Nym and NymVPN - Next-gen privacy with mixnet and VPN service

Privacy Project Showcase
4

Thanks, @Parish2555. Here are some initial responses based on the criteria you provided. The following applies to NymVPN. We’re happy to provide evidence, but are limited in the number of hyperlinks we can include to articles.

:gear: Technology

  • Protocols: The dVPN mode is based off AmneziaWG, a censorship-resistant fork of WireGuard. NymVPN does not support OpenVPN.
  • Killswitch: The Android app relies on the native Android killswitch. By end of Q1 2025, the iOS app will rely on Apple’s “VPN On Demand” rules and the desktop apps will get a basic but robust killswitch.
  • Multihop support: The dVPN mode is 2-hop. The mixnet mode is 5-hop.
  • Open source: Both the NymVPN app and the Nym binaries are open source, and available on Nym’s GitHub page.
  • Censorship-resistance: The use of client-side AmneziaWG allows for basic censorship-resistance. More censorship-resistance features will make their way into NymVPN throughout 2025.
  • UX: The NymVPN apps are straightforward, with a switch for the 2 modes, a location selector and a Connect button.
  • IPv6: The apps natively support IPv6.
  • Remote port forwarding: NymVPN does not support this feature.
  • Obfuscation technology: See above.

:see_no_evil: Privacy

  • Anonymous payment options: NymVPN is free to use. By the paid launch, it will support Monero payments. Adding support for Zcash (and cash TBD) is on the roadmap. Note that payments information is unlinked from online activities thanks to a network access based on zero-knowledge proofs.
  • Personal information: The access is done via a randomly generated 24-word passphrase.

:crossed_swords: Security

  • Encryption schemes: NymVPN use up-to-date cryptography such as X25519/Ed25519 for handshake, AES-GCM-SIV 256 bits, AES-CTR, ChaCha20 and BLAKE2b for data encryption for the mixnet mode. For the dVPN mode, AmneziaWG / WireGuard encryption applies.
  • Forward secrecy: Supported in the dVPN mode with IKpsk2 Noise pattern. Partially supported for the mixnet (done for client-gateway; partially implemented for gateway-mixnodes and mixnodes-mixnodes, to be completed in Q2 2025).
  • Published audits: See Nym’s Audit page. The mixnet and NymVPN apps have been audited by JP Aumasson (cryptographer), Oak Security, Cryspen and Cure53.
  • VPN servers: Nym does not operate servers (as a dVPN / mixnet).
  • Quantum-resistance: This is on the roadmap for 2025.
  • Bug bounty: Also on the roadmap for 2025.

:hugs: Trust

  • Ownership and leadership: Nym is owned by its founders and employees. See the nym.com About page for info about Nym’s leadership.
  • Jurisdiction: Nym is based in the canton of Neuchâtel, in Switzerland.
  • Transparency report: On the roadmap for 2025. In the meantime, detailed info is available on the “Trust Center” on nym.com.

:convenience_store: Marketing

  • Analytics: nym.com relies on a self-hosted Matomo instance.
  • Language: Nym uses responsible language, and makes fair comparison between NymVPN, other dVPNs and Tor’s properties.
  • .onion: nym.com does not have a .onion version for the time being.
3 Likes