A free VPN, no sign-up.
A status that tells the truth.
Connect with no email, no password and no card. Free gives you 2 GB per connection and 5 connections a day. ForestVPN names which of eight states your tunnel is really in, on every platform you run.
The app's main screen never says just Connected. It shows which of these eight verdicts is true right now.
- Working
- Idle
- Degraded
- BlockedAtHandshake
- BlockedAfterHandshake
- MtuBlackhole
- ExitUnreachable
- UnderlayDown
One session, several roads
Direct over UDP is tried first; the app changes road when it stops carrying data.
One session
- Direct, over UDPTried first
- TCPUsed only when needed
- An extra server of oursUsed only when needed
- Backup routeUsed only when needed
What you get
Smart routes: several routes, one steady connection
Tries several routes at once, keeps checking them and moves with no drop.
A connection status that names what is wrong
Eight verdicts from the tunnel's own counters, and the layer at fault.
Backup route: when the direct route fails
A second road for when the direct route stops carrying data, with its own monthly allowance.
Connect your own devices
One private network for your devices, names instead of addresses, and failover between your exits.
No sign-up: your account is a number
No email, no password. An optional 32-character number.
Put ForestVPN on your router
A whole home through one tunnel. MikroTik today, as a RouterOS container.
One core. Six clients.
- iPhone & iPad
- NetworkExtension, on-device. Under 50 MB RSS — no crash-reporter SDK is linked into the tunnel process.
- Mac
- Same core, same NetworkExtension model, menu bar first.
- Apple TV
- Ten-foot navigation, D-pad and Siri Remote, no keyboard needed to sign in.
- Android
- Phone, tablet, and Android TV, one VpnService implementation.
- Windows & Linux
- A privileged daemon plus a Tauri UI — the daemon runs headless on a machine with no screen.
- Router
- Runs as a RouterOS container on MikroTik hardware. Set its exit location from the web console — the one thing a screenless box can't do for itself.
More traffic per CPU cycle
On two MikroTik routers (2026-09-01) the core moved 122 Mbit/s where the router's own kernel tunnel moved 66.8, at about half the CPU per megabit. It lost on latency: 1.22 ms against 0.92 ms. The intervals and the traps are in the write-up.
What we keep, and what we do not
There is no column anywhere for the sites you visit or the names you look up. One row ties your device to each session it pays for, and it is deleted an hour after the session settles, or up to 17 days later for a ticket that was never used. Which exit a session used is erased when it ends.
Free to start. Premium when you need more.
Free is a standing tier with no card and no expiry. Premium, from $7.99 a month, removes the cap.