Latest News

Surfshark officially introduces a secure WireGuard protocol

VPN provider Surfshark has rolled out the WireGuard protocol support on its Android, Windows, iOS, and macOS applications. This open-source VPN protocol will significantly improve VPN speeds for its users. It is also faster than the widespread OpenVPN and IKEv2/IPSec protocols. Surfshark’s Wireguard solution comes with a double network address translation (NAT) system to ensure users’ privacy.

“As per popular request, we’ve rolled out WireGuard for all our users. It stands out in the overly engineered landscape of VPN protocols by offering faster speeds and lower ping times,” says Gabrielle Racai, Communications manager at Surfshark. “The protocol is also easier to audit code-wise, which amounts to its security. WireGuard is furtherly improving the overall performance of Surfshark VPN.”

WireGuard’s strengths lie in lightweight code and strong cryptographic primitives. Where other popular VPN protocols utilize about 400,000 lines of code, the WireGuard has about 1% of either OpenVPN or IPsec’s codebase, making security audits significantly more efficient. The code of this size is also less susceptible to security vulnerabilities, as it’s easier to manage and configure.

WireGuard encrypts users’ data using thoroughly tested, modern ChaCha20, Curve25519, BLAKE2s, SipHash24, HKDF cryptography. The VPN protocol provides rotating keys for perfect forward secrecy. The quote-on-quote connectionless protocol minimizes packet loss during handshakes while providing users with smooth performance.

WireGuard is the most recent addition to Surfshark’s selection of the acknowledged OpenVPN UDP / TCP, IKEv2/IPsec, and Shadowsocks protocols.

To switch to using WireGuard, Surfshark users should update their apps to the latest version, where the protocol can be chosen manually from the settings.

The roll-out of the new WireGuard protocol is the most recent infrastructure upgrade of Surfshark, following the shift to the RAM-only servers in July.