VPN for privacy — encrypted, and clear about what we keep
TUKTUKVPN encrypts your internet traffic with WireGuard, Hysteria2 or VLESS+Reality, so your ISP and anyone on public Wi-Fi see only encrypted traffic — not the sites you visit. It adds DNS leak protection and per-device credentials you can revoke, while TUKTUKVPN operates the service and manages its server locations. 30-day money-back guarantee.
- All traffic encrypted with modern protocols (WireGuard / Hysteria2 / Reality)
- DNS leak protection, and per-device credentials you can revoke at any time
- Protection on public Wi-Fi — cafes, airports, hotels
- Hides your activity from your ISP and your real IP address from the sites you visit
- TUKTUKVPN operates the VPN service and manages the server locations it uses
Key facts
| Item | Detail |
|---|---|
| Best for | Protecting data on public Wi-Fi, hiding activity from your ISP, masking your real IP address from the sites you visit |
| Encryption | All traffic is encrypted through a WireGuard, Hysteria2 or VLESS+Reality tunnel |
| Data policy | We keep what the service needs to run: your account, how much data you have used against your plan, and your devices. Where Thai law requires us to retain data, we retain it and say so |
| Network | TUKTUKVPN operates the VPN service and manages its server locations |
| VLESS + Reality | Traffic looks like ordinary HTTPS |
| Supported protocols | VLESS+Reality, Hysteria2, WireGuard/AmneziaWG — the app switches automatically based on network conditions |
| Server locations in the app | Singapore, Tokyo, Los Angeles, Bangkok, London |
| Devices per account | 5 devices (monthly) / 10 devices (yearly and 2-year) |
| Payment methods | PromptPay, credit/debit card, TrueMoney, and crypto (USDT, BTC and 350+ coins) |
| Plans | Monthly / yearly / 2-year |
| Guarantee | 30-day money-back guarantee on your first purchase (once per customer) |
How a VPN protects your privacy
Without a VPN, your internet service provider (ISP) can see the names of the sites you visit, and the sites you visit see your real IP address — which reveals your approximate location. TUKTUKVPN creates an encrypted tunnel between your device and our server, so your ISP only sees encrypted traffic heading to the server, not the real destination.
The sites you visit see the TUKTUKVPN server's IP address instead of your real one, which reduces IP-based tracking and hides your approximate location.
What we keep — said plainly
We keep what the service needs to run: your account, how much data you have used against your plan, and your devices. Where Thai law requires us to retain data, we retain it and say so. We would rather tell you exactly what we hold than make a promise we could not stand behind.
Protecting yourself on public Wi-Fi
Public Wi-Fi in cafes, airports and hotels is a network you shouldn't trust — others on the same network, or its operator, may be able to snoop on your traffic. With TUKTUKVPN on, all traffic is encrypted before it leaves your device, so anyone eavesdropping on that network sees only unreadable data.
What VLESS + Reality does
VLESS + Reality traffic looks like ordinary HTTPS. That describes the protocol; we have not measured TUKTUKVPN on networks that try to detect and block VPNs with Deep Packet Inspection (DPI), and make no claim about them.
Frequently asked questions
What data does TUKTUKVPN keep?
We keep what the service needs to run: your account, how much data you have used against your plan, and your devices. Where Thai law requires us to retain data, we retain it and say so. The full list is in our Privacy Policy.
Does a VPN make me fully anonymous online?
No. A VPN encrypts your traffic and hides your real IP address, but it doesn't make you completely anonymous — account logins, cookies and browser fingerprinting can still identify you. A VPN is one layer of privacy, not a cure-all.
Is it safe enough for public Wi-Fi?
Yes — that's one of the core use cases. With the VPN on, all traffic is encrypted before it leaves your device, so anyone eavesdropping on public Wi-Fi sees only unreadable data.
What kind of encryption does TUKTUKVPN use?
We use modern protocols — WireGuard, Hysteria2 and VLESS+Reality — all of which encrypt your traffic. The app picks the protocol best suited to your network automatically.
Who runs TUKTUKVPN's servers?
TUKTUKVPN operates the VPN service and manages its server locations. Infrastructure providers may supply hosting or connectivity, so this describes service operations rather than infrastructure ownership.
What if it isn't right for me?
Your first purchase is covered by a 30-day money-back guarantee, once per customer — contact support within 30 days of that payment and we'll refund it in full.
Ready to try it yourself?
Subscribe and connect right away — every protocol included, 30-day money-back guarantee.