Security at dFly.
dFly is built around one principle: your traffic is yours. Here is how we protect it.
No activity logs
We do not log your browsing activity. Nothing records the sites you visit, the DNS queries you make, or the destinations you connect to. We keep no connection history either: each device shows only its most recent IP address, so you can recognise and remove your own devices, and every new connection replaces the last.
VLESS-compatible private connections
dFly uses VLESS over TCP, gRPC, and XHTTP, and also supports Hysteria. It works with VLESS clients across major platforms.
Private connection
Your connection is encrypted between your device and dFly. Setup is available through QR codes, setup links, and compatible clients.
Infrastructure
dFly runs on dedicated hardware, not shared cloud VMs. Your traffic never touches a hypervisor controlled by a third party.
Responsible disclosure
Found a security issue? Email security@dfly.app and we will look into it. Please give us the details you can — what you found, and how to reproduce it.