Your internet. Your rules.

FlowLock is a fast native VPN client. Add your Remnawave, Marzban or 3x-ui subscription and decide what goes through the VPN and what goes direct.

Free · macOS 14+ and Windows 10+

FlowLock
Disconnected Estonia
Demo Search Update
Traffic: 60 GB of 200 GB
Download 0.0 Mbps
Upload 0.0 Mbps

Everything a VPN client should do

Native apps with nothing extra: one-click connect, clear settings and honest handling of your subscriptions.

TUN and system proxy

TUN captures all system traffic, games and terminal included. System proxy works without admin rights.

Switch servers on the fly

Open connections move to the new server instantly, with no reconnecting.

Kill switch

If the core fails to start, traffic is blocked instead of leaking past the VPN. A crashed core restarts by itself.

Any panel

Remnawave, Marzban, 3x-ui and compatible: links, base64, Xray JSON and sing-box JSON. Traffic and expiry always in view.

Beats DPI

TLS ClientHello fragmentation and modern protocols that are hard to tell apart from regular HTTPS.

Best ping, automatically

Ping through the server, over TCP or ICMP. Auto mode picks the fastest server in the subscription.

Live speed

Speed and traffic right in the window, plus a menu bar and tray icon.

Over-the-air updates

FlowLock updates itself and only installs builds with a valid Ed25519 signature.

You decide where traffic goes

Three everyday modes and a rule editor anyone can use. Rules from your subscription work alongside your own.

Russian sites (.ru, .su, .рф and the geosite/geoip lists) go direct, everything else through the VPN.

  • youtube.com VPN
  • chatgpt.com VPN
  • telegram.org VPN
  • wikipedia.org VPN
  • gosuslugi.ru Direct
  • vk.com Direct

Your own rules

Site, link, IP or subnet, geosite and geoip, keyword and regexp. Each one goes via VPN, direct or blocked.

Ready-made sets

YouTube, Telegram, ChatGPT and “Blocked in Russia” are one click away in the menu.

Rules from the subscription

Happ routing profiles, routing from Xray JSON and route from sing-box JSON. Your rules take priority.

Ads and DNS

Ad blocking, DNS over HTTPS, a separate DNS for direct connections, IPv4 or IPv6 preference.

Modern protocols out of the box

Built on the sing-box core with native XHTTP, VLESS Encryption and mKCP. Whatever popular panels offer just works.

VLESS Reality
Looks like a real website. Vision, TLS, WS, gRPC, HTTP/2.
XHTTP
A transport over plain HTTP, hard to tell from web traffic.
VLESS Encryption
Post-quantum ML-KEM encryption.
Hysteria2
QUIC for poor networks, salamander and port hopping.
Trojan
A proven classic over TLS.
Shadowsocks
Light and fast, 2022 ciphers included.
VMess
For compatibility with older servers.
mKCP
A UDP transport for lossy networks.

Connected in a minute

  1. Download FlowLock

    The installer for macOS or Windows, or the portable version that needs no install.

  2. Add a subscription

    Copy the link from your panel or bot: FlowLock picks it up from the clipboard.

  3. Press the button

    One click and you are connected. FlowLock picks the best server for you.

Safe by default

FlowLock collects no data and asks for no extra rights. Everything stays on your device.

Signed updates

Every update is signed with an Ed25519 key that lives only on the build machines. Neither the server nor the CDN can swap it.

No tracking

The update server keeps no IP addresses, HWIDs or User-Agents. It counts daily totals and nothing else.

Data stays local

Subscriptions and settings live on your system with locked-down permissions. No account needed.

Least privilege

Admin rights are needed only for TUN. The helper takes commands from your user alone.

Wherever you work

Native apps for every system, built on one core with the same features.

  • Linux In development
  • Android In development
  • iOS In development

Frequently asked questions

Ready to try it?

Download FlowLock and connect in a minute. News and builds are on our Telegram channel.