Surfshark VPN protocols: the best fit for your privacy

Choose how you connect. Stay secure with:

WireGuard: fast, modern, and now with post-quantum protection

IKEv2: rock-solid on unstable networks

OpenVPN: trusted and customizable

Get Surfshark

30-day money-back guarantee

What are VPN protocols?

VPN (Virtual Private Network) protocols are sets of rules that define how a VPN works. VPN protocols do all the hidden work: authorization, authentication, encryption, traffic capturing, and transportation. All of this so you can browse websites, use social media, or do just about anything else online in privacy.

Surfshark VPN supports these protocols:

A VPN protocol is a set of rules indicating the steps in creating and maintaining a VPN connection, including encryption. Surfshark offers only the most reliable protocols:

WireGuard

WireGuard is a modern VPN protocol with just 4,000 lines of code — meaning it’s lean, easy to manage, and less prone to bugs and security issues. Its lightweight design helps deliver super-fast connections without skimping on safety. Plus, Surfshark’s WireGuard now includes post-quantum protection by default, giving you an extra layer of security that’s ready for whatever comes next. Available on macOS, Android and Linux.

IKEv2

IKEv2 (Internet Key Exchange version 2) — a fast and secure protocol that’s undergone many improvements. This protocol provides some of the safest connections and is popular among mobile users thanks to its speed and on-demand network switching. While no longer available in the Surfshark Windows app, IKEv2 can still be set up manually using Windows’ built-in VPN settings.

OpenVPN

OpenVPN is a well-established VPN protocol recognized for its extensive configurability and reliable performance. Although a little bulkier than WireGuard and IKEv2, it’s the only one that many routers support by default.

How to change protocols in the Surfshark app

From the sidebar menu, open Settings
Head to VPN Settings
Navigate to Protocol
Select your protocol, or choose Automatic to let Surfshark pick the best option for you

How to set up a manual WireGuard connection with Surfshark

In need of a custom solution? You can manually configure Surfshark WireGuard on:

To secure your whole network, you can also set up Surfshark VPN on your router. Here’s how to go about it:

How to set up a manual WireGuard connection with Surfshark

Surfshark WireGuard: fast, secure, and post-quantum

The internet evolves quickly, and your protection should keep pace. With Surfshark’s WireGuard protection, you get:

Uncompromised speed

No more choosing between security and performance. WireGuard’s streamlined design means you can stream, video call, or game online with a VPN — all with minimal lag.

Minimal risk, maximum privacy

WireGuard’s open-source, lightweight design makes it easier to audit and harder to exploit — giving you stronger, more transparent protection.

Post-quantum protection

Future quantum computers could eventually break traditional encryption. That’s why Surfshark Wireguard has post-quantum protection on macOS, Android, and Linux, keeping you protected as technology evolves.

One-click setup

Using WireGuard is as simple as it gets. Just select it in the Surfshark app settings, click connect, and enjoy fast, quantum protection.

FAQ

What is the fastest VPN protocol on Surfshark?

WireGuard is the fastest VPN protocol available on Surfshark. Its lightweight design helps you enjoy smooth streaming, gaming, and browsing with minimal speed drops.

What is the safest VPN protocol on Surfshark?

WireGuard is Surfshark’s safest protocol, offering strong modern encryption along with post-quantum protection. It’s built to keep your connection secure today and ready for future threats.

Which protocol should I use for Surfshark VPN?

For most users, WireGuard is the best balance of speed, security, and reliability. However, you can always switch protocols in the app settings if you have specific needs or preferences.

What is the default protocol for Surfshark?

Surfshark automatically selects the best VPN protocol for you based on your network conditions. In many cases, it chooses WireGuard because of its excellent performance and security.

What is post-quantum encryption?

Post-quantum encryption is a security technology designed to protect your data against future threats from powerful quantum computers. Surfshark’s WireGuard protocol already includes post-quantum protection built into the apps across all platforms. However, post-quantum protection currently does not apply to manual WireGuard configurations.

Should I use IKEv2 or WireGuard?

WireGuard is designed for high performance with a streamlined codebase and modern encryption, making it an efficient and secure choice for most Surfshark users. That said, IKEv2 still offers a reliable and stable VPN connection. Note that the Surfshark Windows app no longer supports IKEv2, but it can still be set up manually using Windows’ built-in VPN settings.

Surfshark VPN protocols: the best fit for your privacy

What are VPN protocols?