a whisper,
not a shout
private, protected internet access on a protocol of its own: modern encryption, a fast and steady connection, no browsing logs.
android today. one subscription covers up to 10 devices, with no speed or traffic limits.
a real screen of the app, 19 october 2026
measured
numbers from a real connection on 18 october 2026. not marketing maximums — what we actually saw.
- down, laptop
- 165–300Mbit/s
- las vegas, 170 ms round trip. on a 100 mb file and in steady state.
- down, phone
- 139–270Mbit/s
- android on a real phone. 85–113 before the buffers were tuned.
- up
- 50–150Mbit/s
- depends on the hour and the carrier. 0.6–6.5 before the udp lane.
- handshake
- 12 of 12
- first try. on an unstable network the client tries several paths at once.
- connections at once
- 100
- on the phone, no losses: its own multiplexer instead of tcp inside tcp.
- locations
- 2
- las vegas and new york. the node is picked by ping, or by hand.
upload depends on the line and the carrier, not on the protocol: we measured it and adapted.
how it works
four things everything rests on. for those who like to know what is inside.
- solid encryption
- the connection is protected by tls 1.3 — the same standard modern browsers use. data between your device and the server is closed to outsiders, and the server answers only those who hold a key.
- keys ready for the future
- a hybrid x25519 + ml-kem-768 exchange inside the handshake, as modern browsers do, plus post-quantum authentication of the server. traffic recorded today cannot be decrypted tomorrow.
- the session outlives the connection
- if a connection drops, the session carries on: shepot keeps spare carriers warm and moves over unnoticed. upstream data goes over udp, so uploads from a phone are faster.
- it finds its own way
- tcp or udp, packet size, handshake shape — the client tries, remembers what works best on your line and starts there next time. chacha20-poly1305 encryption, all written in rust.
the app
android 0.3.0 is what is on the phone today. ios, windows and linux are built on the same core.
- one line is the key. you never see addresses, ports or settings: the app fetches them itself and refreshes them when we change something.
- servers by country. “auto” is the fastest by ping.
- split tunnelling: all apps, all except selected, or only selected.
- russian and english. the dark theme is the only one.
- linux already has a console client: local socks5 and http proxies.
connect
no sign-up. payment happens inside telegram, the key arrives at once.
-
open the bot @ShepotVPN_BOT
pick a term and pay — with telegram stars now, by card later. the key and the instructions arrive in the chat right after payment.
-
install the app
the android file is in the bot. if the phone asks about installing from an unknown source — allow it.
-
open the shepot:// link
or paste the key by hand, or point the camera at the qr code. the app asks whether to add the key.
-
tap the round button
when it lights up and says “connected”, that is it. you can forget about it.
- one subscription covers up to 10 devices: the same key on each.
- invite a friend: every subscription of theirs from a month up gives you +10 days. 7 days for a story or a review.
- already have a personal link from whoever invited you? it holds the same things: key, qr code and the app.
questions
how do i get access?
in the bot @ShepotVPN_BOT: pick a term, pay inside telegram — the key arrives at once. no sign-up, no e-mail.
what does the server see?
the server reaches the internet on your behalf, so it knows which addresses you contact; it does not look inside https. there are no browsing logs: we do not keep them, so there is nothing to store. only the access name and the subscription term are kept.
how is shepot different from an ordinary vpn?
it runs a protocol of its own: the session survives dropped connections and the client picks the fastest path itself. the encryption is modern and protected against future key attacks. speed and traffic are not capped, and there are no browsing logs.
how many devices?
up to 10 per subscription. the key is the same: on a new device just enter it or open the shepot:// link.
what about iphone and desktop?
in progress: ios, windows and linux on the same core. linux already has a console client — the link comes with the key.
why does telegram respond slower through the vpn?
telegram is latency-bound: almost every action is a separate exchange with its server, and the tunnel adds the path to a node in the usa. throughput does not drop, but responses take longer. a closer node in europe is planned.
how do i disconnect?
the round button in the app, or the button in the notification shade.
i lost the key or showed it to someone
write to support in the bot: the old key is closed and a new one issued, the subscription stays.