DropoVPN 0.3.0 — device mesh and public URLs

Mac users: macOS reports this release's Mac download as damaged because the app's code signature is incomplete. Download 0.3.1 instead; the Windows installer here is unaffected.

DropoVPN now links your own devices into an end-to-end encrypted mesh and can turn a local web app into a public URL.

• Device mesh: share an address such as localhost:3000, localhost:5173 or http://192.168.1.20:8080 from one device, and open it on your other devices on their own localhost. Development servers that listen only on loopback or check the Host header work unchanged. Any TCP service works, including web apps, WebSockets, APIs and databases.
• Connects anywhere: devices on the same Wi-Fi, LAN or OpenVPN network find each other and connect directly. Elsewhere they meet through the DropoVPN relay at dropovpn.samuelnimoh.com, then switch to a direct path when one becomes available. You can run your own relay or turn relaying off.
• Private by design: each mesh has its own 32-byte key, shared through an invite. Sessions use ephemeral X25519 keys mixed with that key, HKDF-SHA256 and AES-256-GCM, so relays pass traffic along without being able to read it. The mesh key is stored with macOS Keychain or Windows DPAPI and never reaches the app's window.
• Public URLs: create a link anyone can open through Cloudflare quick tunnels (cloudflared, no account), your signed-in ngrok agent, or your own relay's domain. Stop it with one click; public URLs end when you quit.
• Self-hosted relay: relay/server.mjs is a single dependency-free Node.js file with a Dockerfile and Fly.io configuration, and can serve public URLs on your own domain.

Download the .dmg (or .zip) for Apple Silicon Macs, or the .exe for Windows x64. The runtime source archive is for developers and is not needed to install the app.

Validation: native macOS and Windows CI passed the application tests, including real mesh devices, a real relay and local network discovery over loopback, and the Electron smoke tests, including a two-device mesh through a local relay and a public URL. The shared relay was verified end to end over the internet. Windows CI verified a clean installation of the complete DropoVPN installer.

Preview limitations: DropoVPN installers are unsigned, and the Mac app is not notarized. OS security warnings may appear. Your operating system may ask to allow incoming connections the first time the mesh starts. Anyone with a mesh invite is a full member; to remove a device, create a new mesh. The mesh carries TCP only. There is no VPN kill switch. Intel Mac and Windows ARM installers are not included.

Download website · Setup and source documentation