Greets like a browser
When it connects, Stealth opens with the same kind of greeting a mainstream web browser sends to a secure website.
Stealth is the most disguised protocol in Tunnexa. It wraps your VPN connection so that, to the network, it looks like ordinary HTTPS traffic to a website. Use it when nothing else connects. It's free with a Tunnexa account on Android.
A stealth VPN tries to hide the fact that you’re using a VPN at all. Regular protocols encrypt what you send, but a network can still tell that a VPN is running.
Stealth goes a step further. It makes the whole connection look like something networks almost never block: someone visiting a website over HTTPS.
Inside that disguise, your traffic is still encrypted all the way from your phone to the Tunnexa server, where the tunnel ends.
Obfuscation means disguising VPN traffic as something else. This is what Stealth does differently from the other five protocols.
When it connects, Stealth opens with the same kind of greeting a mainstream web browser sends to a secure website.
That greeting names an ordinary website, just as your browser does when you open one. To a filter, it reads as a visit to that site.
It runs over TCP, the way web pages load, so it fits in with the rest of the traffic on the network.
Honest limitStealth is harder to spot, not invisible. A determined network can still slow it down or block it. The extra work it does to blend in also makes it a little slower than WireGuard, so keep it for the networks that need it.
Our advice: try AmneziaWG first. If the network still won't let you connect, switch to Stealth.
Stealth is a tool for difficult networks, not a daily default. Here's when it earns its place.
Laws on VPNs differ by country, and network owners set their own rules. Stealth doesn’t change what’s allowed where you are.
If WireGuard, OpenVPN and AmneziaWG all fail on one network, Stealth is the one left to try. Our page on what to do when a VPN is blocked walks through the signs.
Some office, college and hotel networks go further than closing ports. See VPNs on strict work and school Wi-Fi.
On home Wi-Fi or mobile data, WireGuard is quicker. Keep Stealth for the networks that need it.
Three steps, and nothing to pay.
In the app: Settings › Select Protocol › Stealth
Stealth needs a free Tunnexa account: an email code, Google or Apple.
Open Settings, tap Select Protocol, and choose Stealth.
The server list shows only the locations that offer Stealth. Choose one, then Tap To Connect.
Something not covered here? Write to us at support@tunnexa.com.
A stealth VPN disguises your VPN connection as ordinary web traffic, so networks that block VPNs find it harder to spot. Tunnexa's Stealth protocol makes your connection look like HTTPS traffic to a website.
Obfuscation means hiding the patterns that give a VPN away. AmneziaWG does it by reshaping WireGuard's packets. Stealth does it by looking like a normal website visit.
It can. Stealth is harder to spot, not impossible to block, and results vary by network. It's the protocol to try when nothing else connects.
Usually a little, because of the extra work it does to blend in. Use WireGuard for everyday browsing and switch to Stealth only when you need it.
Yes. It needs a free Tunnexa account, which you can create with an email code, Google or Apple.
In most countries, using a VPN is legal. Some restrict VPNs, and network owners can set their own rules. Check what applies where you are.