Take the app.
Then check we didn’t lie about it.
Eight platforms, one subscription, five devices at a time. And the part most download pages leave out: how to confirm the file that landed in your downloads folder is the one we actually built.
Download LunoVPN
- PlatformChoose below
Free to download. No account needed to install — a plan is only needed to connect.
Every platform
Windows
Windows 10 and 11 (64-bit)Direct downloadDownload .msi →macOS
macOS 12 or newer, Apple silicon and IntelMac App StoreApp Store →Linux
Debian, Ubuntu, Fedora and Arch packages plus a CLIIn developmentNot yetiPhone & iPad
iOS 15 or newerApp StoreApp Store →Android
Android 8 or newer, phones and tabletsGoogle PlayGoogle Play →Apple TV
tvOS 17 or newerApp StoreApp Store →Android TV & Google TV
Android TV 9 or newer, plus TV boxesGoogle PlayGoogle Play →Routers
OpenWrt, Asus/Merlin, GL.iNet, pfSense, OPNsense, MikroTik, DD-WRTWireGuard configurationOpen router setup →
One subscription covers five devices at a time, in any mix. A router has no app — it takes a WireGuard configuration, and everything behind it travels through that one configuration.
Tell it what you own. Get the order to do it in.
Eight cards above is a menu, not a plan. Press the things in your house and this works out what to fetch, how many store visits it actually takes, whether you are inside the five-device limit, and which devices get a configuration instead of an app — because two of them do.
1 — What is in your house?
2 — Your install plan
You can download and install LunoVPN without an account. The apps are free to download on Windows, macOS, Linux, iOS, Android, Apple TV and Android TV, and a router gets a WireGuard configuration instead of an app. A subscription is only needed to connect, it covers every device you own at no extra cost, and the desktop and mobile clients are open source so the build can be checked against the published source.
What the installer does to your machine
A VPN client needs real privileges. Here is exactly what it takes and what it never asks for.
| Does it… | Detail | |
|---|---|---|
| Install a network extension or TUN device | Yes | Unavoidable — it is how traffic gets routed into the tunnel. On Windows this needs an administrator prompt once. |
| Run at login, if you enable it | Optional | Off by default. Turn it on if you want the kill switch protecting you before your browser starts. |
| Ask for an email address | No | There is no field for one. A 16-digit account number is the whole credential. |
| Bundle telemetry or crash analytics | No | No third-party SDKs in the clients. You can check that claim against the source rather than taking it from this table. |
| Read your files or browsing history | No | It has no reason to and no code for it. The network extension sees packets, not documents. |
| Keep working after you uninstall | No | Removing the app removes the network extension with it. On macOS the VPN profile goes too. |
Two things worth knowing before you install
Linux and routers are not app installs
The Linux client is still in development — we would rather say that than ship something half-finished and call it a beta. Routers never get an app at all; they get a WireGuard configuration, which you generate on the router setup page and paste into the firmware.
The app cannot fix what happens above it
Installing this hides your traffic from your network and your ISP. It does nothing about the accounts you log into, the cookies already in your browser, or your browser fingerprint. If being identified would endanger you, our threat model tool will point you at Tor instead — it is built to do that.