How GhostMesh protects your connection, handles credentials, and ships updates.
GhostMesh VPN uses modern protocols (including SRSP/GhostCloak, Hysteria2, TUIC, and VLESS) with strong encryption for your tunnel.
Cipher suites and parameters are negotiated per session between the client and the selected server.
SRSP (SRS Secure Session Protocol) is the GhostMesh transport layer used on supported routes to carry selected traffic through an encrypted GhostCloak connection.
On supported apps, traffic is first sent to a local proxy/TUN ingress and then forwarded to the SRSP client, which manages the upstream connection, session credentials, routing decisions, and reconnect behavior.
SRSP is designed for resilience and controlled routing; it does not replace HTTPS and should be used together with normal application-layer security.
The apps are designed to reduce DNS and IPv6 leaks and include a system-level kill switch where the platform allows it.
Network behavior can vary by OS version and vendor ROM; see documentation for your platform.
We describe what we collect and what we do not collect in the Privacy Policy. Use the service only in compliance with applicable law.
Download installers only from official GhostMesh pages. Windows builds publish a SHA256 checksum on the download page.
SmartScreen or similar warnings can appear for new publishers; compare the published checksum before running an installer.
Email security@srs-ghostmesh.com with steps to reproduce, affected versions, and your contact for follow-up. Please allow reasonable time for triage before any public disclosure.
Policies, cookies, refunds, and company details: Legal hub
