VPNs

VPNs that work with Kuuko

Kuuko runs no VPN servers. You bring the VPN: Kuuko connects to your provider's server, and Kuuko's blocking keeps working inside the tunnel. Any provider that gives you a standard WireGuard configuration file, a small file ending in .conf, should work.

Look for “WireGuard configuration”, “manual setup” or “config generator” in your provider's account. Then in Kuuko's Blocking tab, choose Add your VPN (or VPN settings, once you have one) and add the file, or scan its QR code on iPhone. Use one config per device. More in Getting started.

Our pick · tested with Kuuko

Proton VPN

  • Free plan with config files: 1 device, no data limit, free servers in 10 countries.
  • No-logs audit by Securitum, the fifth year in a row (2026).
  • Proton AG, Geneva, Switzerland.
  • Configs include IPv6. If yours is older, download a new one.

Get a config: sign in at account.protonvpn.com, open Downloads › WireGuard configuration, give it a name, choose the platform and a server, then Create. Download the file, or scan the QR code that Proton shows only right after Create.

Tested with Kuuko on iPhone and Mac with a paid plan, and on iPhone with a free plan. Proton's guide: How to download WireGuard configuration files.

These hand out standard WireGuard configs, so they should work with Kuuko. We haven't tested them with Kuuko yet. Tell us how it goes.

Mullvad

Config: Account › WireGuard configuration generator. One key per device, up to 5. Configs include IPv6.

Audits: Cure53 infrastructure audit (2024) and others. Mullvad VPN AB, Sweden. No free plan.

IVPN

Config: Account › WireGuard config file generator, as a QR code or a .zip of config files (unzip it first). IPv6 optional. 5 or 10 devices, depending on the plan.

Audits: Cure53 security audits every year; its only no-logs audit was in 2019. IVPN Limited, Gibraltar. No free plan.

Surfshark

Config: my.surfshark.com › VPN › Manual setup › Desktop or mobile › WireGuard. Its extra post-quantum protection isn't available in manual configs.

Audits: Deloitte no-logs assurance (2023 and 2025) and others. Surfshark B.V., the Netherlands. No free plan.

NordVPN

Config: Nord Account › Set up NordVPN manually › choose a server › WireGuard › Download config. NordVPN recommends servers with its “Verified” badge. New in October 2026.

Audits: Deloitte no-logs assurance, the sixth time (2025). NordVPN, Panama; parent company Nord Security, the Netherlands. No free plan.

Windscribe

Config: My Account › Config Generator › WireGuard. Only on paid plans; the free plan has no config files.

Audits: Packetlabs, server software (2024). Windscribe Limited, Canada.

hide.me

Config: Member Area › WireGuard › Generate keys › Download WireGuard config file. Its guide asks for “a hide.me account with WireGuard configuration access”. We couldn't confirm which plans include that, or whether a downloaded config keeps working over time.

Audits: Securitum no-logs audit (2024). eVenture Ltd., Malaysia.

PrivadoVPN

Config: Dashboard › Manual Configuration › WireGuard. Premium only. Downloading more than 10 configs switches off the oldest ones.

No published audit found. Based in Switzerland, by its own description.

OVPN

Config: Dashboard › WireGuard, as a file or a QR code. Configs include IPv6.

No published audit found. OVPN Inc., USA. No free plan.

If a config has no IPv6 address, Kuuko blocks IPv6 while the VPN is connected, so no IPv6 traffic goes beside the tunnel. Services that only work over IPv6 won't load then.

VPNs that don't work with Kuuko

These give you no WireGuard config file to download:

  • Private Internet Access: outside its own apps, WireGuard runs only through its scripts for Linux.
  • ExpressVPN: WireGuard only in its own apps, with short-lived credentials.
  • CyberGhost: its help pages say manual WireGuard setup isn't supported; its manual guides use OpenVPN.

Choosing a VPN

  • Your VPN provider can see where your traffic goes. Choose one you trust, ideally with an independent audit of its no-logs promise.
  • A free VPN has to be paid for somehow. Proton says its free plan “is supported by paying users”. Be careful with free VPNs that don't say how they pay for themselves.
  • Your VPN provider can't read your DNS questions. They go encrypted to Kuuko inside the tunnel, so your block lists keep working. Your provider can still see which servers you connect to.

Checked on 28 October 2026, on the providers' own pages where we could open them. Plans and features change: check the provider's page before you pay. We get nothing for listing a provider: no affiliate links, no deals. Something out of date? Tell us.