Frequently asked questions
A quick overview of what TunnelBuddy is (and isn't), how it works, and how hosts stay in control. For the full legal wording, see the Terms of Service and Privacy Policy.
What is TunnelBuddy, in simple terms?
TunnelBuddy is a tiny DIY, VPN-style tool for two people who know each other. You run it on a machine at home (or in the office) and on a laptop somewhere else. The laptop's web traffic is then sent through your home machine over an encrypted peer-to-peer tunnel, so websites see your normal home connection instead of a hotel or overseas network.
How is TunnelBuddy different from a normal VPN?
When you're overseas, a normal VPN can get you back to your country – but websites often know those IPs belong to VPN providers, and they behave differently.
Traditional VPN
- • Shared IPs in data centres with many other users.
- • IP ranges are often known as VPN providers.
- • More CAPTCHAs, blocks and "suspicious" logins.
- • All traffic goes via a company you have to fully trust.
TunnelBuddy
- • Uses a real home/office connection – yours or a buddy's.
- • To most sites you simply look like you're genuinely at home.
- • No shared exit pool; just you and someone you know.
- • Traffic only travels between your devices – there is no third-party relay run by TunnelBuddy.
Which technology does TunnelBuddy use?
TunnelBuddy uses WebRTC for the peer-to-peer tunnel – the same battle-tested technology used by modern video calling tools (like Google Meet) inside your browser. On top of that encrypted channel, it exposes a standard HTTP(S) proxy. There's no custom encryption scheme or experimental protocol to audit.
Always peer-to-peer
TunnelBuddy is designed to be strictly peer-to-peer. If a direct encrypted tunnel cannot be established (because of strict routers or NAT), it simply doesn't connect rather than silently falling back to a relay server.
No admin rights needed
Runs completely in user space and exposes a standard proxy. It configures your system proxy when allowed; on stricter setups you can still point just your browser at the local proxy. Either way, you can often use it even on locked-down machines where you can't install a traditional VPN client.
How is the the person sharing their connection protected?
TunnelBuddy is designed so that sharing your connection doesn't mean handing someone the keys to your whole network.
- • Stop at any time. The host can pause or stop sharing from inside the app. When sharing stops, guests are disconnected.
- • Short-lived pairing codes. Each code is valid for one hour. If it isn't used in time, it simply expires and can't be reused later.
- • Automatic session limit. Even if you forget to stop sharing, an active connection is capped at one hour, then stops.
- • See where traffic goes, not what's inside it. Hosts can review domains/URLs being accessed to spot anything suspicious, but they don't see the actual page content.
- • No local network access for guests. Guests only reach the public internet through the host's machine; access to the local LAN (router admin page, printers, NAS, smart devices) is blocked by design.
Is TunnelBuddy an anonymity tool?
No. TunnelBuddy is about using a connection you trust, not about becoming anonymous. It's intended for everyday things: accessing your own services while away, helping a trusted friend, or testing networks you control.
You still need the connection owner's consent and must follow the law and site terms wherever you and your buddy are. If you need strong anonymity, you should use tools designed specifically for that.