methods / psiphon-guide
Psiphon: the free unblocking app for phone and PC
Short answer
Psiphon is a free, open-source circumvention app from Psiphon Inc. that tunnels your traffic through its global server pool with obfuscation on top - built to keep working where plain VPNs are blocked. Install from official stores, pick a region if needed, and mind the speed limits.
Psiphon is one of the most widely used censorship circumvention tools in the world, built by Psiphon Inc. since 2006 and open source throughout - and it grew out of the Citizen Lab, the university research group that also maintains the test lists our methodology leans on [1][5]. Its specialty is the situation every other tool struggles with: networks that are actively hostile to VPNs. Psiphon wraps its encrypted tunnel in obfuscation and switches transports dynamically to defeat deep packet inspection, which is why it keeps connecting in environments where ordinary VPN protocols get fingerprinted and cut [1].
It is the pragmatic pick: free, no configuration, made for phones first, honest about being a commercial service funded by ads and subscriptions. This guide covers what it does, the per-platform modes, and the limits worth knowing before you rely on it.
What Psiphon actually does
When you connect, Psiphon routes your traffic through its global server network over an encrypted connection, so the network you are on - carrier, ISP, hotel Wi-Fi - cannot see the sites you visit or the content you exchange [1]. On top of that tunnel sits the part that makes it different from a consumer VPN: every connection runs an SSH session for encryption, and the handshake is wrapped in an obfuscation layer that defends against protocol fingerprinting and DPI. The client picks how to carry and disguise that connection based on the conditions it observes on your network [1].
The consequence for blocked sites: filters that work fine against a standard WireGuard or OpenVPN handshake often never see a usable target in Psiphon traffic. That is the same class of trick as GoodbyeDPI and Tor bridges, packaged in one app.
Install it - official channels only
- Android: the official app is on Google Play ("Psiphon VPN: Secure Access", over 100 million installs) [3]. Play Store screenshot below - note the region selector, which matters later.
- Windows: download the installer from the official Psiphon download page [2]. The app runs in VPN mode on current Windows versions; a legacy L2TP/IPsec variant still exists in their FAQ scope [1].
- iOS: Psiphon Browser exists on the App Store, but read the mode warning below - it is browser-only [1].
As always with circumvention apps: only the publisher's own pages and the official store listings are trustworthy. A "Psiphon APK" from any other site is a common malware route - the same trap our fake mirrors warning covers.
Which mode on which platform
This is the part most guides get wrong, and Psiphon's own FAQ is explicit about it:
- Android app = whole-device VPN. Every app's traffic rides the tunnel. This is what you want for messaging apps that ignore browser settings.
- Windows = VPN mode for the system. Current Psiphon for Windows tunnels the machine; older legacy builds used L2TP/IPsec and had known quirks [1].
- iOS = browser-only. Psiphon Browser tunnels only what loads inside the app itself - your Instagram or X apps stay outside the tunnel and go out over your normal connection [1]. If you need whole-device coverage on iOS, Psiphon is the wrong tool; consider the official Tor options or a VPN instead.
- Region selection. The Android app lets you pick which region your traffic exits from - useful when the block is a geo wall rather than a network filter. Without a selection, the fastest available server wins, which can change by the session [1].
The honest limits
- Speed. Obfuscation and shared server pools cost throughput. Psiphon is deliberately frank that VPN mode on Windows can be slow [1]. For reading and messaging it is fine; for streaming and large downloads it usually is not - that is VPN or WARP territory.
- Not anonymity. Psiphon hides your traffic from your network, but it is a VPN-style trust relationship: the operator sees your traffic endpoint-side. Your IP also changes between sessions as servers rotate, which helps against IP-based blocking but is not the same threat model as Tor's three-relay design [1].
- It does not clean up after your browser. History, cookies and other device data are untouched - the tunnel protects the path, not the device [1].
- Ads and subscriptions fund it. The free tier shows ads and throttles; a subscription removes both. That is a legitimate model, but know it before recommending Psiphon to someone who would rather pay nothing.
- Captchas follow rotating exits. Because your shared exit IP changes, some sites greet every session with a puzzle. Annoying, not dangerous.
Psiphon vs the alternatives
| Situation | Better pick | Why |
|---|---|---|
| Blocked messaging apps on a phone | Psiphon [3] | whole-device tunnel, zero config |
| Reading under heavy censorship | Tor Browser | no single operator sees both ends [1] |
| ISP-level VPN throttling or blocking | Psiphon, then GoodbyeDPI | obfuscation beats protocol fingerprinting [1] |
| Fast everyday unblocking on desktop | WARP or a paid VPN | speed where censorship is lighter |
| You cannot install anything | Archives | zero install at all |
Verify and stay honest
After connecting, check your exit on the 1.1.1.1 help page - it shows the network and location your traffic now presents [8]. If you want to know how the block behaves rather than just dodge it, OONI Probe measures whether the site is DNS-blocked, TCP-blocked or HTTP-filtered on your network [6].
One legal note, plainly: circumvention tools are legal in most countries, but a few restrict their use, and school or workplace networks have their own rules about what may run on managed devices. This guide is information, not legal advice - EFF's tool guide frames the decision by threat model rather than by brand [7].
FAQ
Is Psiphon a VPN?
It behaves like one: an encrypted tunnel that hides your traffic from the network you are on. The difference is the obfuscation layer and the dynamic transport selection on top, which are there to survive networks that actively block VPNs.
Why does my IP address keep changing with Psiphon?
Psiphon automatically picks working servers, and each has its own IP. When a server is blocked, overloaded or slow, it switches - so your exit IP and apparent region can change unless you pin a region in the app.
Does Psiphon work on iPhone?
Only as a browser app: Psiphon Browser tunnels what loads inside the app, not your other apps. For whole-device coverage on iOS you need a different tool - check the mode table above before relying on it.
Is Psiphon safe to log in with?
The tunnel is encrypted, so your network cannot read your traffic. But it is not an anonymity tool: Psiphon Inc. is the operator your traffic trusts, and a login ties the account to that session. Do not confuse access with anonymity.
Why is Psiphon slower than a normal VPN?
The obfuscation layer and the shared, rotating server pool add cost by design - they are what make the connection survivable on hostile networks. For speed-first use on friendlier networks, a VPN or WARP is the better fit.
Is Psiphon really free?
Yes, funded by ads on the free tier and by subscriptions that remove ads and speed limits. There is nothing you must pay to get through a block.
How do I know Psiphon is actually tunneling my traffic?
After connecting, check your exit network and location on the 1.1.1.1 help page. On Android in VPN mode the whole device routes through it; in the iOS Browser app, only what loads in that app is tunneled.