Back to Blog
How to Route Traffic Through Obscura VPN for Maximum Bitcoin Privacy
·6 min read

How to Route Traffic Through Obscura VPN for Maximum Bitcoin Privacy

Step-by-step guide to setting up Obscura VPN's multi-hop architecture for Bitcoin privacy, including anonymous signup and Lightning payments.

Your Bitcoin wallet broadcasts your IP address to every node it connects to. That IP can be logged by blockchain surveillance companies, correlated with your transactions, and potentially linked back to your real identity. A standard VPN helps, but you're still trusting a single company with both your identity and your traffic. Obscura takes a different approach.

Obscura uses a two-party relay system that makes it architecturally impossible for any single entity to connect who you are with what you're doing online. For Bitcoin users serious about privacy, this distinction matters.

How Obscura's Split-Trust Architecture Works

Unlike traditional VPNs where one provider sees everything, Obscura splits knowledge across two independent parties. Their entry servers see your real IP address but can't see your traffic (it's end-to-end encrypted). The exit servers, operated independently by Mullvad, see your decrypted traffic but have no idea who you are.

The traffic flows like this: your device connects to an Obscura entry server using WireGuard-over-QUIC, which then relays still-encrypted traffic to a Mullvad exit server. Neither party alone can link your identity to your activity. This isn't a policy promise; it's how the system is built.

In December 2025, Cure53 completed an independent security audit confirming no IP logging and minimal data handling. That's the kind of verification that policy-only VPNs can't provide.

Step 1: Anonymous Signup Without Creating Identity Links

Obscura doesn't ask for your email. When you sign up, you receive a randomized account number. This is your only credential, so store it securely.

For maximum privacy, pay with Bitcoin Lightning Network or Monero. The service costs $8 per month and supports three simultaneous connections. Lightning payments are fast and create minimal on-chain footprint, making them ideal for this use case.

To pay with Lightning:

  1. Visit the Obscura signup page
  2. Select the Lightning payment option
  3. Scan the invoice with your Lightning wallet (Phoenix, Muun, or any compatible wallet)
  4. Save your account number immediately after payment confirms

If you pay from an exchange-linked wallet or one connected to your identity, you've already weakened your privacy setup. Use a wallet funded through peer-to-peer trades or CoinJoin if your threat model requires it.

Step 2: Install and Configure the App

Obscura offers native apps for iOS, macOS, and Android. The client is open source (available on GitHub), which means the code can be independently verified.

Download from the App Store or Google Play, or generate a WireGuard configuration file through the user portal if you prefer using a standard WireGuard client.

After installation:

  1. Enter your account number
  2. Select an entry server location (Obscura operates in 20+ cities as of 2026)
  3. The app automatically handles the multi-hop routing to Mullvad exits

Step 3: Choose Your Protocol Based on Your Environment

Obscura supports two connection methods, and which you choose depends on your network situation.

QUIC Stealth Protocol: The default option wraps your VPN traffic in QUIC, the same protocol used by HTTP/3 and modern web services. To network observers, your VPN traffic looks like ordinary web browsing. This is valuable if you're on networks that actively block VPN protocols, traveling through restrictive countries, or dealing with ISPs that throttle detected VPN traffic.

Standard WireGuard: If compatibility is more important than stealth, you can connect using plain WireGuard. This might be necessary on some corporate networks or older devices.

For Bitcoin privacy specifically, the QUIC option provides an extra layer of obscurity. Not only is your traffic encrypted, but the fact that you're using a VPN at all is less obvious.

Step 4: Route Your Bitcoin Traffic

Once connected, configure your Bitcoin software to send all traffic through Obscura. Most wallets respect your system's network settings automatically when the VPN is active.

For full-node operators, ensure your node's traffic routes through the VPN tunnel. This prevents your home IP from being broadcast to the Bitcoin network. Some node software allows configuring a SOCKS5 proxy; check your node's documentation.

What this accomplishes:

  • Your IP address is hidden from blockchain peers, exchanges, and surveillance services
  • Transaction broadcasts appear to originate from the Mullvad exit server, not your location
  • Block explorers and analysis companies can't correlate your IP with your addresses

Combining Obscura With Other Privacy Practices

A VPN is one layer in a broader privacy stack. For maximum effect, combine it with:

Non-reused addresses: Generate a fresh receiving address for every transaction. Most modern wallets do this automatically.

CoinJoin or PayJoin: Break the on-chain link between your transaction inputs and outputs. Obscura hides your IP; CoinJoin obscures the ownership graph.

Your own node: When you use someone else's node, they can see which addresses you're querying. Running your own node (routed through Obscura) eliminates this leak.

Tor for specific cases: For the highest-risk activities, Tor still provides stronger anonymity guarantees, though at the cost of speed and convenience. Obscura sits in a practical middle ground for daily use.

The Tradeoffs Worth Knowing

Obscura's architecture is more private than single-hop VPNs, but it's not magic. The entry servers still see your real IP, and you're trusting that Obscura's no-log claims hold up. The 2025 audit provides some assurance, but no system is provably trustless.

The multi-hop design adds latency compared to direct VPN connections. For Bitcoin transactions, this is barely noticeable. For latency-sensitive activities, you might feel the difference.

At $8 per month, Obscura costs more than some competitors, though it includes the Mullvad exit infrastructure in that price. For users whose threat model justifies the architectural guarantees, the premium is reasonable.

Making It Part of Your Routine

The practical advantage of Obscura over Tor for daily Bitcoin use is convenience. The macOS and mobile apps handle the complex multi-hop routing transparently. You connect once and forget about it.

For users in restrictive environments, the QUIC stealth protocol means you can maintain privacy without constantly fighting blocked connections. The traffic blending is passive; you don't need to configure anything special.

Whether Obscura is necessary depends on your situation. If you're making occasional small purchases and don't face targeted surveillance, a simpler setup might suffice. If you're a journalist, activist, researcher, or simply someone who takes financial privacy seriously, Obscura's split-trust design provides cryptographic assurance rather than corporate promises. That distinction is worth the setup time.