Banks, streaming services and government portals don't block you because you did something wrong. They block you because your IP address changed. Home Exit sends your traffic out of your own home connection — so from the other side of the world, you look exactly like you're sitting in your living room.
Three pieces, and nothing to configure on your router.
1 · At home
A device that stays on — an old Android phone, a Raspberry Pi, a NAS — becomes your personal exit.
2 · The relay
A SandVPN relay links your two devices. Your home box is never exposed: it is the one that dials out.
3 · Abroad
You connect from anywhere. Your traffic comes out at home, under your real IP address.
Every VPN server on earth sits in a datacenter, and those address ranges are public knowledge. Banks, streaming platforms and ticketing sites buy lists of them and simply refuse the connection — which is why "just connect to a server back home" so often ends in an endless verification loop. A home connection is a different animal: a residential address handed to you by your own ISP, indistinguishable from any other subscriber on the street. Nobody blocks those.
Classic VPN server
A shared datacenter IP, used by thousands of people and publicly listed as a VPN. Fast, and excellent for privacy — but recognisable, and refused by exactly the services you need most when you travel.
Home Exit
Your own residential IP — the one you use every day at home. Nothing to recognise, nothing to block. It is simply your connection, reachable from wherever you happen to be.
Your bank stops fighting you
No more verification loops, no more "unusual login" emails, no more card frozen on day two of a trip.
Your streaming library follows you
You watch what you already pay for, with the catalogue and the subscriptions you have at home.
Public services keep working
Tax, health and government portals that only accept a national connection still open from abroad.
An IP nobody has blacklisted
It is your own residential address — not a shared range that websites have been rejecting for years.
Nothing to open on your router
The home device connects outwards. No port forwarding, and it works even behind carrier-grade NAT.
One spare device is enough
An old phone left plugged in behind the TV does the job. There is no dedicated hardware to buy.
Home Exit needs one device that stays on at home. It does not have to be powerful — it only forwards traffic.
Encrypted end to end
The link between your devices uses VLESS over REALITY — the same modern transport as our VPN servers.
Your home network stays closed
The home device is only ever allowed to reach the public internet. Addresses on your local network are blocked by design, so nothing can reach into your home.
Your own keys, your own route
Every account gets its own credentials and its own path through the relay. Nobody else's traffic can come out of your connection.
Home Exit is coming to SandVPN Premium
It is in active development and will be included in Premium — alongside the VPN, the password manager and the email aliases — at no extra cost.
It is in active development and already works end to end in our own tests. We would rather ship it once it is reliable on every kind of home connection than announce a date we would have to move. The roadmap is the place to watch.
No. Home Exit is planned as part of the SandVPN Premium subscription — the same one that already covers the VPN, the password manager and the email aliases.
Your traffic travels to your home before reaching the internet, so the ceiling is your home upload speed. It is built for banking, admin and watching your own library — not for lowering your ping in competitive games.
Yes: that device is your exit, so it has to be reachable. An old phone on a charger or a Raspberry Pi is plenty, and it comes back on its own after a power cut or a reboot.
Yes. The home device opens the connection outwards to our relay, so nothing needs to be reachable from the outside. That is precisely the situation where port forwarding cannot work at all.
The relay only forwards an encrypted stream between your two devices, and your HTTPS traffic stays encrypted end to end as always. The exit is your own connection — not one of our servers.
Nothing for you to do. Home connections are handed a new address regularly; your traffic simply comes out of whatever address your line holds at that moment.