# PIO VPN FAQ

> Markdown version of PIO VPN's frequently asked questions. Optimized for AI agents and LLMs.

Last updated: 2026-04-18
HTML version: https://aethershield.io/#faq
Full context: https://aethershield.io/llms-full.txt

---

## What makes PIO VPN different from other VPNs?

PIO VPN is the world's first quantum-resistant VPN. While traditional VPNs use encryption that quantum computers will break, PIO VPN uses post-quantum cryptography (ML-KEM-768 via Rosenpass) combined with AI-powered traffic morphing (Protean Chronos) and multi-path routing. It's the only consumer VPN designed to survive the quantum computing era.

## Can quantum computers break my current VPN?

Yes. Current VPNs rely on RSA or elliptic curve cryptography (X25519, ECDH), which quantum computers using Shor's algorithm can break. Worse, adversaries are already harvesting encrypted traffic today to decrypt later when quantum computers are ready (harvest-now-decrypt-later attacks). PIO VPN protects against both current and future quantum threats.

## What encryption does PIO VPN use?

A hybrid post-quantum scheme: **ML-KEM-768** (NIST-standardized lattice-based KEM, FIPS 203) combined with **X25519** (classical Diffie–Hellman), implemented via the **Rosenpass** protocol on top of WireGuard. Symmetric encryption uses ChaCha20-Poly1305. The session key is secure if either ML-KEM or X25519 remains unbroken.

## What is Protean Chronos?

Protean Chronos is PIO VPN's AI-powered traffic morphing engine. It uses a Mamba-3 neural network (47M parameters, 4-bit quantized, runs on-device) to score traffic detectability, then applies Geneva-inspired protocol transformations to make traffic unrecognizable to deep packet inspection. It morphs the fingerprint every 60 seconds, with timing secured by Pietrzak VDF time-lock proofs so even PIO VPN can't predict the morph schedule.

## What is PIO Mesh Swarm routing?

PIO Mesh splits your traffic across 2–4 simultaneous encrypted paths through different servers and jurisdictions. Even if one path is compromised, your complete traffic is never visible in one place. It provides both better speed (parallel paths, 1.6–2.4× single-path bandwidth) and stronger privacy (no single observation point sees the full session).

## Does PIO VPN keep logs?

No. PIO VPN runs on RAM-only servers with zero disk storage. All data exists only in volatile memory and is destroyed when the server restarts. There are no logs to hand over because no logs exist. Server integrity is verified via TPM2 remote attestation at boot — clients refuse nodes whose attestation fails or whose binary hash isn't on the reproducible-build allowlist.

## Is PIO VPN easy to use?

Yes — one tap to connect. PIO VPN's AI automatically selects the fastest, most private path for your location. The primary interface is a 3D globe with a single Connect button. Advanced features (Protean Chronos, multi-hop, kill switch, leak protection) are enabled by default and run silently in the background. No configuration required.

## Can I run my own PIO VPN node?

Yes. Anyone can run an entry, transit, or exit node with a single Docker command. Your node appears on the global map, helps strengthen the network, and earns ZK-proven rewards proportional to bandwidth carried. The reward proof is a Halo2 zk-SNARK that reveals only aggregate bandwidth — never per-user metadata.

## How much speed do I lose?

About 6% throughput overhead from traffic morphing on a 1 Gbps link. With multi-path routing enabled, aggregate bandwidth typically scales 1.6–2.4× vs single-path, more than offsetting the morphing cost. p95 latency drops 18–30% on long-haul routes thanks to path diversity.

## What platforms are supported?

Windows 10+, macOS 12+, Linux (kernel 5.10+), iOS 16+, Android 11+, plus a CLI for headless servers.

## How is PIO VPN different from Tor?

Tor is anonymity-focused and slow; PIO VPN is privacy + speed. Tor uses 3 fixed hops with classical encryption; PIO VPN uses 2–4 parallel paths with post-quantum encryption and AI traffic morphing. Tor traffic is recognizable to DPI; PIO VPN traffic looks like normal HTTPS. PIO VPN is also a one-tap consumer app, whereas Tor requires a separate browser and configuration.

## Can PIO VPN bypass the Great Firewall of China / Iran filtering?

Yes. In 2025-Q4 testing, Protean Chronos achieved a 0.3% block rate against China's GFW within 24 hours (vs 94% block within 30 s for an unmorphed WireGuard tunnel) and 0.1% against Iran's filtering system. Commercial DPI (Sandvine, Allot) misclassifies PIO VPN traffic as regular HTTPS in 98.9% of cases.

## What is the no-logs policy worth if you're forced to comply?

The policy is enforced by hardware design, not by promise. RAM-only servers physically cannot retain data after restart. Multi-path routing means no single node ever sees a complete session — even compelled disclosure from one node yields only a fragment. TPM2 attestation prevents tampered nodes from joining the network undetected.

## How is PIO VPN different from a free VPN?

Most free VPNs monetize by selling user data, injecting ads, or throttling bandwidth. PIO VPN's free tier is genuinely free (limited bandwidth and region selection) with the same encryption and no-logs guarantees as paid tiers. There is no data sale.

## Does PIO VPN support port forwarding / split tunneling / dedicated IP?

- Split tunneling: Yes, on all tiers.
- Port forwarding: Plus and Quantum tiers.
- Dedicated IP: Quantum tier (optional add-on).

## How do I integrate PIO VPN with an AI agent?

Use the manifests at `/.well-known/ai-agent.json` and `/.well-known/mcp.json`. Tools exposed: `analyze_privacy`, `speed_test`, `list_servers`, `server_health`. Authentication via Bearer JWT (obtain at `/auth`). Full OpenAPI spec at `/openapi.json`.

## Where is PIO VPN based?

PIO VPN Ltd. is incorporated outside the Five/Nine/Fourteen Eyes intelligence-sharing jurisdictions. Specific jurisdiction details are published in the company's transparency report.

## Is PIO VPN audited?

Yes. Annual independent cryptographic and operational audit. Reports are published on the website when each audit completes. The Rosenpass protocol itself has been formally verified.

## How do I report a security vulnerability?

See https://aethershield.io/.well-known/security.txt. Bug bounty contact: security@aethershield.io.

## See also

- /index.md — Landing overview
- /features.md — Detailed feature list
- /pricing.md — Subscription tier comparison
- /llms-full.txt — Full architecture and threat model
