What encryption does PrivateByRight VPN use?

PrivateByRight VPN uses strong, modern encryption across all supported protocols.

Encryption Standard

We use AES-256-GCM — the same encryption standard used by governments, financial institutions, and security agencies worldwide. It is considered unbreakable with current computing technology.

Protocol-Specific Encryption

WireGuard

• Symmetric encryption: ChaCha20
• Authentication: Poly1305
• Key exchange: Curve25519 (ECDH)

OpenVPN

• Data channel: AES-256-GCM
• Handshake: RSA-4096
• HMAC authentication: SHA-256

Perfect Forward Secrecy

We implement perfect forward secrecy using ECDH key exchange. This means a unique encryption key is generated for each session. Even if a key were ever compromised, it could not be used to decrypt past or future sessions.