Choose a plan. Personal, Family or Pro. Every plan includes all 57 locations.
Save your account number. It is 16 digits and it is your sign-in. Keep it in a password manager. Without an email on the account, we cannot recover it.
Install the app on your phone, or set up a computer or router with the guides below.
Connect. Pick a location, or let the app choose the fastest one.
Phone app
Install IPHush for iPhone or Android and open it.
Sign in with your account number, or with a code sent to your email if you added one.
Tap Connect. The first time, your phone asks you to allow a VPN configuration. Allow it.
To change location, open Locations, search, and tap a city. Some locations are served from a nearby server: a small line under the name shows it, such as "via Chicago".
The connection key is created on your phone and the private part never leaves it.
Computer WireGuard
On computers, IPHush uses the official WireGuard app with a configuration file from your account.
Sign in at iphush.com/app, open Devices and add a device. Choose a location and download its WireGuard file.
[Interface]
PrivateKey = (created for this device)
Address = 10.96.x.x/32, fd49:5048::x/128
DNS = 10.96.0.1, fd49:5048::1
MTU = 1420
[Peer]
PublicKey = (the router's key)
Endpoint = lcy1.pop.iphush.com:51900
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25
Each file belongs to one device. Do not copy it to a second device: add another device instead, so the connection limit works as it should.
Routers
A router protects every device at home, including smart TVs and consoles. It counts as one connection. Family and Pro each include 1 router; on Pro it leaves from your dedicated IP. In your account open Devices → Add a router, choose the brand and the location, and download the router's file: a ready .rsc script for MikroTik, a WireGuard .conf file for the others. Save a backup of the router's settings first.
Firmware 4.x, with the .conf file.
Open the admin panel (usually 192.168.8.1), go to VPN → WireGuard Client and add a new group (or use the default one).
Choose Upload configuration file and pick the IPHush .conf file.
Start the connection from VPN Dashboard. It shows the IPHush profile as connected, and every device on the router's network goes through IPHush.
Install the packages: opkg update && opkg install wireguard-tools luci-proto-wireguard, then reboot.
In LuCI: Network → Interfaces → Add new interface, protocol WireGuard VPN, then Load configuration… and pick the IPHush file.
Under Peers, tick Route Allowed IPs. Under Firewall Settings, put the interface in the wan zone. Save and apply.
No settings to type by hand: IPHush makes the whole file. It adds IPHush and changes nothing else on the router.
RouterOS 7.23 or newer (WireGuard)
Check the version in a terminal (WinBox → New Terminal, WebFig → Terminal, or SSH): /system resource print.
Save a backup: /system backup save name=before-IPHush dont-encrypt=yes, and turn on Safe Mode (Ctrl+X in the terminal).
In your account: Devices → your router → Router file → Whole home through IPHush, and download iphush-whole-home.rsc.
Upload it in Files (WebFig), or drag it into the WinBox Files window.
Run /import file-name=iphush-whole-home.rsc verbose=no, then delete the copy: /file remove iphush-whole-home.rsc.
Within a minute your account shows the router Connected. Press Ctrl+X again to keep the changes.
RouterOS 6.45 or newer (IKEv2)
RouterOS 6 has no WireGuard. Where a location offers IKEv2 (your account lists them), open Devices → your router → Router file → MikroTik with RouterOS 6? Get the IKEv2 file, or choose RouterOS 6.45 or newer · IKEv2 when you add the router. Load iphush-ikev2-whole-home.rsc the same way: /import file-name=iphush-ikev2-whole-home.rsc, then /file remove iphush-ikev2-whole-home.rsc.
IKEv2 is there so that older routers are covered too. On old hardware it is slow: a small RouterOS 6 router without hardware encryption measured about 1 to 2 megabits a second with its processor full. For speed, use RouterOS 7 with WireGuard.
The file holds the router's private key or password: do not share it, and do not photograph the terminal. If IPHush stops answering, the home falls back to its normal internet until IPHush is back. To take IPHush out again, open Devices → your router → Manage → Remove IPHush from the router and paste the commands it shows.
Proxy logins
A proxy login protects one app or browser instead of the whole device, with no VPN app needed. Create a login in your account under Proxy: you get a username and a password. Personal includes 1 login, Family 3 and Pro 5.
HTTPS proxy
The connection to the proxy is encrypted with TLS, so your network sees only that you talk to IPHush.
Protocol
HTTPS proxy (HTTP CONNECT over TLS)
Port
8443
Chicago
ord1.pop.iphush.com
Toronto
yyz1.pop.iphush.com
London
lcy1.pop.iphush.com
Amsterdam
ams1.pop.iphush.com
Düsseldorf
dus1.pop.iphush.com
Milan
lin1.pop.iphush.com
curl -x https://USERNAME:PASSWORD@lcy1.pop.iphush.com:8443 https://example.com/
# or for every command in this shell
export HTTPS_PROXY=https://USERNAME:PASSWORD@lcy1.pop.iphush.com:8443
Browsers reach an HTTPS proxy through a small PAC file. Save this as iphush.pac, then point your browser or system proxy settings to it (Automatic proxy configuration URL). The browser asks for the username and password once.
function FindProxyForURL(url, host) {
return "HTTPS lcy1.pop.iphush.com:8443";
}
Up to 16 connections at once per login. Idle connections close after 15 minutes. Email port 25 is blocked. If a password leaks, rotate it in your account: the old one stops working everywhere.
Dedicated IP Pro
An address only you use: one IPv4 and one IPv6, at the router you choose. It is good for banks, work logins, allow-lists and fewer CAPTCHAs.
On Pro, open Account → Dedicated IP and choose a location: Chicago, London, Amsterdam or Düsseldorf.
Connect to that location. Every device on your account leaves from your own address. Locations served via another city keep their shared addresses.
Incoming connections (port forwarding) are not offered. Because the address is only yours, reports of abuse from it reach your account. We still keep no connection logs.
Your router’s dedicated IP, and the location it sits at, are shown in Devices on your account.
Locations
57 locations in 45 countries, in one list sorted by country, with live latency. Our own routers are in Chicago, New York, Kansas City, Fremont, Toronto, London, Amsterdam, Düsseldorf and Milan, most of them connected to internet exchanges and directly to the big networks.
Some locations are served from a nearby server. The app shows it in a small grey line under the name, such as "via Chicago": websites see the country or US state you picked, and your traffic is carried by our router in that city. For the lowest latency, pick a location close to you.
Speed & fair use
Full speed of your connection — no speed caps on the VPN.
No plan has a VPN speed tier. At busy times, every account keeps a fair share, and we never cut you off.
Payments & balance
Pay by card through Stripe's secure checkout. Your card number never reaches us.
Balance: a USD balance you top up with $10, $25, $50 or $100. Up to $2,000, it never expires, and it can only be used for IPHush.
Auto-renew is on by default and you can switch it off any time. If your balance will not cover the renewal, the app tells you 3 days before. If a renewal fails, the plan pauses until you top up.
Refunds: ask within 24 hours of a payment for a full refund to the same payment method.
Prices are shown before tax. Where tax applies, it is added at checkout. Pro can add a company name and tax ID to its invoices.
Account
Sign in with your 16-digit account number. Adding an email is optional and gives you sign-in codes.
Lost the number? With an email on the account, sign in with a code. Without one, the account cannot be recovered: we do not know who you are.
Switch off any other VPN or proxy app, check that the device's date and time are correct, then try another location. On a computer, re-download the WireGuard file for that device.
"All connections are in use"
Your plan's devices-at-once limit is reached. Disconnect a device you are not using, or upgrade.
Slow
Choose a location close to you, and try another nearby location if it is busy. Wi-Fi far from the router often costs more speed than the VPN.
A website shows the wrong country
Websites also read your browser's location, language and cookies. Clear the site's cookies, turn off location access for the browser, and reload.
A network blocks the VPN
Try the HTTPS proxy on port 8443.
Email will not send
Port 25 is blocked. Set your mail app to port 587 or 465.
No guide matches. Try another word, or see the FAQ.
Still stuck?
Write to support@iphush.com. Include your device and location, never your account number or password.