched, while blocked sites and chat apps travel through the tunnel — per-app rules are available on desktop and mobile clients.
The built-in kill switch stops all traffic if the tunnel drops, so your real IP address is never exposed during a reconnect or a server restart. Combined with the AmneziaDNS option, which resolves names on the server instead of your provider, it closes the two gaps most commonly used to identify VPN users.
Access is granted by sending a configuration file, a text key or a QR code, and the recipient connects in seconds without any server details. You can also hand over full administrative access to a server you share with a colleague, keeping responsibility for updates and protocol changes in more than one pair of hands.
Beyond the VPN, the app can deploy a SOCKS5 proxy, a Telegram proxy, a private DNS resolver, an SFTP file store or a website reachable through the Tor network. Each service is installed from the same server screen, so one rented machine can cover tools you would otherwise host or pay for separately.
It is a VPN client whose distinguishing feature is automatic deployment of a VPN server on a machine you own or rent. You enter your server credentials once, and the app installs and configures the server side, then manages the connection, protocols, split tunneling and user access from a single window.
Not strictly. The app can also connect to the free Amnezia Free service or to a paid Amnezia Premium subscription, neither of which needs a server of your own. Self-hosting is the option that gives you full control: you rent a virtual server, and AmneziaVPN configures it for you.
Start with AmneziaWG or XRay Reality. AmneziaWG disguises WireGuard traffic so it survives deep packet inspection, while Reality hides behind a real website's TLS handshake and is used in heavily filtered networks. Plain OpenVPN, WireGuard and IKEv2 are easier to detect, so they suit unrestricted networks or a fallback role.
Yes. Connection settings can be exported as native configuration formats for WireGuard, OpenVPN, XRay VLESS Reality and Shadowsocks, and opened in clients that support them. You can also import an existing configuration by file, text key or QR code, which makes it easy to move between AmneziaVPN and another client.
It removes the provider from the equation. Your traffic exits through a server you rent, no third party holds connection logs for you, and the IP address is not shared with strangers. The trade-off is that you are responsible for keeping the server online and for changing protocols when blocking patterns change.
The kill switch blocks outbound traffic until the tunnel is restored, so web requests do not fall back to your normal connection and reveal your real address. You can also enable the VPN's own DNS resolver to keep name lookups inside the tunnel rather than sending them to your internet provider.
Comments