Two hops. No one sees both ends.
Two independent relays. Neither sees both who you are and where you go.
Nimbrel wraps every connection twice and sends it through two relays run by separate operators. The entry knows who you are. The exit knows where you’re going. Nobody holds both halves.
A VPN moves trust. It doesn’t remove it.
With a typical VPN you swap one watcher for another. Nimbrel splits the view, so no single company gets the whole picture.
One provider, full view
Hidden. The café, hotel or ISP sees only an encrypted tunnel.
Seen and linked. One company sees both who you are and where you go.
Could be exposed. A breach, a sale or a legal demand could reveal that history.
Two hops, split view
Hidden. The network sees only an encrypted tunnel to the entry relay.
Split. Entry sees your address, exit sees your destination. Neither sees both.
Nothing to join up. No single operator ever held both halves, so no single record ties you to where you went.
A VPN asks you to trust one company with everything. Nimbrel is designed so you don’t have to.
Split-knowledge routing · two independent operatorsTwo envelopes, two couriers. Neither reads the whole letter.
Follow one connection from your device to the site you visit: two layers of encryption, two relays, and a different job for each.
Your device
Wraps each connection in two layers of encryption.
Keys stay on your deviceEntry hop
Sees your address and a sealed inner layer it cannot open.
Sees: address, not destinationExit hop
Sign up with a token. Your account is a random token, and your keys are generated on your device.
Built around one rule: nobody sees both ends.
Split view by design
Your address and your destination are handled by different relays, run by different operators. Neither has the full picture.
Split-knowledge · two operators
Less to hand over
Because no relay holds both halves of a connection, there is no single record linking you to the sites you visit.
Designed for minimal records
Keys that keep changing
Session keys are made on your device for each connection and thrown away when it ends.
Per-session keys
An account without a name
Your account is a random token. You don’t need an email address or a name to sign up.
Token-based account
A new route each session
Nimbrel picks a fresh entry and exit pair each time you connect, so your traffic never settles into one predictable path.
Per-session hop selection
No black box
We explain exactly what each relay can and cannot see, in plain language. If a relay can see something, we say so.
Plain-language design notes
Good places to start.
Four everyday places where a split view earns its keep.
Shared Wi-Fi
A café table, a hotel lobby, a shared desk. The local network sees only an encrypted tunnel.
Travel
Move between airport, train and hotel networks without handing your browsing to each one.
Research
Look things up without any one provider building a picture of what you are looking into.
Small teams
Give everyone a token account without collecting staff names or email addresses.
Design details, stated plainly.
What each part of Nimbrel does, and what each relay can see.
- Routing
- Two hops, run by separate operators
- Entry hop sees
- Your address and a sealed inner layer it cannot open
- Exit hop sees
- Your destination, never your address
- Handshake
- Noise IK with X25519
- Encryption
- ChaCha20-Poly1305 and BLAKE2s
- Session keys
- Generated on your device, new for every session
- Account
- A random token; no name or email
- Records
- Split by design · no single relay sees both ends
- Hop selection
- A fresh entry and exit pair each session
In early access
- Token-based account
- Two hops on every connection
- A fresh route each session
Plain answers.
Is Nimbrel a VPN?
It does the same job, encrypting your connection and hiding your traffic from the local network, but it is built differently. Instead of one provider, two independent relays each handle half of the connection.
What can each relay see?
The entry relay sees your address and an encrypted inner layer it cannot open. The exit relay opens that layer and sees where you’re going, but only ever sees the entry relay’s address, never yours.
Who runs the relays?
Entry and exit relays are run by separate operators, so no single company controls both sides of your connection.
What do I need to sign up?
Nothing personal. Your account is a random token generated on your device. Keep it somewhere safe: it is the only key to your account.
How do I get early access?
Use the early-access button on this page. We’re opening places in small batches.
Two hops on every connection.
Join early access and be among the first to try split-knowledge routing.