Security

Encrypted.
Camouflaged.
In control.

An encrypted connection, traffic camouflage for restrictive networks, and no browsing or DNS logs. No account required.

No accounts No activity logs Protocol levels L1, L2 and L3 Evasion protocols (EV) Dynamo auto-redeploy
Protection overview Available
Encryption Built in
Integrity Built in
Camouflage Available
Kill Switch Optional

Protocol levels balance speed, stealth, and reachability across different networks.

Protocol levels
Core technology

How Larva stays private and reachable.

A focused networking stack tuned for privacy and access on challenging networks.

Encryption

Larva encrypts traffic between your device and its VPN server. Encryption details vary by connection mode.

Integrity

Integrity checks help detect tampering between your device and the VPN server.

Privacy by design

Use Larva without an account. We do not keep browsing or DNS logs.

Camouflage

Connections blend into normal encrypted web traffic, making them harder to detect on restrictive networks.

Evasion (EV)

Evasion (EV) protocols are built for the most challenging networks, where standard VPN traffic is blocked.

Dynamo

On Standard and Yearly plans, Dynamo can deploy a fresh server and IP when a monitored endpoint is blocked.

Protocol levels

L1 / L2 / L3

Protocol levels let you balance speed, camouflage, and reachability. Start with L1 for everyday use and step up when a network gets restrictive.

L1

Balanced

The default for everyday use on normal Wi-Fi and cellular networks.

L2

More stealth

Adds camouflage when a network throttles, filters, or targets VPN patterns.

L3

Most resilient

Built for the strictest networks, where normal VPN traffic is blocked.

Choosing a level

Start with L1 for the best speed. If a connection is unstable or blocked, step up to L2, then L3. For the most challenging environments, switch to EV.

Evasion

When networks fight back, switch to EV.

Use Evasion (EV) when a network blocks standard VPN connections. It is built for restrictive environments but may add a little latency.

Evasion protocols (EV)

Camouflage that blends into everyday encrypted traffic, tuned for networks that actively filter VPN patterns.

  • Built for countries and networks with aggressive blocking
  • EV modes evolve over time to match new filtering techniques
  • Use standard levels first for best performance

A small tradeoff for reachability

EV may add latency; the impact depends on your network. On less restrictive networks, try L1, L2 or L3 first.

See protocol levels
Dynamo

Auto-healing access.

Dynamo monitors reachability from key regions and can deploy a fresh server and IP when an endpoint is blocked. Available on Standard and Yearly plans.

Automatic recovery

When a monitored endpoint is blocked, Dynamo can spin up a new server and IP automatically.

Region monitoring

Dynamo checks reachability from key regions to help detect blocks sooner.

Stability under pressure

Built for campuses, workplaces and other networks that regularly block VPN endpoints.

Built-in protections

Practical safeguards

Security is more than encryption. It is the small details that prevent leaks and reduce your attack surface.

Protections in the app

Kill switch
Blocks Internet traffic routed through Larva if the VPN disconnects unexpectedly.
Recommended >
Force DNS
Routes all DNS queries through the VPN tunnel.
Optional >
Connect on demand
Connects automatically on untrusted networks.
Optional >
DNS profiles
Default, Ad Blocking, Family and Custom profiles.
Available >

Specific options may vary by device / iOS version.

Privacy at a glance

Larva is built to minimise data collection. Full details are in the privacy policy.

  • No traffic logs stored
  • No DNS logs stored
  • Your IP address is processed in memory while connected and deleted when you disconnect
  • Crash diagnostics optional
Read privacy policy
Security FAQ

Common questions

Straight answers without the jargon.

Does Larva block ads?
Larva offers DNS profiles. Depending on the profile you choose, it can block ads, malware, or adult content at the DNS level.
What happens if the VPN drops?
Enable Kill Switch to block Internet traffic routed through Larva while the VPN reconnects. Local or private network routes may remain reachable.
Is Larva "no logs"?
Larva does not collect or store traffic or DNS logs. See the Privacy Policy for details on the limited data needed to operate the service.
Why three protocol levels?
Different networks have different restrictions. If one level is blocked or throttled, switching to another can restore access.
How do I use Larva on public Wi-Fi?
Connect before browsing. Keep Kill Switch enabled for leak prevention, and switch protocol levels if the Wi-Fi is restrictive.
Where can I get help?
Visit Support for troubleshooting steps, or contact us directly.
Get protected in seconds
Download Larva and connect in seconds. No accounts, no email, no friction.