How the key is secured

Every city runs VLESS over Reality. The connection borrows the handshake of a real website, so a filter inspecting it sees an ordinary HTTPS session rather than a VPN tunnel. That is the whole trick, and it is why the key lights up every city, all night.

What it protects

• Traffic between your device and the city is encrypted with TLS 1.3
• Your operator and any Wi-Fi owner see only an HTTPS session to one address
• DNS queries go through the tunnel, not to the local resolver
• Sites you open see the city's address, not yours

What it does not protect

• Accounts you log into still know who you are
• A compromised device is compromised with or without a key
• Nobody can promise total anonymity, and we do not

Why there is no app

An app of ours would be one more thing to trust and one more thing for a store to remove. The clients that take the key, v2rayNG, Hiddify, Streisand and the rest, are open source and maintained by people who are not us. You can read their code; you cannot read an app that was pulled last month.