Get protected.

Native apps for every platform. 14 MB, signed, open source, and reproducible — compile the source yourself and verify the binary matches, byte for byte.

Download for your device Use the CLI

Windows

Full desktop client with SplitPath per-app rules, Aegis kill switch at the WFP layer, and auto-connect on untrusted Wi-Fi.

Download .exe

v4.2.114.2 MBWin 10 / 11

macOS

Universal binary, notarised by Apple. Menu-bar control, network-extension kill switch, and native Apple silicon crypto acceleration.

Download .dmg

v4.2.116.8 MBmacOS 12+

Linux

GUI and headless. Ships as .deb, .rpm, AUR and a static binary, with systemd integration and full nftables kill-switch support.

Get install command

v4.2.111.4 MBdeb · rpm · arch

iOS & iPadOS

On-demand rules, Siri shortcuts, and a home-screen widget. Connects in under 300 ms and sips battery in the background.

Get on the App Store

v4.2.122.1 MBiOS 16+

Android & Android TV

Always-on VPN, per-app SplitPath, and a leanback TV build. Also available as a signed APK and on F-Droid.

Get on Google Play

v4.2.118.6 MBAndroid 9+

Routers

Flash your router and cover every device on the network — consoles, smart TVs, IoT — with one connection.

Firmware & guides

OpenWrtAsusWRTpfSense

For the terminal people

A CLI that does everything the GUI does

Scriptable, daemon-backed, and shipped with shell completions. Same SupremeCore™ engine, same kill switch, zero clicking.

One-line installer with GPG-verified packages
systemd unit for connect-on-boot
JSON output on every command for scripting
Works headless on servers, NAS and Raspberry Pi

bash — supreme

# Install (Debian / Ubuntu / Fedora / Arch)
$ curl -fsSL https://get.supremevpn.example/install.sh | sh

# Log in and connect to the fastest node
$ supreme login
$ supreme connect
✓ Connected · Amsterdam NL-142 · 12 ms · SupremeCore™ v4

# Pick a country, turn on multi-hop, lock the kill switch
$ supreme connect --country jp
$ supreme set doubletunnel on --via ch
$ supreme set killswitch strict

$ supreme status --json
{
  "state": "protected",
  "exit":  "JP-208 · Tokyo",
  "cipher": "ML-KEM-768 + AES-256-GCM",
  "logs":  "none"
}

Also available

Cover the rest of your stack

Browser extension

Chrome, Firefox and Edge. Encrypted proxy, WebRTC leak block and ThreatNet filtering scoped to the browser.

Smart TV & console

Android TV and Fire TV apps, plus SmartDNS profiles for PlayStation, Xbox, Switch and Apple TV.

Source & signatures

All six clients on GPLv3, reproducible build instructions, SHA-256 sums and detached GPG signatures for every release.

Three seconds to supreme.

Download, log in, tap connect. That's the whole setup — and 30 days to change your mind.

Get Supreme VPN — from $2.19/mo Read the FAQ