Nostr VPN

org.nostrvpn.app

Mesh VPN built on Nostr signaling and userspace WireGuard.

Nostr VPN is a Tailscale-style mesh VPN for your own devices and trusted peers. Nostr is used for peer discovery and encrypted signaling; the data plane is userspace WireGuard, with the FIPS overlay handling NAT traversal and transit through friend-of-a-friend nodes when direct paths are blocked. Current app capabilities: - private mesh networking between approved participants - admin-driven invite + join flows - exit nodes and route advertisement (incl. WireGuard upstream) - MagicDNS-style `.nvpn` naming inside the mesh - manual pairing fallback when relay-mediated invites aren't an option

First release: May 13, 2026, 50 total releases.

Most recent release: Jun 22, 2026.

Website Repo

Appears in 7 app stacks.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

Jun 22, 2026 4.0.87
Jun 22, 2026 4.0.85
Jun 21, 2026 4.0.82
Jun 20, 2026 4.0.81
Jun 19, 2026 4.0.80
Jun 15, 2026 4.0.77
Jun 15, 2026 4.0.76
Jun 15, 2026 4.0.75
Jun 7, 2026 4.0.70
Jun 6, 2026 4.0.69
Jun 6, 2026 4.0.68
Jun 5, 2026 4.0.62
Jun 5, 2026 4.0.60
Jun 5, 2026 4.0.59
Jun 4, 2026 4.0.58
Jun 3, 2026 4.0.55
Jun 2, 2026 4.0.54
Jun 1, 2026 4.0.52
May 30, 2026 4.0.50
May 30, 2026 4.0.49
May 28, 2026 4.0.48
May 28, 2026 4.0.47
May 27, 2026 4.0.45
May 25, 2026 4.0.40
May 18, 2026 4.0.37
May 18, 2026 4.0.36
May 18, 2026 4.0.35
May 18, 2026 4.0.34
May 18, 2026 4.0.33
May 18, 2026 4.0.31
May 17, 2026 4.0.26
May 16, 2026 4.0.24
May 16, 2026 4.0.22
May 16, 2026 4.0.21
May 16, 2026 4.0.19
May 16, 2026 4.0.18
May 16, 2026 4.0.17
May 16, 2026 4.0.16
May 16, 2026 4.0.14
May 16, 2026 4.0.13
May 16, 2026 4.0.12
May 16, 2026 4.0.10
May 16, 2026 4.0.9
May 16, 2026 4.0.8
May 16, 2026 4.0.7
May 16, 2026 4.0.6
May 16, 2026 4.0.2
May 16, 2026 4.0.1
May 16, 2026 4.0.20
May 13, 2026 4.0.15

## Downloads ### Most People Will Want - Nostr VPN for macOS (Apple Silicon): [nostr-vpn-v4.0.15-macos-arm64.dmg](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-macos-arm64.dmg) - Nostr VPN for Debian/Ubuntu (.deb): [nostr-vpn-v4.0.15-linux-x64.deb](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-linux-x64.deb) - Nostr VPN for Windows: [nostr-vpn-v4.0.15-windows-x64-setup.exe](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-windows-x64-setup.exe) - Nostr VPN for Android: [nostr-vpn-v4.0.15-android-arm64.apk](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-android-arm64.apk) ### Command Line

More…

- macOS Apple Silicon CLI: [nvpn-aarch64-apple-darwin.tar.gz](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nvpn-aarch64-apple-darwin.tar.gz) - Linux x64 CLI: [nvpn-x86_64-unknown-linux-musl.tar.gz](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nvpn-x86_64-unknown-linux-musl.tar.gz) - Linux ARM64 CLI: [nvpn-aarch64-unknown-linux-musl.tar.gz](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nvpn-aarch64-unknown-linux-musl.tar.gz) - Windows x64 CLI: [nvpn-v4.0.15-x86_64-pc-windows-msvc.zip](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nvpn-v4.0.15-x86_64-pc-windows-msvc.zip) ### Other Files - Android arm64 AAB: [nostr-vpn-v4.0.15-android-arm64.aab](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-android-arm64.aab) - macOS Apple Silicon updater archive: [nostr-vpn-v4.0.15-macos-arm64.app.tar.gz](https://github.com/mmalmi/nostr-vpn/releases/download/v4.0.15/nostr-vpn-v4.0.15-macos-arm64.app.tar.gz) ## Changes ### Fixed - Private FIPS mesh endpoint traffic now starts routed FIPS discovery when a direct UDP/NAT path is down, so peers can still be reached through established FIPS neighbors. This is covered by the routed-FIPS Docker e2e release gate. - Bumped FIPS to `83fbf03` so queued endpoint and TUN traffic on a stale half-open session starts reply-learned discovery, and transit peers forward lookup fallback can ask sendable non-tree peers without echoing requests to the origin. This keeps tree/bloom lookup routing primary while letting peers fall back through the mesh when direct routes, NAT traversal, or the current spanning-tree view are asymmetric. - Bumped FIPS to `811eef3` so initiators resend the final XK `SessionMsg3` after entering `Established`. This fixes a half-established session failure where one peer sent encrypted endpoint traffic while the other peer was still waiting for the last handshake message, and keeps the synthetic localhost-UDP node tests reliable on slower CI runners by serializing the nextest group and draining synthetic handshake repairs per edge. The FIPS release gate also now keeps STUN-fault testing from being masked by LAN mDNS fallback and fixes portable timestamp checks in the DNS resolver harness. - The macOS GUI refreshes participant alias edit drafts when the backend alias changes, so a renamed peer no longer appears under an old draft name in the Manage Device panel. ### Changed - `just release-gate`, CI, and local release verification now run routed-FIPS and NAT safe-MTU Docker e2e tests that verify peers show online and move tunnel payloads both ways. - `just release-gate`, CI, and local release verification now run a local `nvpn update` CLI e2e against a file-backed release manifest and archive. ## Release Build - Built from commit `e6a3e648ce37d4680ab98d0f5d7e6fbd0f2659aa` for release `v4.0.15`. - Built signed and notarized Apple Silicon macOS DMG and updater archive. - Built Linux x64 desktop Debian package. - Built Windows x64 installer. - Built signed Android arm64 APK/AAB.