# Shield VPN

> A Swiss VPN connection for one device. Shield lists OpenVPN, AES-256 encryption and unlimited traffic for users who want a defined Swiss connection point with a simple configuration.

Canonical human page: https://swissoctet.com/services/shield/

SwissOctet public catalogue. Currency: USD. Location: Switzerland / CH. The fixed-address crypto checkout uses a public USD rate to calculate the exact amount for the selected asset and network, with a 25-minute payment window. This browser quote is not a server-issued invoice. Transaction attribution, payment confirmation and provisioning require the operator’s backend.

A Swiss OpenVPN configuration for one device, with AES-256 encryption and unlimited traffic.

## Starting configuration
Starting configuration: Shield VPN 01 (shield-01); USD 4.59 effective monthly base on the shortest available 1-month term; USD 4.59 base charge for that term. Add-ons and applicable tax are separate.

| Starting-plan specification | Listed value |
| --- | --- |
| Devices | 1 |
| Traffic | Unlimited |
| VPN Type | OpenVPN |
| Encryption | AES-256 Encryption |

## Service capabilities
### A Swiss connection point
This catalogue offers Shield only in Switzerland. The location is explicit rather than one choice hidden inside a broad list of regions.

### OpenVPN as the protocol
The plan specifies OpenVPN. Use a compatible client and keep its configuration and connection credentials in a private place.

### Listed AES-256 encryption
The encryption specification applies to the VPN connection. Applications, account access and the device itself still need their own security controls.

### A clear one-device allowance
The plan lists one device and unlimited traffic. Check that allowance against how you intend to use the connection before ordering.

## Example workloads
### A Swiss browsing connection
Use a compatible device with a defined Swiss VPN connection point, while keeping browser and account privacy settings under your control.

### Connectivity while travelling
Prepare a consistent VPN configuration for your device and verify the applications you need through the connection.

### An encrypted network path
Add a VPN connection to your own device-security plan without relying on it to secure every application or account.

## A closer look
### Know what the connection covers
Shield provides a VPN configuration, not a complete privacy system. The listed protocol and encryption describe the connection. Websites can still recognise signed-in accounts, applications can disclose data and a compromised device remains a problem. Keep the device updated and use encrypted application connections.

### Make sure the client fits your device
Check that your device supports a compatible OpenVPN client before purchasing. Protect the configuration, review the client's routing settings and test the applications you use. The plan's one-device allowance should be part of the decision if you want simultaneous access from several devices.

### No-KYC is a collection choice, not an invisibility claim
The SwissOctet order flow is designed without identity-document verification. This limits what is requested at purchase, but it does not establish a zero-logs policy or absolute anonymity. Crypto transactions and account activity can carry identifying traces; choose and operate the service with a realistic privacy model.

### Check routing and application behaviour
The OpenVPN profile determines which traffic enters the tunnel. Review full or split routing, DNS and client reconnect behaviour, then test the applications you use. Encryption and routing add overhead, while the route to each destination affects performance. Streaming access, P2P permission, inbound ports, firewall rules and data-retention practices require their own documented operating terms.

## Configurations and billing
Base prices exclude separately selected add-ons. The actual configuration total, availability, delivery, licences and any applicable tax are confirmed before a real order.

### Shield VPN 01
An OpenVPN configuration for one device, using AES-256 encryption and a Swiss location. The catalogue lists unlimited traffic and a one-month billing period.

Configuration ID: shield-01. Location: Switzerland / CH. Availability: confirm availability on the final quote.

Nominal monthly base rate before billing-period pricing: USD 4.59. This rate is not a separate payable invoice total.

Shortest available billing term: 1 month. Base charge for this term: USD 4.59; displayed effective monthly base: USD 4.59. Selected add-ons and applicable tax are separate.

| Specification | Listed value |
| --- | --- |
| Devices | 1 |
| Traffic | Unlimited |
| VPN Type | OpenVPN |
| Encryption | AES-256 Encryption |

#### Available billing periods
| Duration | Displayed effective monthly base | Total base for period |
| --- | --- | --- |
| 1 month | USD 4.59 | USD 4.59 |

No paid add-on groups are listed for this family.

## Service questions
### How many devices does Shield include?
The listed plan allowance is one device. Do not assume unlimited simultaneous connections from the unlimited-traffic specification.

### Which VPN protocol is listed?
Shield specifies OpenVPN. Check that a compatible client is available for your device and keep its configuration private.

### Does a VPN make every activity anonymous?
No. Accounts, cookies, applications, payments and device behaviour can reveal information. A VPN connection is one component of a privacy approach.

### Does SwissOctet claim a zero-logs VPN?
No zero-logs guarantee is made here. Logging practices, retention and operational terms require a documented policy for the actual service.

### Is this the same as hosting a server or website?
No. Shield is a VPN configuration for device connectivity. Compare the compute or hosting families if you need an environment to run applications.

### Are WireGuard, IKEv2 or several countries included?
The current Shield catalogue lists OpenVPN in Switzerland. It does not include alternative protocols or additional locations.

### Can I rely on the VPN to unblock a streaming service?
No access guarantee is made. Destination services can apply their own region and VPN rules, and connection performance depends on the route and device.

### What should I confirm for P2P or inbound connections?
Confirm acceptable use, NAT or firewall behaviour and any port-forwarding support with the operator. Unlimited traffic does not establish unrestricted P2P permission or inbound access.

### What payment and cancellation terms apply?
Confirm the operator’s identity, availability, delivery timeframe, applicable tax, renewal, cancellation and refund terms before sending funds. The fixed-address checkout provides a browser quote with complete transfer instructions; it does not issue a server invoice or confirm an accepted order. Payment verification and service delivery remain separate backend operations.

## Relevant guides
- [Crypto checkout and the limits of payment privacy](https://swissoctet.com/insights/crypto-checkout-and-operational-privacy/index.txt): Understand the asset, network and confirmation journey, and protect the information that connects your project to a payment.
- [No KYC and privacy: understand the difference](https://swissoctet.com/insights/no-kyc-is-not-anonymity/index.txt): Document-free onboarding addresses one collection point. Understand the other records, access paths and payment traces around a hosted project.
- [Choose the asset and network before preparing a crypto payment](https://swissoctet.com/insights/choose-crypto-asset-network/index.txt): Read a payment route as a complete asset-and-network pair, then verify invoice instructions, token identity and the amount delivered before authorising a transfer.
- [Choose a traffic path: server, tunnel or proxy](https://swissoctet.com/insights/choose-a-server-tunnel-or-proxy/index.txt): Understand what a VPS, VPN and proxy each change, then select routing, protocols and operating responsibilities from the connection you actually need.
- [Plan addresses and DNS as parts of your deployment](https://swissoctet.com/insights/plan-addresses-and-dns-for-deployment/index.txt): Separate public, private, static and dedicated addresses, then map forward DNS, reverse DNS and TLS to the parties that can configure them.