Fast, private VPN for iOS and Android. 6 free servers worldwide, premium subscription unlocks all 12 locations. Modern encryption, no logs.
Every day, millions of people expose their personal data without realizing it. A VPN is no longer optional — it's essential.
Same job — encrypt your traffic. These rows show what each stack actually gives you as a real VPN tunnel.
Your tunnel uses industry-standard building blocks — details below.
TLS 1.3 + XTLS · Vision
End-to-end
Zero analytics, zero tracking. We don't record your activity, traffic, or connections.
Marshall tunnels traffic with VLESS and Reality, wrapped in TLS 1.3. To observers, your VPN session resembles ordinary HTTPS — hard to fingerprint or block at the wire.
Credentials stored in Apple's hardware-encrypted keychain. Even we can't access them.
Built on sing-box — fully open-source, community-audited, and transparent.
A clean, modern interface built for iOS. No clutter, no learning curve — just a fast, reliable VPN experience.
Auto mode picks the fastest server. Or choose manually with real-time ping.
Instantly verify access to YouTube, Instagram, Telegram, ChatGPT, and more.
VLESS, VMess, Trojan, Shadowsocks — works with any modern configuration.
Paste any subscription URL or config — use Marshall as a client for your own infrastructure.
A clean, modern interface built for iOS. No clutter, no learning curve — just a fast, reliable VPN experience.
Auto mode picks the fastest server. Or choose manually with real-time ping.
Instantly verify access to YouTube, Instagram, Telegram, ChatGPT, and more.
VLESS, VMess, Trojan, Shadowsocks — works with any modern configuration.
Paste any subscription URL or config — use Marshall as a client for your own infrastructure.
Compare how internet access is shaped by policy in each region — then switch to our servers to see where Marshall is present.
Data exposure risk by region
Already have your own servers or subscription links? Use Marshall as a universal VPN client.
Shadowsocks uses AEAD to protect the tunnel between your device and Marshall. Your data is encrypted in transit; we pair it on our own infrastructure with VLESS and Reality in TLS 1.3 — a stack focused on confidentiality, integrity, and a lean, auditable design.
AEAD protects your data in transit. On our servers it runs alongside VLESS, Reality, and TLS 1.3 — for confidentiality and integrity.
SOCKS5 transport with ChaCha20-Poly1305 and AES-256-GCM: each frame is cryptographically signed so replays and tampering are caught before your traffic is handled. The protocol keeps encryption and authentication in one place, which helps reduce metadata exposure and keep your side of the path private.
ChaCha20-Poly1305 / AES-GCM: per-packet auth, replays and tampering dropped at the edge. One place for crypto + integrity.
XTLS Vision eliminates double encryption overhead. You get censorship resistance without sacrificing speed.
Traditional VPN protocols encrypt already-encrypted HTTPS traffic, wasting CPU and adding latency. VLESS with XTLS Vision detects TLS-in-TLS and passes the inner layer through directly — zero overhead on already-secure connections.
Download Marshall VPN and start in one tap — 1 day full Premium on us, then 6 free servers forever.