Military-Grade Encryption

AES (Advanced Encryption Standard) with a 256-bit key is the cipher chosen by the US government for TOP SECRET data. Brute-forcing a 256-bit key with classical computers would require more energy than the visible universe contains.

Both are AEAD ciphers — they encrypt and authenticate data in one step. AES-256-GCM is hardware-accelerated on modern CPUs and used by WireGuard / OpenVPN. ChaCha20-Poly1305 runs faster on mobile chips without dedicated AES instructions and is what WireGuard defaults to on ARM.

Every session negotiates a unique temporary key via Curve25519 ECDH. Even if our long-term private key were ever compromised, previously recorded sessions would stay unreadable — there's no master key to decrypt history with.

Our protocol layer tracks the IETF's post-quantum TLS work and will roll out hybrid Kyber key-exchange once stable reference implementations ship. Today's AES-256 data itself remains secure against Grover-algorithm attacks (~128-bit effective strength) for decades.

Yes. Our crypto stack uses upstream WireGuard and OpenSSL with no custom primitives. The MegaV client and server glue code is audited annually by a third-party firm; the latest report is linked on the Trust Centre.

On modern hardware — almost no. AES-NI acceleration keeps the overhead under 5% on any CPU made in the last decade. ChaCha20 on mobile is even faster. In practice, the network round-trip to the VPN server costs far more than the encryption itself.