Surfshark Release Notes

Your encrypted data could be stolen today — and decrypted years from now. That’s the threat quantum computers pose. To keep our users protected, Surfshark has made its implementation of WireGuard, one of the VPN protocols, fully post-quantum secure. The updated WireGuard protocol is now available on iOS and macOS, with more platforms coming soon.

What are the quantum threats?

Quantum computers could enable two types of attacks on your data:

• Steal now, decrypt later — attackers collect your encrypted data today and wait until quantum computers can read it in the future.
• Real-time attacks — once quantum computers arrive, they could intercept your connection and decrypt your data on the spot.

This is possible because quantum computers excel at solving math problems that keep today’s encryption safe. As this technology improves, these attacks become realistic concerns.

Where the vulnerability actually is

When you connect to a VPN, three things happen:

1. Authentication — your device verifies the server is genuine using digital certificates.
2. Key exchange — your device and the server agree on a shared encryption key. It’s done using complex math problems, like factoring large numbers or solving discrete logarithms.
3. Encryption — using the agreed key from earlier, a secure tunnel is created to encrypt and send your data.

Modern encryption, like AES-256, is already safe against quantum computers because the keys are too long to guess. The real weak spot is how that encryption key is created and shared.

If the key exchange isn’t secure against quantum computers, they could solve the math problems used to generate the key and decrypt data stolen today. If authentication isn’t protected, quantum computers could impersonate a VPN server and intercept your security keys in real time.

To solve both problems, you need to secure key exchange and authentication together.

What we did

A while back, we implemented post-quantum secure key exchange for our version of the WireGuard protocol. We have now added post-quantum-secure authentication, too. This was done by applying two post-quantum cryptography standards:

• ML-KEM — secures the key exchange process;
• ML-DSA — secures authentication.

The fully post-quantum-safe WireGuard is available on macOS and iOS, with additional platforms planned for the future.

How ML-KEM and ML-DSA work

Both standards are built on lattice-based cryptography — a complex, multi-dimensional grid filled with intentional noise.

ML-KEM handles key exchange. It generates a shared key from the noisy grid. Both your device and the server can work out the same key, but from the outside, extracting it means solving the lattice. Quantum computers have no shortcut for that.

ML-DSA handles authentication. The server uses its private key and the same noisy grid to create a digital signature. Then, it sends its public certificate so your device can verify the signature is real. Because of lattice-based cryptography, even quantum computers can’t forge that certificate.

True post-quantum security requires both standards working together — and that’s exactly what Surfshark now offers with WireGuard.

WireGuard and Dausos: both protected

WireGuard with full post-quantum security is available now. The same dual-standard approach was used when we built Dausos, our custom VPN protocol. Dausos is currently available on macOS and offers the same level of quantum-resistant protection.

What this means for you

With Surfshark’s post-quantum-secure WireGuard, you’re safe against “steal now, decrypt later” and future quantum attacks. Your data stays private today and years from now.

You don’t have to wait for quantum computers to become widely accessible to secure yourself against them. The protection is here now.

If you want to learn more about post-quantum security, watch this video:

We’ve redesigned the locations tab on our iOS app and browser extension to give you faster access to the servers you need, with a cleaner interface that makes navigation simpler.

If you’ve opened the app recently, you might have noticed things look a bit different. Here’s what changed and why it matters to you.

What's new in the iOS app?

We split the locations tab into two distinct views to help you find servers faster:

Recommended view brings together everything you use most:

• Your most popular country options
• Recently used servers (so you don’t have to search twice)
• Dedicated IP locations (if you have one set up)

The advanced view gives you access to specialized features:

• Static IP servers for consistent connections
• Multi Hop options for an extra layer of protection

Instead of scrolling through one long list, you can now jump straight to what you need. Looking for your usual US server? It’s waiting in Recommended. Need Multi Hop for sensitive browsing? Head to Advanced.

What's new in the browser extension?

The browser extension got a complete visual refresh. When you open it now, the home view shows you exactly how many ads and trackers we’ve blocked on the site you’re visiting — a quick reminder that your protection is working in the background.

We also consolidated all your protection tools into one place:

• Ad blocker
• Cookie pop-up blocker
• Malicious site warnings
• Data leak alerts
• Email scam checker

And yes, switching between VPN servers is now smoother. No more hunting through menus — just quick access when you need to change locations.

Why we made these changes

As Surfshark has grown, so have the features we offer. That’s great for protection, but it also meant our interface was getting crowded.

This redesign is about removing friction. Whether you’re connecting to a VPN for the first time today or the hundredth, we want the experience to feel effortless — like it’s working in the background, giving you that calm control without demanding your attention.

How to use the new locations tab on iOS

Open the Surfshark app and tap the Locations tab at the bottom. You’ll land in the Recommended view by default, where your most-used servers are ready to go.

Want to explore more options? Tap Advanced at the top to access Static IP and Multi Hop features. Switch back to Recommended anytime with one tap.

Start exploring the new design

If you haven’t updated your app yet, head to the App Store or your browser’s extension store to get the latest version. Once you’re in, take a moment to explore the new layout — we think you’ll find it easier to navigate.

We’ve updated our web content blocker feature for Windows users. If you’ve been blocking entire website categories to keep harmful content off your network, you now have more control over what gets through.

What is web content blocker?

Web content blocker is a feature that automatically blocks access to website categories you don’t want on your device.

You can block seven categories:

• Pornography and sexually explicit content;
• Websites promoting or selling illegal drugs;
• Vaping, tobacco, and related equipment sites;
• Gambling websites;
• Websites promoting or selling weapons;
• Racist, extremist, or offensive language;
• Websites hosting malicious downloads.

What's new: the allowed websites list

The update adds an allowed websites list for Windows users. This means you can block an entire category — let’s say gambling sites — but still have access to a specific website within that category for work or research. You add that site to your allowed list, and it becomes accessible again while the rest of the category stays blocked.

This means you can keep broad filters in place but make targeted exceptions for websites you trust or need.

Why this matters

Category-based blocking works well for filtering harmful or unwanted content, but it’s not always precise. Legitimate websites sometimes fall into broader categories, and you shouldn’t have to disable an entire filter just to access one trusted site.

The allowed list gives you both protection and flexibility. You decide what stays blocked and what gets through.

How to use the allowed websites list

If you’re using web content blocker on Windows, all you have to do is:

1. Open your Surfshark app.
2. Click the Settings (cogwheel icon) in the left navigation menu.
3. Navigate to Web content blocker.
4. Scroll down and click on Allowed websites.
5. Press Add.
6. Add specific website URLs to the allowed list.

The sites you allow will remain accessible while the rest of the category stays filtered. You can toggle web content blocker on or off at any time.

Block harmful content without losing access to what you need

Web content blocker with an allowed websites list gives you control over what’s accessible on your network. You can protect devices from harmful content while still reaching the sites that matter.

When Surfshark started, our goal was to one day contribute to the digital world’s wellbeing in more ways than just a VPN. And that day is today. We are happy to announce that we are officially expanding our cybersecurity reach beyond online security and privacy to secure people’s devices.

Surfshark One: comprehensive security in a single account

Surfshark One is a new, rounded cybersecurity bundle that will come as an add-on to Surfshark VPN. It contains:

• Surfshark Alert. A smart tool that tracks data leaks worldwide and informs you if any of your personal information appears in databases of publicly leaked data.

• Surfshark Antivirus. A new antivirus tool that protects your devices from malicious files, documents, and apps.

Introducing: Surfshark Antivirus

Surfshark Antivirus is the newest addition to the Surfshark suite. Our goal with it is to reduce your cybersecurity risks and worries. This is why we decided to expand into device protection.

Surfshark Antivirus is an antivirus tool for Windows and Android platforms (coming soon on macOS). It will protect your devices from malware, viruses, and privacy-intrusive apps that do things without your permission (i.e., take screenshots or access information without permission).

The best thing about Antivirus is that it works in real-time. This means that your devices are protected when you’re opening files or using and installing apps.

Surfshark Antivirus also allows you to exclude files and folders from scans and offers Real-time Protection (this feature is currently live on Android and is coming soon to Windows).

Purchase and pricing

Surfshark One will come as a bundle that you can add on top of your VPN subscription. It’ll be priced monthly (i.e., an additional $1.49 per month to your VPN subscription) depending on your currency.

This means that you can purchase Surfshark One regardless of when you got your VPN subscription!

P.S. If you already have Alert, you can upgrade to Surfshark One (add Antivirus) for a third of the bundle’s price (i.e., 0.49$ per month).

We all love it when an app delivers more than we bargained for. So you’ll be glad to hear that Antivirus is a new additional feature integrated into Surfshark application. This means that your protection has gone up a few levels. Read and see what you can expect from it.

Surfshark Antivirus in short

The main purpose of Antivirus is to increase your privacy and security by scanning all the files and folders on the user computer, including executable files, documents, and other file types that may be infected with malware. It is available for all users who purchase Surfshark One and are using Windows or Android devices. Surfshark for Windows is currently available only on Windows 10 and newer OS versions.

The cure for digital viruses

Available on Windows and Android, Surfshark Antivirus uses a proven detection engine that works really fast and has a minimal load on system resources (proven technology, minimal load – hey, it’s just like our VPN!). It is bundled with the Surfshark One package and found on your VPN app like the other features.

The types of malware Antivirus detects include (but are not limited to):

• Trojans
• Backdoors
• Worms
• Macro viruses

The app also uses heuristic detection to look for code similar to one found in viruses. This not only helps infected apps, but also detect polymorphic viruses that evolve all the time. What’s more, Surfshark Antivirus works symbiotically with the Clean Web feature to block malware downloads from the web before they even happen.

How to use Antivirus

All Surfshark products are created with ease of use in mind. Antivirus follows suit. Here’s how you use it.

1. Navigate to the Antivirus tab on your Surfshark app.
2. Choose one of the two scanning options:
   • Full scan: scans all files on all drives
   • Quick scan: scans the Documents, Downloads, and Desktop folders.
3. Pro-tip: You may exclude some folders from scanning by using the Exclude from scanning feature – useful if you’re, say, a developer who wants to exempt temporary build directories.
4. Go back to your usual business while Antivirus carries out the scan of your PC.
5. If the scan detects any malware, you will be informed. You can then choose to resolve the issues (by deleting the files).
6. Done! Your device should be clean.

The best way to use Surfshark Antivirus is to enable automatic daily scheduled scans. This can be done via the Scheduled scan option.

Note: during the first release – app version 3.0 – the real-time scanning feature for Windows will be disabled. It’s a necessary thing and the feature will be enabled as soon as Surfshark completes the strict certification process as required by Microsoft.

Protect more devices

While Surfshark VPN allows for protection for unlimited devices, Surfshark Antivirus will cover five.

You’ll be able to check which devices are enjoying Surfshark protection by accessing your Surfshark account.

Unleash the full power of Surfshark

Surfshark Antivirus is a great increase in protection that Surfshark One offers. While a combination of existing VPN features empowers your defenses from incoming threats, an antivirus defeats the ones that do get through. Don’t leave a gap in your armor. Get Surfshark Antivirus.

Patches can be the most humdrum of software updates. But adding entirely new features? Now that’s something – and when you consider the new Surfshark Antivirus for Android, that’s a lot of something! Read on to see what we have in store for you.

In short: Surfshark Antivirus for Android

Surfshark Antivirus is a new feature available to Surfshark One subscribers on Windows and Android devices. This feature will be seamlessly accessible from the Surfshark app and protect your phones and tablets from trojans and other malware.

Protecting the Android platform

Android devices do not get infected with the traditional self-replicating viruses like PCs, but they are susceptible to other malware types. This is a cause for concern, for such malware is designed to access and control your device without your permission.

Therefore, the main task for Surfshark Antivirus — or any antivirus for Android phones — is to scan both installed apps and installation files (APKs) for any threats.

Defending against a variety of threats

Surfshark Antivirus uses a proven detection engine. It works really fast, using a tiny piece of system resources. Despite being so sleek and speedy, it can detect malware types like – but not limited to – these:

• Adware/Spyware – meant to display disruptive advertising or to transmit user-specific data to third parties without the user’s consent.
• Possible Fake Software (PFS) – also known as “scareware,” it lies about your device being infected by viruses to get you to install it but offers no useful functionality. In fact, PFS may be a vector for malware!
• Potentially Unwanted Applications (PUA) – they clutter your device with ads, hijack your browser, slow down your device, or collect data on what you click.
• Security/Privacy Risks (SPR) – this type of malware may affect the security of your system by triggering activities you do not want or violating your privacy.
• Applications from uncertain origin – apps from unknown developers, may be – either intentionally or unintentionally – hazardous to your digital wellbeing.

What’s more, Surfshark Antivirus works together with Surfshark VPN Clean Web feature to block some malware downloads from happening in the first place.

How to use Antivirus

All Surfshark products are created with an eye for usability. That’s why Antivirus is so easy to use!

1. Navigate to the Antivirus tab on your Surfshark app.
2. Click the Scan button to scan your device now.
3. Use Scheduled scan to ensure constant and daily scans for viruses.
4. Make sure that Real-time protection is toggled on as it will check all newly installed apps.
5. Use Storage scan to scan the APKs that have been downloaded but not yet scanned, even if they’re on the SD card.
6. In case a scan detects malware, you will be prompted to resolve the issue by uninstalling the malware app or deleting its installation file.

Now, a word about Scheduled scans. Software and malware are fields that are constantly evolving. So a piece of software that passed the real-time scan yesterday may have been found out to actually be malware today as new tests are conducted and evidence is gathered. A real-time scan can’t pick up on malicious apps that have already been installed, but a scheduled scan can do that.

Protect a (nuclear) family of devices

Surfshark Antivirus will provide protection on up to 5 devices on a single Surfshark account. You can always check which devices are currently protected by accessing your Surfshark profile.

Mobile protection for mobile devices

Surfshark Antivirus is an excellent tool for those seeking protection that works in the background. While you can’t relax completely, having Antivirus keep watch on your device will make you feel much safer. So do it now and get Surfshark Antivirus as part of the Surfshark One package!

We’ve built an industry-first self-healing server infrastructure that ensures even better VPN (Virtual Private Network) connection stability. This means that your VPN connection remains uninterrupted, even in the event of server maintenance, without requiring any manual intervention. Want to know more? Read along!

What is Surfshark Everlink?

Everlink is a patented (US11190491B1, US20240080302A1) VPN server infrastructure that makes your connection more stable and reliable. In the event of a server failure or maintenance, Everlink acts as a self-healing mechanism and revives your connection by reconfiguring the VPN tunnel without disconnecting you from the VPN service.

This means you get a smoother, more reliable experience — almost like having an infinite connection. And because you remain connected to the VPN the whole time, your data stays protected, and your IP (Internet Protocol) address stays hidden.

In addition to that, Surfshark Everlink servers are globally distributed and accessible via anycast IP addresses, ensuring that the Everlink service remains consistently available.

How does Everlink work?

Traditional VPNs establish a static tunnel between the client and a single server. However, if the VPN server you’re connected to has a problem (goes down or needs maintenance), your connection might drop, and you’d have to reconnect manually. That’s not ideal, especially when dealing with sensitive information or using public Wi-Fi.

Our new patented Surfshark Everlink technology changes that. When you connect to our VPN, you’re also connected to Everlink — an innovative server backup system.

If the server you’re using has an issue, Everlink instantly and seamlessly reconfigures the VPN connection to another working server.

You don’t get disconnected, and your VPN protection stays intact. It’s all automatic, and you won’t even notice it happening.

Why is Everlink important?

VPN reliability has traditionally been reactive — relying on kill switches or manual reconnections to mitigate server failures. Everlink represents a proactive, infrastructure-level solution that eliminates the need for disconnection altogether. Everlink ensures you get:

• Fewer VPN connection drops;
• Better protection for your IP address;
• No interruptions during server maintenance.

How is Everlink different from a kill switch?

The difference between a kill switch and Everlink comes down to how they handle VPN interruptions. ​​A kill switch is a reactive security measure that cuts your internet connection the moment your VPN drops. While effective, it disrupts service and requires you to reconnect manually.

Everlink, by contrast, is a proactive, self-healing system. Instead of terminating the connection, it revives it by reconfiguring the VPN tunnel without disconnecting and reconnecting you from the VPN service. That way, you maintain connectivity and security without any intervention. It’s a fundamentally different approach to VPN reliability.

How do you use Everlink?

Everlink is available by default with the WireGuard protocol on all platforms, including iOS, macOS, Windows, Android, and Linux. There’s no extra cost for existing Surfshark VPN users. Here’s how to check your selected connection protocol on major platforms:

1. Open the Surfshark app;
2. Select Settings;
3. Go to VPN settings;
4. Once there, select Protocol;
5. See if you’re using the WireGuard or Automatic options.

We hope you’ll enjoy a more reliable VPN connection

We built Everlink because we know how important it is to stay connected and protected — whether you’re a student, journalist, or just a casual net browser.

You won’t see this innovation — and that’s the point. With Everlink, the infrastructure works silently in the background, delivering a seamless experience powered by cutting-edge, patented technology.

It’s spring already, which means — a fresh batch of Surfshark news! From a public DNS (Domain Name System) server launch to new app updates, we have a lot to share. Let’s dive in!

Our no-tracking policy was verified again

Deloitte, one of the Big Four auditing firms, confirmed that our systems and internal processes align with our privacy policy — we don’t collect or monitor your activity. We are committed to maintaining this transparency and trust and plan to continue these independent checks regularly. For more information, please visit our blog post on no-logs policy verification.

We launched public DNS servers

We just launched a new addition to our online security-boosting tools — public DNS servers! The best part? You don’t need an active Surfshark subscription to use them. It’s a free-for-all service that you can simply configure on your device.

Our privacy-focused DNS service adds a layer of protection and, thanks to our global infrastructure, ensures stable speeds. Visit this page to learn more about our public DNS.

P.S. Remember, DNS service shouldn’t be used instead of a VPN (Virtual Private Network) and doesn’t provide the same security level.

We introduced a new technology — Everlink

Everlink is a patented self-healing VPN infrastructure that keeps you connected during server maintenance, ensuring uninterrupted security.

It’s available on iOS, macOS, Windows, Android, and Linux, and is automatically on when using the WireGuard connection protocol.

We added more dedicated IP locations

We expanded the location list of our dedicated IP by adding seven new locations worldwide! Our new additions include servers in:

• Turkey — Istanbul;
• Poland — Warsaw;
• US — Las Vegas;
• US — Denver;
• US — New York;
• Brazil — Sao Paulo;
• Singapore — Singapore.

With these locations onboard, we now offer 20 options to choose from. Want to know them all? Check out this blog post about our dedicated IP update.

Our Antivirus scans external devices

Our Antivirus also got boosted with a new feature — external storage scans. This feature is enabled by default and protects all your USB and other external storage drives.

You can turn off the feature in our app’s Antivirus tab to save time and device resources using trusted external media.

New quick connect option for Android

We added a last-used location option to our quick connect feature and a few bug fixes for smoother surfing!

Our macOS app now has Bypasser

Bypasser, our split-tunneling feature, is now available on macOS. It allows you to select websites and apps to bypass the VPN.

In addition to that, the macOS pause VPN function now supports IKEv2 and OpenVPN protocols. We’ve also included several improvements and fixes for enhanced stability.

Use Bypasser on iOS without opening the app

You can now add new websites to Bypasser directly from your browser. Click on Share and then select Add to Bypasser to allow websites to bypass the VPN connection. We also added minor improvements and bug fixes for an even better experience.

Bugfixes for our Windows app

We improved the Windows app startup performance for a faster and smoother experience, focused on performance tweaks, and fixed a few bugs.

Final note: Try our new updates

This quarter was full of new releases, additions, and improvements. So, check them out! Try our new DNS servers, enjoy app uplifts, and for even more updates, don’t miss our latest video:

Understanding internet speed and latency

Whether you’re streaming your favorite shows, engaging in a high-stakes online game, or participating in a crucial video conference, the quality and safety of your internet connection can make or break your experience. Virtual private networks (VPNs) have long been a trusted tool for online security, but at Surfshark, we’re taking it a step further. We’re excited to introduce our latest feature: real-time VPN route optimization for enhanced internet performance.

Before diving into our solution, let’s grasp the basics of internet speed and latency. Internet speed determines how much data you can send or receive per second, while latency measures how quickly data travels between two points. The quicker the response time — the better.

Together, these factors dictate how smoothly your internet connection supports various online activities.

Introducing Surfshark’s route optimization solution

While many VPN providers offer high-speed connections, Surfshark takes it a step further. Our innovative solution continuously evaluates different routes in real-time. By monitoring connection speed across our entire network, we can identify the most efficient paths available at any moment. When network conditions change, our system adjusts the path to ensure your data always travels along the most optimized and stable pathways, resulting in better internet performance and speed.

We have implemented this optimization in our three key locations: Sydney (Australia), Vancouver (Canada), and Seattle (the US), so you can expect better VPN performance — with speed increases up to 70% — when connecting to servers located in these cities.

How does it all work?

Our solution is built on Surfshark Nexus, a unique multi-server routing system that connects users to an entire network of servers rather than a single VPN tunnel, enhancing security and stability.

At the heart of this system are our globally distributed probes, which function like messengers. They check the speeds and latency from their perspective and return this information.

We actively test multiple path combinations using Nexus to identify the most efficient routes. Collecting and analyzing real-time speed data ensures that user traffic is directed along the optimal paths, delivering the best possible performance for everyone.

Why does it matter?

Even with the best internet quality, network performance gets worse the longer the path is. For example, connecting from Miami to Detroit, you will probably maintain fast internet speeds. However, they will most likely drop when connecting from Miami to Sydney.

Our solution optimizes both speed and a consistent, high-quality connection. By actively managing user routes, we enhance connectivity and overall user experience.

For example, due to the layout of global network infrastructure, a data packet traveling from one city to another may be routed through multiple cities, countries, or even across continents and under oceans, if those paths offer less congestion or faster transmission speeds.

By actively optimizing these data paths and leveraging the most efficient routes, we can maximize connection speed. This optimization ensures that users consistently experience the best possible network performance, regardless of their physical location.

How to use it

At the moment, the solution will only be released for macOS devices. If you’re using macOS with the latest Surfshark app, all you have to do is connect to one of three key locations (Sydney, Seattle, or Vancouver), and our system automatically evaluates and selects the best possible routes for your connection.

Our routing solution works automatically when you connect through the Surfshark app, operating behind the scenes to ensure your data travels along the most efficient paths. You can identify the optimized locations by looking for the FastTrack icon next to Sydney, Seattle, and Vancouver in the server list.

Note: If you don’t see the icon, don’t worry. It simply means that at the time of connecting the most optimized route for you is to connect directly, rather than through multiple servers. To be transparent with our users, we only display the FastTrack icon when a user would benefit from connecting via it.