10.15 MB. Self-contained. WireGuard bundled. No separate driver install. NSIS installer registers a privileged service so the UI never needs admin rights at click-time.
SmartScreen will warn ("Unknown publisher") until an EV code-signing certificate ships in stage 2. Verify the SHA-256 to confirm the binary is the one this page describes.
Run one of these in the same folder where the installer is. The output should match the hex above exactly.
Windows · PowerShell
(Get-FileHash -Algorithm SHA256 .\StandVPN-amd64-installer.exe).Hash.ToLower()
Linux / macOS
sha256sum -c StandVPN-amd64-installer.exe.sha256 # or shasum -a 256 StandVPN-amd64-installer.exe
NSIS does 8 install phases — extracts binaries to C:\Program Files\StandVPN\, registers the SCM service StandVPNService, starts it, drops a tray UI shortcut. UI does not need admin rights at click-time.
Sign up at login.standvpn.com with email (Cloudflare Turnstile + email verify), open the desktop UI, click Connect. ~5 s to first packet on a healthy network.
Standard Windows uninstall. The uninstaller stops the service, deregisters from SCM, removes binaries and the Wintun adapter, leaves no residual firewall rules.
Subscribe to the project to know when they ship. iOS, Linux desktop, and a Linux CLI are explicitly not on the stage-1 roadmap — see /apps for the honest scope.