Traveler's VPN Support
Traveler's VPN is a personal VPN client built for people who travel internationally. It routes Chinese, Japanese, and other regional services directly to local IPs (so banks, payment apps, and transit systems don't fraud-block you on a foreign IP) while sending the rest of your traffic through your VPN server, whether that's a server we manage for you or one you bring yourself.
You can use it two ways. Pick a managed server (a monthly plan or a 7-day travel pass) and we set up a private server for you automatically. Or bring your own server with a one-time unlock and connect the app to a server you already have, using one of the supported protocols. This guide covers the bring-your-own setup; managed servers need no setup at all.
Getting Started
Option A: Use a managed server (easiest)
We run a private server for you, so there's nothing to set up. In the app, open the … menu → Add Server → Managed Server (or just follow the welcome screen on first launch), then:
- Choose a plan: a monthly subscription (starts with a 3-day free trial) or a 7-day travel pass.
- Pick the region you'd like your server in.
- We provision it for you. This usually takes about a minute, and the app lets you know when it's ready.
You can switch to a server in a new region anytime while your plan is active. Then pick a routing profile and connect, as described below.
Option B: Bring your own server
If you already run a server, unlock bring-your-own-server mode (a one-time purchase) and connect it. You need credentials for at least one of:
- Shadowsocks: from Outline, JustMySocks, 3X-UI panels, v2rayN, or any Shadowsocks provider.
- WireGuard: from Mullvad, ProtonVPN, Tailscale, wg-easy, or a self-hosted server. You can paste the config or import a
.conffile. - Trojan: from Trojan-Go, Xray, V2Ray, or 3X-UI panels.
Tap the … menu in the top right → Add Server, choose your protocol, and either paste your access key / config or fill in the fields manually. You can also:
- Tap a
ss://ortrojan://link in Mail, Messages, or Safari: it opens directly into the right form. - Open a WireGuard
.conffile from Files, Mail, or AirDrop: the app will offer to import it.
Pick a routing profile
However you got your server, tap the Routing Profile card on the main screen and choose one:
- Travel in China: sends Chinese services (WeChat, Alipay, Baidu, Taobao, Bilibili, etc.) and Apple/iCloud direct, and routes everything else through your server. Apple services work better direct in China than through a foreign VPN.
- Travel in Japan: sends Japanese services (Suica, JR, Yahoo Japan, LINE, Tabelog, NHK, PayPay, etc.) direct, and US streaming and banking through your server so they don't fraud-block on a Japanese IP.
- VPN Only: everything goes through your server. No split routing.
Tap Connect
The first time you connect, iOS will ask permission to add a VPN configuration. Approve it. The shield icon at the top fills in when the tunnel is up.
Using the App
Switching servers
Tap the Server card to choose a different server from your saved list. If the VPN is already connected, switching reconnects automatically.
Switching routing profiles
Tap the Routing Profile card. The tunnel reconfigures itself; you don't have to disconnect first.
Reachability
The Reachability card pings well-known endpoints to show you what's reachable from your current network. Useful for spotting whether you're behind a captive portal or a country-level block before you bother connecting. Tap the refresh icon to test again.
Live Connections
Open … menu → Live Connections to see every active TCP/UDP connection: destination, protocol, bytes up/down, and which routing rule sent it through (direct vs. proxied). Updates in real time. Useful for confirming that the right traffic is being routed direct and the rest is proxied.
Routing Inspector
Open … menu → Routing Inspector to test what would happen to a hostname under your active profile. Type a domain (e.g. tabelog.com) and the app tells you whether it would go direct or via your server.
Diagnostics
Open … menu → Diagnostics for tunnel logs, the generated sing-box configuration, and current rule-set state. Useful if something isn't working and you want to send us details.
Home Screen Widget
Add the Traveler's VPN widget from the iOS widget gallery to see connection status and active server at a glance from your home screen or lock screen.
Frequently Asked Questions
Does Traveler's VPN provide servers?
Yes, if you want one. Choose a managed server (a monthly plan or a 7-day travel pass) and we provision a private server for you automatically, in the region you pick. You can also bring your own server (Shadowsocks, WireGuard, or Trojan) with the one-time unlock, in which case your traffic only ever touches the server you control.
Where do I get a server (bring-your-own)?
For most travelers we recommend a personal-plan provider that uses Shadowsocks (works well behind aggressive firewalls like China's) or WireGuard (fastest on stable networks). Examples: JustMySocks for Shadowsocks, Mullvad or ProtonVPN for WireGuard, or your own VPS running 3X-UI / wg-easy. If you'd rather not deal with any of this, use a managed server instead.
What's the difference between the plans?
The 7-day travel pass ($9.99) is a one-off for a single trip: seven days of a managed server, no auto-renew. The monthly subscription ($14.99/month, starting with a 3-day free trial) is for people who travel often, and lets you switch regions anytime. Bring your own server ($2.99 once) is a one-time unlock for people who already run a server. All three include the smart routing and cover iPhone, iPad, and Mac.
How do managed servers work, and what happens when my plan ends?
When you subscribe or buy a travel pass, we provision a private server just for you in the region you choose. While your plan is active you can re-provision in a new region anytime. When a subscription is cancelled or a travel pass expires, the server is automatically destroyed. There's no account to close.
Where are managed servers hosted?
Each one is a private server set up just for you, in the region you pick. It's kept locked down and is deleted when your plan ends. See the Privacy Policy for what data is involved.
Do managed servers need an account?
No. There's no signup, email, or password. Your purchase is tied to your Apple ID behind the scenes, which is how your server follows you across your devices and through a restore.
Why isn't all my traffic going through the VPN?
Because you've selected a travel profile that intentionally splits traffic. Local-region services go direct so they work properly (e.g. mobile Suica won't activate on a US IP). If you want everything through the tunnel, switch the profile to VPN Only.
Why doesn't iCloud / iMessage / FaceTime route through the VPN in China mode?
Apple services are deliberately routed direct in the China profile. They use Apple's local Chinese endpoints which are reliably reachable and faster, while routing them through a foreign server tends to break iCloud sync and push notifications.
The Connect button is disabled.
You need at least one server configured. Tap Add Server in the menu (or the Add button on the empty Server card) to add one.
The tunnel keeps failing to start.
A few things to check:
- Is your server reachable from your current network? Use the Reachability card or Routing Inspector.
- Are your credentials correct? Re-paste the access key or config to be sure.
- Captive portal? Open Safari and complete any sign-in screen first.
- Open Diagnostics and check the tunnel log for the actual error.
Can I connect to multiple servers at once?
No. Only one server is active at a time. You can save many and switch between them with one tap.
Does it work on iPad and Mac?
Yes, the app runs on iPhone, iPad, and Mac (Apple Silicon).
Does it work in Airplane mode / on cellular / on hotel Wi-Fi?
It works on any network that gives your device a working internet connection. Some hotel networks block VPN protocols outright; in those cases the tunnel will fail to start. Switching to a different protocol (e.g. WireGuard → Shadowsocks) sometimes helps.
How much battery does it use?
Roughly the same as any always-on VPN client. The travel profiles route a lot of traffic direct (no encryption overhead for those flows), which tends to be lighter than VPN Only.
Does Traveler's VPN log my traffic?
The app itself collects nothing: not your traffic, not your usage, not crash reports, and the tunnel statistics it shows are computed on-device and never leave it. If you bring your own server, nothing about your use ever reaches us. If you use a managed server, your traffic is relayed through a server we run for you; we don't inspect, record, or sell the contents of your traffic or the sites you visit, and we measure only the volume of data used to enforce your allowance. See the Privacy Policy for full details.
I want to send a bug report or feature request.
Email us (see Contact below). If you can include a copy of the log from Diagnostics, that helps a lot.
Contact
Email: [email protected]