Security

The apps connect with WireGuard, OpenVPN or IKEv2. WireGuard is quick and light on battery, OpenVPN gets through more networks, and IKEv2 picks up again quickly when you move between wifi and mobile data.

Change it under Settings, Connection, Select protocol. Some networks block one protocol and allow another.

With the kill switch on, the internet is blocked whenever the VPN drops, so nothing on your device connects unprotected while the app reconnects. On Android you can also lock the VPN on before any app gets online, using Android's own always-on setting.

You choose which apps, if any, skip the VPN, such as a banking app that dislikes VPNs. Everything else goes through the tunnel.

Passwords are stored only as one-way hashes, never as readable text. A sign-in on a phone or TV lasts 30 days and renews itself while you use it. Your account lists every signed-in device so you can sign out one you do not recognise, and you can delete the account at any time.

Card payments are taken by Stripe, PayPal payments by PayPal and crypto payments by NOWPayments. Card numbers go straight to Stripe and never reach us.

A VPN hides your traffic from your network and your internet provider. It does not make you anonymous, and it cannot protect you from what you choose to share, from malware already on your device, or from a site that knows you because you signed in. What we keep, and what we never log, is in the Privacy Policy.

If you think you have found a security problem in our apps, website or accounts, email support@justcoffeevpn.com with "Security report" in the subject, and tell us how to reproduce it.

Please give us reasonable time to fix it before telling anyone else, and do not access other people's data or disrupt the service while you test. We will not take action against anyone who reports a problem in good faith this way.