Algo VPN
Algo VPN is a set of Ansible scripts for deploying a personal WireGuard and IPsec VPN.
What Algo VPN is
Algo VPN is a set of Ansible scripts for deploying a personal WireGuard and IPsec VPN. It can be set up with supported cloud providers or, for advanced users, on their own Ubuntu server. Supported providers include DigitalOcean, Amazon Lightsail, Amazon EC2, Vultr, Microsoft Azure, Google Compute Engine, Scaleway, OpenStack, CloudStack, Hetzner Cloud, and Linode. Algo supports IKEv2 and WireGuard, and generates WireGuard configuration files and QR codes for iOS, macOS, Android, and Windows, as well as Apple profiles for IPsec. After deployment, helper scripts can add or remove VPN users. Optional functions include ad blocking through a local DNS resolver and limited SSH users for tunneling. The project says logs are rotated and deleted after seven days, but cloud providers may see network traffic metadata and an ISP can see a connection to the VPN server. Algo is free and open source under the AGPLv3; cloud infrastructure costs are separate. It does not claim to provide anonymity or censorship avoidance.
Good
- Supports WireGuard and IKEv2.
- Generates client configuration files, QR codes, and Apple profiles.
- Helper scripts manage VPN users.
- Optional local DNS ad blocking is available.
- Logs are rotated and deleted after seven days.
Watch out
- Cloud infrastructure costs are separate.
- Cloud providers may see network traffic metadata.
- It does not provide anonymity or censorship avoidance.
- The local installation guide warns there is no uninstall option.
Who it suits
Algo suits advanced users who want to deploy and manage a personal VPN on a cloud provider or their own Ubuntu server. It may suit administrators who need to add or remove users after deployment.
Verdict
Algo provides scripts for setting up a personal VPN with WireGuard or IPsec, with client setup files and basic user-management helpers. It is a fit for people prepared to manage deployment and account for the stated privacy and installation limits.
Plans and prices
From Algo VPN's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Algo VPN | Free | Self-hosted VPN setup scripts · cloud infrastructure costs are separate |
The facts
Each one read from Algo VPN's own pages, with the date it was checked.
What it does
- Access model
- vpnchecked 22 Sep 2026
- Admin control level
- basicchecked 22 Sep 2026
- Audit logs
- Yeschecked 22 Sep 2026
- Client setup
- Algo generates WireGuard configuration files and QR codes, plus Apple profiles for IPsec setup.checked 8 Oct 2026
- Cloud providers
- The README lists DigitalOcean, Amazon Lightsail, Amazon EC2, Vultr, Microsoft Azure, Google Compute Engine, Scaleway, OpenStack, CloudStack, Hetzner Cloud, and Linode as deployment options.checked 8 Oct 2026
- Deployment caution
- The local installation guide warns that Algo overwrites firewall rules and has no uninstall option, so it is designed for a dedicated VPN server.checked 8 Oct 2026
- License
- Algo is distributed under the AGPLv3, and the project says closed-source modifications or services may require a license exception.checked 8 Oct 2026
- License and support
- Algo is distributed under the AGPLv3, and the project invites questions through GitHub Discussions and contributions through pull requests.checked 7 Oct 2026
- Limits
- Algo does not claim to provide anonymity or censorship avoidance, and warns that it cannot protect users from named national intelligence agencies.checked 8 Oct 2026
- Logging
- The README says logs rotate automatically and are deleted after seven days, while noting that the cloud provider can still see network traffic metadata.checked 8 Oct 2026
- Optional features
- Optional features include a local DNS resolver for ad blocking and limited SSH accounts for tunneling traffic.checked 8 Oct 2026
- Privacy
- The project says it minimizes logging by default and automatically rotates and deletes logs after seven days.checked 7 Oct 2026
- Privacy limitation
- The project notes that cloud providers can see and log network traffic metadata, and that an ISP can see a user connecting to a VPN server.checked 7 Oct 2026
- Protocol limits
- Algo does not support L2TP, IKEv1, or RSA, and does not claim to provide anonymity or censorship avoidance.checked 7 Oct 2026
- Protocols
- It supports IKEv2 with AES-GCM, SHA2, and P-256, and supports WireGuard on iOS, macOS, Linux, Android, and Windows 11.checked 8 Oct 2026
- Purpose
- Algo is a set of Ansible scripts for setting up a personal WireGuard and IPsec VPN in the cloud.checked 7 Oct 2026
- Security defaults
- The project says it uses secure defaults and does not support legacy protocols or cipher suites such as L2TP, IKEv1, or RSA.checked 8 Oct 2026
- Self-hosting
- Advanced users can deploy Algo on their own Ubuntu server, and local installation supports Ubuntu 22.04 LTS only.checked 8 Oct 2026
- Support
- The README directs users with further questions to GitHub Discussions and accepts code contributions through pull requests.checked 8 Oct 2026
Where it runs
- Device setup
- Algo generates WireGuard configuration files and QR codes for iOS, macOS, Android, and Windows clients, and Apple profiles for IPsec setup.checked 7 Oct 2026
- Supported platforms
- Ubuntu 22.04 LTS server; iOS,macOS,Android,Windows,Linux,and OpenWrt clientschecked 22 Sep 2026
The company
- Founded
- 2016checked 28 Sep 2026
- Headquarters
- New York, New York, United Stateschecked 28 Sep 2026
- Maker
- Trail of Bits describes Algo VPN as one of its public-good products and says the company was founded in 2012.checked 7 Oct 2026
The full review of Algo VPN
Overview
Algo VPN is a set of Ansible scripts for deploying a personal WireGuard or IPsec VPN in the cloud or on a dedicated Ubuntu server. It suits technically confident users who want control over their own VPN setup and can manage the server; it is not a turnkey privacy service or a tool for anonymity.
Its strengths are focused protocols, generated client setup files, and no software charge. The trade-off is substantial: users must arrange and pay for cloud infrastructure separately, and deployment can change firewall rules without offering an uninstall option.
Key features
Algo can deploy to providers including DigitalOcean, Amazon Lightsail and EC2, Microsoft Azure, Google Compute Engine, Vultr, Hetzner Cloud, Linode, Scaleway, OpenStack, and CloudStack. Advanced users can instead install it on their own Ubuntu server. That range gives administrators flexibility, but it does not remove the need to choose, provision, and maintain a server.
The supported VPN protocols are IKEv2 and WireGuard, using what the project describes as strong cryptography and secure defaults. Algo avoids legacy options such as L2TP, IKEv1, and RSA. It generates WireGuard configuration files and QR codes for supported clients, and Apple profiles for IPsec setup. Helper scripts can add or remove VPN users after deployment; optional features include ad blocking through a local DNS resolver and limited SSH users for tunneling.
Algo says it minimizes logging by default and rotates and deletes logs after seven days. That is useful housekeeping, not a promise of invisibility: cloud providers can see and log network traffic metadata, and an ISP can see a connection to the VPN server. Algo also does not claim to provide anonymity or censorship avoidance, and warns it cannot protect users from named national intelligence agencies.
Installation deserves care. The local guide warns that Algo overwrites firewall rules and has no uninstall option, making a dedicated VPN server the sensible choice. The project is licensed under AGPLv3; it notes that closed-source modifications or services may require a license exception. Questions go through GitHub Discussions, and contributions are accepted through pull requests.
Pricing
Algo VPN — free. The plan provides the self-hosted VPN setup scripts. There is no free trial because the software is free, but cloud infrastructure costs are separate, so the software's zero price does not mean a deployed VPN has no running costs. This fits users comfortable managing a server and its expenses; it is a poor fit for anyone seeking a hosted VPN subscription or a managed service.
Platforms
Algo targets Ubuntu 22.04 LTS servers. Its client support covers iOS, macOS, Android, Windows, Linux, and OpenWrt. Windows 11 and Android are specifically supported for WireGuard. Device support therefore spans common desktop and mobile systems, but users still need to handle deployment and client configuration.
Who it's for
Choose Algo if you want to run a personal VPN on infrastructure you control, understand server administration, and value straightforward WireGuard or IKEv2 setup over a commercial provider's managed experience. Look elsewhere if you need anonymity, censorship circumvention, legacy protocols, or an installation that can be cleanly removed from a server.
Pros and cons
- Pro: No software charge. The scripts are free and open source under AGPLv3, though hosting is extra.
- Pro: Useful deployment and client tooling. Multiple cloud targets, self-hosting, generated configurations, QR codes, and Apple profiles reduce some setup work.
- Pro: Practical user helpers. Administrators can add or remove users after deployment, with optional local DNS ad blocking and limited SSH tunneling.
- Con: Not a managed VPN. Users must deploy and operate their own server and cover infrastructure costs.
- Con: Installation can be hard to reverse. Firewall rules are overwritten and there is no uninstall option, so a dedicated server is advisable.
- Con: Privacy and protocol boundaries are explicit. Providers may observe traffic metadata; Algo does not promise anonymity or censorship avoidance and omits legacy protocols.
Alternatives
For a different kind of software, browse the Business VPN Software category. Readers comparing unrelated free tools may also want the Code Clone Detection Tools directory.
The alternatives below are code-clone detection tools, not VPN replacements. Duplo is free GPL-licensed software with prebuilt binaries for Alpine Linux, macOS, and Windows. PMD is a free BSD-style downloadable static code analyzer. Simian Similarity Analyzer is free and open source under Apache License 2.0. CloneWorks is free under terms requiring acknowledgement and free redistribution and derivatives. dcd is free AGPL-3.0 software, with a separate priority-support plan at custom pricing. jscpd is a free option. NiCad is free MIT-licensed software that requires OpenTxl 11 or later. CopyPaste is free and open source with no premium tiers, subscriptions, or paywalls.
Verdict
Algo VPN is a strong fit for technically capable users who want free scripts to build and administer a personal WireGuard or IPsec VPN on their own infrastructure. Its generated client setup and focused protocol support make it more purposeful than a from-scratch deployment, but server costs, operational responsibility, limited privacy claims, and the lack of an uninstall path are real constraints. Choose it for control and self-hosting; choose another approach if you need a managed VPN, anonymity, or easy reversibility.
Getting started
- Visit the Algo VPN project at https://github.com/trailofbits/algo.
- Choose a supported cloud provider or prepare an Ubuntu server for self-hosting.
- Deploy the scripts on an Ubuntu 22.04 LTS server.
- Use the generated WireGuard configuration files or QR codes, or Apple profiles for IPsec setup.
- Add or remove VPN users with the helper scripts after deployment.
Limits worth knowing
The scripts are free, but cloud infrastructure costs are separate. Algo does not support L2TP, IKEv1, or RSA, and it does not claim to provide anonymity or censorship avoidance.
Questions
Does Algo VPN cost anything?
Algo's listed price is free. Cloud infrastructure costs are separate.
Is Algo VPN open source?
Yes. It is distributed under the AGPLv3. The project says closed-source modifications or services may require a license exception.
Which VPN protocols does Algo support?
It supports IKEv2 and WireGuard. It does not support L2TP, IKEv1, or RSA.
Where can I deploy Algo?
It supports deployment to DigitalOcean, Amazon Lightsail, Amazon EC2, Vultr, Microsoft Azure, Google Compute Engine, Scaleway, OpenStack, CloudStack, Hetzner Cloud, and Linode. Advanced users can deploy it to their own Ubuntu server.
Which clients can use the generated setup files?
Algo generates WireGuard configuration files and QR codes for iOS, macOS, Android, and Windows, plus Apple profiles for IPsec setup.
Does Algo provide anonymity?
No. Algo does not claim to provide anonymity or censorship avoidance. Cloud providers may see network traffic metadata, and an ISP can see a connection to a VPN server.
Alternatives to Algo VPN
- 1

hide.me
Free planOpen sourceAndroidiOSWebExtension8.7Free plan - 2

Tailscale
Free planOpen sourceAndroidiOSWebAPI8.7From $1 a month - 3

OPNsense
Free planOpen sourceAndroidiOSWebAPI8.6Free plan - 4

Windscribe
Free planOpen sourceAndroidiOSWebExtension8.6From $3 a month - 5
MikroTik RouterOS
Free planAndroidiOSWebAPI8.2Free plan - 6

NetBird
Free planAndroidiOSLinuxmacOS8.2From €6 a month
