In-app VPN beta

Hide your real IP,
from inside the browser.

Searxly already keeps your search, your keys and your AI on your Mac. The in-app VPN closes the last gap that can't be solved on-device — your IP address. One tap routes your whole connection through a Searxly-run exit node, so the sites you visit and the network you're on see the server, not you. It rides on macOS's own VPN client, and you pay for it privately in crypto, with no account and nothing tying it to your name.

How it works

One tap. Your traffic exits somewhere else.

Flip the VPN on from the toolbar and Searxly opens an encrypted IKEv2/IPSec tunnel from your Mac to a Searxly-operated exit node. From there your requests reach the open web carrying the node's IP, not yours, and the responses come back through the same tunnel. It's system-wide, not just the active tab, and it's built on Apple's own NetworkExtension VPN client — there's no third-party VPN app, no closed-source binary and no kernel extension to trust.

  • Uses macOS's built-in, audited VPN stack — not a bundled binary
  • Your real IP is replaced by the exit node's, for every connection
  • The tunnel is encrypted, so your network and ISP can't read it
Your Mac · Searxly
One toggle in the toolbar arms the tunnel
 encrypted IKEv2 / IPSec tunnel
Searxly exit node
A dedicated server we operate
The open web
Sites & trackers see the node's IP — not yours
Your ISP and local network see only an encrypted tunnel to one server
The mechanism

Named, not hand-waved.

Protocol
IKEv2 / IPSec — the standard, audited tunnel macOS ships with
Client
Apple NetworkExtension (NEVPNManager) — system-wide, no kernel extension, no Go, no third-party app
Exit node
A dedicated server operated by Searxly; your traffic reaches the web from its IP
Payment
USDC on Base, signed and sent from your in-app self-custody wallet — no card, no payment processor
Account
None. No email, no sign-up — the pass lives on your device, not in our database
Term
Time-boxed passes (crypto can't auto-charge). You re-buy to extend; nothing ever auto-renews
On expiry
The VPN configuration is removed from your Mac automatically when the pass lapses
Who sees what

What changes the moment it's on.

A VPN is easiest to judge by who can see what. Here's exactly what shifts the instant you flip it on, and the one thing that doesn't change because it was never exposed to begin with.

The sites you visit
See the exit node's IP and rough location, not your real address
Your ISP or network
Sees one encrypted tunnel to a single server — not the sites you open or what you load
Trackers on a page
Can no longer pin your visit to your home or office IP
The exit node
Forwards your traffic. We operate it, and no account ties a session to your identity
Searxly, the app
Still can't see your searches, keys or AI prompts — those never leave your Mac to begin with
Why this one's different

A VPN that doesn't know who you are.

Most VPNs hide your IP but ask for an account, a card and your trust in a closed app. Searxly's is built to the same standard as the rest of the browser — private by architecture, paid anonymously, native to the OS.

One tap, system-wide

A pill in the toolbar flips it on. It protects your whole connection — every app request that leaves the machine — not just one browser tab.

Anonymous payment

Paid in USDC straight from your own wallet. No card, no email, no account — there's nothing linking the VPN pass to your real identity.

The OS does the tunnel

Built on Apple's NetworkExtension and the standard IKEv2/IPSec stack. No bundled VPN binary and no kernel extension you'd have to take on faith.

Your IP, hidden

Sites, trackers and your local network see the exit node's address. Your ISP sees only an encrypted tunnel — not where you go or what you load.

Never auto-charged

Passes are time-boxed and you choose to renew them. There's no subscription quietly billing a card every month, because there is no card.

Funded fairly, not by your data

Kept cheap by Searxly's 0.65% swap fee — lower than the ~0.85% MetaMask and Phantom charge — instead of by logging or selling your activity.

Honest about limits

What a VPN can and can't do.

Search and keys can stay purely on your Mac. A VPN can't — your traffic has to exit somewhere, and that somewhere is a server we run. So a VPN moves trust rather than removing it: away from your ISP, toward the operator. We'd rather say that plainly than pretend it's magic.

Back to the trust model
  • It hides your IP from the sites you visit and from your local network.
  • It encrypts your traffic from the Mac to the exit node, so your ISP can't read it.
  • It takes no identity — no account, no card, nothing tying a session to your name.
  • It can't make you invisible — the exit node forwards your traffic, so it's a trust relationship with us, the operator.
  • It's one location for now — a single Searxly node today, with more to come as we grow.
  • It's in beta — rolling out and being tested in the open before the first public release.

The last layer: your address.

Local search, agentic tools for your own AI, keys that never leave — and now an IP that isn't yours either. One tap, paid privately, native to the Mac.