Update - October 22, 2026

Scan with the camera you already have: the QR code on Android TV, Fire TV, Apple TV, the desktop apps and the web now opens OrbVPN straight from your phone's camera. The app shows which device is asking, where the request came from, and lets you approve or decline. Nothing signs in until you tap Approve
A short code too: every QR shows an eight-character code underneath; type it under Profile › Devices › Enter code when scanning is not an option
No app on the phone yet? The link opens a page that explains what to do and offers the app, without ever signing anything in by itself
Safer by design: the QR no longer contains anything that lets a bystander collect your sign-in; only your phone, signed in to your account, can approve
Android: rewarded ads in Iran now come from a local network, so they load where they did not before

Every protocol really carries traffic: SSH Tunnel and obfuscated SSH (OSSH, including the WebSocket and CDN-fronted variants), OrbConnect, and WireGuard over a CDN WebSocket now work on Windows and Linux with the same stack as the mobile apps — no more placeholder dispatch
VLESS on all five transports: Reality, plain TCP, WebSocket, gRPC and Cloudflare CDN fronting verified end to end from the Windows app
Honest connect: the app reports Connected only after the tunnel has carried real traffic, and a failed connect restores your network immediately instead of leaving you offline
Fixed early-connection stalls on Windows: the service now waits for the tunnel address to leave its tentative state before routing traffic into it, removing the "connected but nothing loads" first seconds
CDN carriers pinned to IPv4: the tunnel's own IPv6 leak protection can no longer sever a CDN-fronted session mid-handshake
System tray lists every server, grouped by country with city labels, following the same region rules as the Servers tab
Linux packaging: the .deb and the portable tar.gz (with install script and systemd helper) are now published under stable links that always serve the newest build, and the download page offers both

OrbConnect fails closed: CSTP CONNECT is authorised before any tunnel is set up
VLESS over IPv6 server addresses: dial addresses are bracketed correctly, fixing connects to dual-stack nodes
Fleet rolled to the new image on all 33 nodes

Tapsell rewarded ads are verified client-side for the Android app's Iranian ad network, replacing the retired Adivery integration
Store-revenue bookkeeping fixes: completed store charges stay in revenue, each is booked once, and refunds follow what the stores actually refunded