Bitmask

What Bitmask is

Bitmask is a free, open-source VPN app from the LEAP Encryption Access Project, which was founded in 2012. It is designed to help protect online privacy and connects to vetted VPN providers including Riseup.net and The Calyx Institute. The app also includes tools for getting around internet controls. Users can reach private VPNs with a discreet URL or invite code, and individuals or collectives can use Bitmask’s self-hostable system to run their own private VPNs focused on circumvention.

Bitmask is available on Android, Linux, macOS, and Windows, as well as for self-hosted use. The maker says its apps and server-side components are open source and describes the tool as third-party audited. It says Bitmask requires no accounts and has no logs or tracking. The listed plan costs nothing. Linux support covers the two latest Ubuntu LTS versions, while Debian and Arch Linux packaging is not currently available. On Windows, there is no kill switch, and the maker describes the platform as not very well battle tested for DNS or IP leaks. LEAP welcomes community contributions, bug reports, and translations, and invites users to contact it on Matrix at #leap:systemli.org.

Who it suits

Bitmask suits people seeking a free, open-source VPN app with provider connections and tools to evade internet controls. Its self-hostable system may also suit individuals or collectives who want to run private VPNs.

Limits

On Linux, support covers the two latest Ubuntu LTS versions; Debian and Arch Linux packaging is not currently available. The Windows version has no kill switch, and the maker says it is not very well battle tested for DNS or IP leaks.

Getting started

1. Open the Bitmask website.
2. Choose a version for Android, Linux, macOS, or Windows, or use the self-hosted system.
3. Connect to a vetted VPN provider.
4. Use a discreet URL or invite code to connect to a private VPN, if applicable.

Verdict

Choose Bitmask if you want a free, open-source VPN app with vetted provider connections, circumvention tools, or self-hosting. Windows users should weigh the absence of a kill switch and the maker's caution about DNS and IP leak testing; Linux users should note the supported distribution limits.