Shut down café Wi-Fi risk
Open networks are convenient for you and for whoever else is listening. A tunnel makes that shared air unreadable.
An encrypted link between your devices and the open web, so your traffic, location and habits stay yours alone.
Get Tidewall
An encrypted tunnel wraps everything leaving your device in a sealed layer and swaps your real IP address for one of ours. The result: your browsing, downloads and logins travel past network operators, trackers and opportunists without being read.
It does more than hide traffic. It restores a plain, unfiltered internet — the same web whether you are on hotel Wi-Fi, a train, or a borrowed laptop.
Want the long version? Read the Tidewall field guide.
Open networks are convenient for you and for whoever else is listening. A tunnel makes that shared air unreadable.
Your subscriptions follow you. Land in another country and the catalogue you already pay for is still there.
Repeat visits quietly nudge fares upward. Arriving from a fresh address puts the honest price back on screen.
Tidewall covers the essentials — auto-connect, kill switch, split routing — and then keeps building. Here is what sits on top.
One Tidewall plan runs on as many devices as you like — laptops, phones, tablets, consoles, even the router in the hallway cupboard.
No banners, no malware hosts, no consent traps. Driftguard clears them before the page paints.

Far fewer puzzle checks with a Reserved IP.
Available as an add-onChain two hops together with Relay Pairing.
Stay unplaceable — your exit address rotates on its own, mid-session.
Memory-only servers in 94 countries mean you can move around the map and still browse like you never left the sofa.
Browse the mapPlain on the surface, unusually engineered underneath. Here is the part most people never have to think about.
Currents is a Tidewall invention. It uses software-defined networking to bind every server into one continuous fabric, so your route is chosen per packet rather than per session. Speed, privacy and stability all move up a notch.
More about Currents
Currents is what makes address rotation, route shuffling and Relay Pairing possible.
Tidewall suits people who actually read the settings screen. Driftguard filtering, kill switch, rotating exit addresses, Relay Pairing and per-app routing all ship in the standard plan — no upsell tiers hiding the good parts.
Prefer to wire it yourself? Manual configuration profiles exist for every protocol we run, including Kelpwire, so a router or a homelab box can join the same fabric.
A deliberately small codebase makes Kelpwire easier to audit and harder to attack. We extended it for faster reconnects, so a dropped signal does not mean a dropped tunnel.
More about KelpwireFast, well-worn and refined over many revisions. Beacon 2 is a favourite on phones thanks to how quickly it hands a live session from mobile data to Wi-Fi and back.
More about Beacon 2Open source, reviewed by independent researchers for two decades, and heavier than the other two — but it is the one older routers and manual setups speak natively.
More about OpenLatticeBest value tunnel of 2026
Larkmead Review, 2026Best for unlimited devices
Coldharbour Index, 2026Privacy product of the year
Signalcrest Awards, 2025
I switched Tidewall on two years ago and never thought about it again.
Comparing Northvane vs. Tidewall, both providers sit comfortably in the top tier. Tidewall costs 41% less per year and puts no cap on simultaneous connections.
Phones, laptops, desktops, tablets, TVs, routers, consoles and browser extensions. For hardware without a native app, we publish manual configuration profiles for every protocol we run, including Kelpwire.