Skip to content
Tunnexa

Stealth VPN: traffic that looks like a normal website visit

Stealth is the most disguised protocol in Tunnexa. It wraps your VPN connection so that, to the network, it looks like ordinary HTTPS traffic to a website. Use it when nothing else connects. It's free with a Tunnexa account on Android.

  • Looks like website traffic
  • Free with an account
  • For networks that block VPNs
What the network sees
A website visit
Protocol
Stealth
How it works

What is a stealth VPN?

A stealth VPN tries to hide the fact that you’re using a VPN at all. Regular protocols encrypt what you send, but a network can still tell that a VPN is running.

Stealth goes a step further. It makes the whole connection look like something networks almost never block: someone visiting a website over HTTPS.

Inside that disguise, your traffic is still encrypted all the way from your phone to the Tunnexa server, where the tunnel ends.

Layer 1 · what the network sees
HTTPS to an ordinary website
Seen by anyone on the network
Layer 2 · inside
Encrypted Tunnexa VPN tunnel
Opened only by our server
Layer 3 · inside that
Your apps and browsing
Browser Chat Maps DNS lookups
VPN obfuscation

How Stealth blends in

Obfuscation means disguising VPN traffic as something else. This is what Stealth does differently from the other five protocols.

Greets like a browser

When it connects, Stealth opens with the same kind of greeting a mainstream web browser sends to a secure website.

Names a real website

That greeting names an ordinary website, just as your browser does when you open one. To a filter, it reads as a visit to that site.

Travels over TCP

It runs over TCP, the way web pages load, so it fits in with the rest of the traffic on the network.

Honest limitStealth is harder to spot, not invisible. A determined network can still slow it down or block it. The extra work it does to blend in also makes it a little slower than WireGuard, so keep it for the networks that need it.

Compared

Stealth or AmneziaWG: which to try first

AmneziaWG

Reshaped WireGuard
Free account
How it hides
Reshapes WireGuard's packets so they're harder to spot
Travels over
UDP
Weight
Light, built on WireGuard
Try it
First, on a network that blocks VPNs

Stealth

Looks like a website
Free account
How it hides
Looks like HTTPS traffic to an ordinary website
Travels over
TCP
Weight
Heavier, more work to blend in
Try it
When AmneziaWG can't get through

Our advice: try AmneziaWG first. If the network still won't let you connect, switch to Stealth.

When to use it

When to use Stealth

Stealth is a tool for difficult networks, not a daily default. Here's when it earns its place.

Laws on VPNs differ by country, and network owners set their own rules. Stealth doesn’t change what’s allowed where you are.

  • A network blocks every other protocol

    If WireGuard, OpenVPN and AmneziaWG all fail on one network, Stealth is the one left to try. Our page on what to do when a VPN is blocked walks through the signs.

  • Strict Wi-Fi where OpenVPN TCP failed

    Some office, college and hotel networks go further than closing ports. See VPNs on strict work and school Wi-Fi.

  • Not for everyday use

    On home Wi-Fi or mobile data, WireGuard is quicker. Keep Stealth for the networks that need it.

Get started

How to use Stealth in Tunnexa

Three steps, and nothing to pay.
In the app: Settings › Select Protocol › Stealth

02

Select Stealth

Open Settings, tap Select Protocol, and choose Stealth.

03

Connect

The server list shows only the locations that offer Stealth. Choose one, then Tap To Connect.

Compare every VPN protocol in Tunnexa →

FAQ

Stealth VPN questions

Something not covered here? Write to us at support@tunnexa.com.

What is a stealth VPN?

A stealth VPN disguises your VPN connection as ordinary web traffic, so networks that block VPNs find it harder to spot. Tunnexa's Stealth protocol makes your connection look like HTTPS traffic to a website.

What is VPN obfuscation?

Obfuscation means hiding the patterns that give a VPN away. AmneziaWG does it by reshaping WireGuard's packets. Stealth does it by looking like a normal website visit.

Can a network still block Stealth?

It can. Stealth is harder to spot, not impossible to block, and results vary by network. It's the protocol to try when nothing else connects.

Is Stealth slower than other protocols?

Usually a little, because of the extra work it does to blend in. Use WireGuard for everyday browsing and switch to Stealth only when you need it.

Is Stealth free?

Yes. It needs a free Tunnexa account, which you can create with an email code, Google or Apple.

Is it legal to use a stealth VPN?

In most countries, using a VPN is legal. Some restrict VPNs, and network owners can set their own rules. Check what applies where you are.