CarrierPigeonVPN
A lightweight WireGuard bridge between two devices you already own. CarrierPigeonVPN lets your Mac, PC, or Apple TV share a connection with your paired iPhone or Android phone over a single encrypted tunnel — lean, private, and fully under your control.
Overview
CarrierPigeonVPN is a powerful, two-part ecosystem designed to perfectly synchronize your devices. Featuring companion apps for your Mac, Windows PC, and tvOS, and a mobile app for your iPhone or Android, they work together, establishing a rock-solid, encrypted WireGuard tunnel directly over your phone's Personal Hotspot (via Wi-Fi or USB).
Thanks to our seamless, zero-configuration handshake, your devices authenticate instantly and securely behind the scenes. The result is a lightning-fast, ultra-efficient link between the hardware you already own. Enjoy incredibly low latency, default DNS leak protection, and optimized screen-off battery efficiency — all locked down with uncompromising, end-to-end encryption.
Bring the whole household along: a single paired phone can carry up to five receiving devices at once, so your Mac, PC, and Apple TV can share the same tunnel without taking turns.
How it works
- On iOS, the phone companion runs a WireGuard endpoint inside an
NEPacketTunnelProvider. On Android, the equivalent is aVpnServicebound to a foreground service. In both cases, the tunnel's only job is to carry your desktop's traffic to your own phone. - The receiving companion (macOS, Windows, or tvOS) configures the local WireGuard client and routes DNS through the paired phone's own network stack, so lookups never leak to whatever network that device is sitting on.
- Your phone forwards that traffic out through its own cellular or Wi-Fi connection. The exit point is your phone — your SIM, your plan, your account.
What CarrierPigeonVPN is not
CarrierPigeonVPN is not a commercial VPN service. We do not operate exit nodes, do not terminate your traffic on DeadStick-owned servers, and do not anonymize you on the public internet. Your exit point is your own phone on your own cellular or Wi-Fi plan — which is why it is your responsibility to use CarrierPigeonVPN in a manner that complies with your carrier's or network's terms of service and acceptable-use policy. DeadStick Digital makes no representation that any particular use of CarrierPigeonVPN is permitted under any particular plan.
VPN scope and disclosures
CarrierPigeonVPN uses Apple's NEPacketTunnelProvider API on iOS, macOS, and
tvOS, and Android's VpnService API, for a single purpose: to route the
receiving companion's outbound traffic through the paired phone's own networking stack.
We do not
inspect, log, collect, share, or transmit the contents, destinations, or metadata of any
traffic that flows through the tunnel. The tunnel carries only the user's own traffic
between two devices that the same user controls, and the app does not modify traffic from
other apps on the phone.
As required by Apple's App Store Review Guideline 5.4 and Google Play's VPN policy, DeadStick Digital LLC does not sell, use, or disclose to third parties any data collected by CarrierPigeonVPN for any purpose. The first time the tunnel activates, the app surfaces a prominent disclosure describing exactly what the tunnel does.
How your data is handled
CarrierPigeonVPN never sees the contents, destinations, or metadata of your traffic — that traffic flows directly between your two devices and then out of your phone's own networking stack. Local configuration (WireGuard keys, paired-device identifiers) is stored on your devices in the system keychain. See the privacy policy for the complete treatment.
Platforms
Desktop: macOS 14 Sonoma or later · Windows 11.
TV: tvOS 17 or later.
Phone: iOS 17 or later · Android 12 or later.