Linux · Ubuntu · Fedora · Debian

XPASS VPN for Linux

Linux is the platform where "does my VPN work?" has the most possible answers, because distributions, desktops and network stacks differ. XPASS sells prepaid passes with a fixed number of days, paid once by card, with no automatic renewal, but XPASS has not yet verified a supported client for Linux.

This page is honest about that. It explains how VPNs generally reach a Linux machine, what to prepare, which prompts you will meet, and how to check for leaks, so you can decide with the facts. The setup shown on My Pass is always the source of truth for your pass.

Compatibility statusNot yet verified

XPASS has not yet tested this setup. The setup shown in My Pass after purchase is the source of truth.

No verified Linux client yet: My Pass is the source of truth
One-time prepaid payment, no automatic renewal
Covers privilege prompts, DNS checks and suspend behaviour

What a VPN does on a Linux machine

A VPN creates an encrypted tunnel from your computer to a VPN server and routes traffic through it. On Linux that is done by a virtual network interface plus changes to the routing table and DNS settings. Websites then see the server's address, and the Wi-Fi network you are on sees encrypted data.

The same limits apply as everywhere: a VPN is not anonymity, does not remove tracking by the services you sign in to, and does not replace HTTPS. Linux users in particular should understand DNS leaks, where name lookups bypass the tunnel.

What to prepare

An active pass and the My Pass page open. Login details appear only there and are never emailed.
Check what My Pass lists for Linux. If it shows a supported client or configuration for your distribution, follow that. If it does not, treat Linux as unsupported for now rather than trying to adapt a setup meant for another platform.
A user account with sudo rights, because creating network interfaces needs administrator privileges.
Knowledge of which network stack your distribution uses, commonly NetworkManager on desktop distributions, because that decides where VPN settings live.

Because Linux has no single standard client, only follow instructions that My Pass or a source named there gives you. Do not paste commands from a forum into a terminal without understanding them.

The permission prompts you will see

Linux does not show one standard consent dialog the way iOS or Android do. Instead you will usually meet:

A polkit authentication window when a desktop network tool needs to add or change a connection, asking for your password.
A sudo password prompt in the terminal when a command creates an interface or edits network settings.
A package manager or software centre confirmation if a client is installed from your distribution's repositories.

In GNOME, KDE and other desktops, VPN connections normally live in the network settings panel, and the tray or top-bar icon shows a lock or VPN badge when connected. Exact menus depend on the desktop environment and version.

Everyday use on Linux

Suspend and resume

When a laptop suspends, the tunnel generally drops, and after resume NetworkManager reconnects Wi-Fi first. Whether the VPN follows by itself depends on how it was configured. Check the VPN status before you sign in to anything important.

Switching networks

Changing Wi-Fi networks or plugging in Ethernet briefly interrupts the tunnel. Some setups reconnect automatically, others need a manual restart of the connection.

Auto-connect and boot

NetworkManager can mark a connection as automatic, and systemd-based setups can start one at boot. Whether that is possible for your pass is shown, if at all, on My Pass. Do not enable it for a configuration you have not tested.

Kill switch and firewall

A kill switch on Linux is usually a firewall rule, and a bad rule can leave you with no connection. Make sure you can disable it before you rely on it.

Troubleshooting on Linux

Connection fails immediately: double-check the credentials and the connection type shown on My Pass, and look at your system log for the error.
Connected but pages do not load: check your default route and DNS. A conflict between the VPN and the system resolver is a classic cause.
DNS leak: compare your DNS servers with the VPN on and off. See what a DNS leak is and how DNS works.
Drops after suspend: reconnect the connection and consider whether auto-reconnect is configured.
IPv6 traffic bypasses the tunnel: some setups only handle IPv4. Check whether IPv6 requests still show your real address.

To confirm it is working, compare your public IP address with the VPN off and on.

DNS with systemd-resolved, and distribution differences

Linux DNS handling is where most VPN leaks happen, and it depends on your distribution.

Checking DNS on a systemd-resolved system

Many current distributions, including Ubuntu and Fedora, use systemd-resolved. Run resolvectl status with the VPN off and note the DNS servers for your Wi-Fi or Ethernet link. Connect the VPN and run it again. You should see a new link for the tunnel with its own DNS servers, and ideally the tunnel is the default route for DNS. If your normal link still lists your provider's DNS and the tunnel link does not take over name lookups, queries may leave outside the tunnel. A page that shows which resolver answered your query will confirm it; compare the result with the VPN off and on. See what a DNS leak is for how to read the result.

Systems without systemd-resolved

On setups where /etc/resolv.conf is written by NetworkManager or edited by hand, a client or script may overwrite it, and a restart can undo the change. Some minimal and rolling distributions manage DNS yet another way, such as resolvconf, dnsmasq or a custom service. Check which one your system uses before applying any tutorial.

Distribution and desktop differences

Ubuntu and Debian derivatives: NetworkManager is the usual tool on the desktop editions, while servers often use netplan or plain config files.
Fedora and Red Hat family: NetworkManager plus systemd-resolved is common, and SELinux can block unknown helper programs.
Arch and other rolling distributions: you choose the network stack, so there is no default to assume.
GNOME and KDE: both expose VPN entries in their settings panels, but wording and plugin availability differ.

If IPv6 is enabled, check it separately, because a tunnel that only handles IPv4 can still leak IPv6 lookups.

Compatibility status for Linux

XPASS lists the current supported setup for each platform in My Pass. For Linux, live verification with our supplier is in progress and no client is verified yet, so this page stays marked as needing testing. You may find that your pass offers a configuration you can use on Linux, or you may find it does not. We do not claim either until it has been checked.

If Linux is your main machine and you want a guaranteed path, the safer choice today is to use your pass on a platform that My Pass already lists, such as Android or Windows. A 7-day pass keeps the commitment small while you find out.

Devices covered

Linux

How to set it up

Choose a pass
Pick the number of days you need. There is no automatic renewal.
Pay once
Pay by card through Stripe. Your account is created automatically once payment is confirmed.
Open My Pass and check Linux
See whether a Linux setup is listed for your pass. If none is shown, treat Linux as unsupported for now.
Follow only the setup shown
Use the client or configuration named on My Pass, and approve the polkit or sudo prompt only for that action.
Connect and check for leaks
Compare your public IP address and your DNS servers with the VPN off and on.

Limitations to know first

XPASS has not yet verified a supported client for Linux, so we cannot say your distribution will work.
The setup shown on My Pass is the source of truth; do not adapt instructions meant for another platform.
Distributions, desktops and network stacks differ, so menus and behaviour vary.
A VPN does not make you anonymous, and a bad firewall or kill-switch rule can cut your connection.

Choose your pass

Prepaid passes. Pay once, no automatic renewal.

Frequently asked questions

Does XPASS support Linux?

XPASS has not yet verified a supported client for Linux. My Pass shows the current supported setup for each platform, so check there. Live verification is in progress.

Can I use the setup for another platform on Linux?

We do not recommend it. Setups for other platforms may rely on apps that do not exist for Linux, and unverified commands can leave your network misconfigured.

Do I need sudo to use a VPN on Linux?

Usually yes for the first setup, because creating a network interface and changing routes needs administrator privileges. A desktop may ask through a polkit window instead.

How do I check for a DNS leak on Linux?

Compare the DNS servers your system uses with the VPN off and on, and run a leak check page. If they match your normal provider while connected, DNS is leaking.

Is it worth buying a pass just for Linux?

Not until Linux is listed on My Pass. If you also use Android or Windows, a pass is useful there today.