Traveler's VPN is a personal VPN client built for people who travel internationally. It routes Chinese, Japanese, and other regional services directly to local IPs (so banks, payment apps, and transit systems don't fraud-block you on a foreign IP) while sending the rest of your traffic through your VPN server, whether that's a server we manage for you or one you bring yourself.
You can use it two ways. Pick a managed server (a monthly plan or a 7-day travel pass) and we set up a private server for you automatically. Or bring your own server with a one-time unlock and connect the app to a server you already have, using one of the supported protocols. This guide covers the bring-your-own setup; managed servers need no setup at all.
We run a private server for you, so there's nothing to set up. In the app, open the … menu → Add Server → Managed Server (or just follow the welcome screen on first launch), then:
You can switch to a server in a new region anytime while your plan is active. Then pick a routing profile and connect, as described below.
If you already run a server, unlock bring-your-own-server mode (a one-time purchase) and connect it. You need credentials for at least one of:
.conf file.Tap the … menu in the top right → Add Server, choose your protocol, and either paste your access key / config or fill in the fields manually. You can also:
ss:// or trojan:// link in Mail, Messages, or Safari: it opens directly into the right form..conf file from Files, Mail, or AirDrop: the app will offer to import it.However you got your server, tap the Routing Profile card on the main screen and choose one:
The first time you connect, iOS will ask permission to add a VPN configuration. Approve it. The shield icon at the top fills in when the tunnel is up.
Tap the Server card to choose a different server from your saved list. If the VPN is already connected, switching reconnects automatically.
Tap the Routing Profile card. The tunnel reconfigures itself; you don't have to disconnect first.
The Reachability card pings well-known endpoints to show you what's reachable from your current network. Useful for spotting whether you're behind a captive portal or a country-level block before you bother connecting. Tap the refresh icon to test again.
Open … menu → Live Connections to see every active TCP/UDP connection: destination, protocol, bytes up/down, and which routing rule sent it through (direct vs. proxied). Updates in real time. Useful for confirming that the right traffic is being routed direct and the rest is proxied.
Open … menu → Routing Inspector to test what would happen to a hostname under your active profile. Type a domain (e.g. tabelog.com) and the app tells you whether it would go direct or via your server.
Open … menu → Diagnostics for tunnel logs, the generated sing-box configuration, and current rule-set state. Useful if something isn't working and you want to send us details.
Add the Traveler's VPN widget from the iOS widget gallery to see connection status and active server at a glance from your home screen or lock screen.
Yes, if you want one. Choose a managed server (a monthly plan or a 7-day travel pass) and we provision a private server for you automatically, in the region you pick. You can also bring your own server (Shadowsocks, WireGuard, or Trojan) with the one-time unlock, in which case your traffic only ever touches the server you control.
For most travelers we recommend a personal-plan provider that uses Shadowsocks (works well behind aggressive firewalls like China's) or WireGuard (fastest on stable networks). Examples: JustMySocks for Shadowsocks, Mullvad or ProtonVPN for WireGuard, or your own VPS running 3X-UI / wg-easy. If you'd rather not deal with any of this, use a managed server instead.
The 7-day travel pass ($9.99) is a one-off for a single trip: seven days of a managed server, no auto-renew. The monthly subscription ($14.99/month, starting with a 3-day free trial) is for people who travel often, and lets you switch regions anytime. Bring your own server ($2.99 once) is a one-time unlock for people who already run a server. All three include the smart routing and cover iPhone, iPad, and Mac.
When you subscribe or buy a travel pass, we provision a private server just for you in the region you choose. While your plan is active you can re-provision in a new region anytime. When a subscription is cancelled or a travel pass expires, the server is automatically destroyed. There's no account to close.
Each one is a private server set up just for you, in the region you pick. It's kept locked down and is deleted when your plan ends. See the Privacy Policy for what data is involved.
No. There's no signup, email, or password. Your purchase is tied to your Apple ID behind the scenes, which is how your server follows you across your devices and through a restore.
Because you've selected a travel profile that intentionally splits traffic. Local-region services go direct so they work properly (e.g. mobile Suica won't activate on a US IP). If you want everything through the tunnel, switch the profile to VPN Only.
Apple services are deliberately routed direct in the China profile. They use Apple's local Chinese endpoints which are reliably reachable and faster, while routing them through a foreign server tends to break iCloud sync and push notifications.
You need at least one server configured. Tap Add Server in the menu (or the Add button on the empty Server card) to add one.
A few things to check:
No. Only one server is active at a time. You can save many and switch between them with one tap.
Yes, the app runs on iPhone, iPad, and Mac (Apple Silicon).
It works on any network that gives your device a working internet connection. Some hotel networks block VPN protocols outright; in those cases the tunnel will fail to start. Switching to a different protocol (e.g. WireGuard → Shadowsocks) sometimes helps.
Roughly the same as any always-on VPN client. The travel profiles route a lot of traffic direct (no encryption overhead for those flows), which tends to be lighter than VPN Only.
The app itself collects nothing: not your traffic, not your usage, not crash reports, and the tunnel statistics it shows are computed on-device and never leave it. If you bring your own server, nothing about your use ever reaches us. If you use a managed server, your traffic is relayed through a server we run for you; we don't inspect, record, or sell the contents of your traffic or the sites you visit, and we measure only the volume of data used to enforce your allowance. See the Privacy Policy for full details.
Email us (see Contact below). If you can include a copy of the log from Diagnostics, that helps a lot.
Email: [email protected]