Field Notes

source

IVPN Unlinked Access

StatusStableUpdatedStands on1 sourceSupportsnotes

Local copy.

IVPN’s Unlinked Access design addresses a narrow but important problem in bundled privacy subscriptions: service entitlement does not need to require a shared account identifier.

The design uses cryptographic tokens derived from the IVPN account. Partner services receive and store token-derived hashes, not the IVPN account ID itself. Subscription status is synchronized through a manifest that lets services check entitlement without holding the central account identifier.

The design reduces direct account linkage. IP-address correlation, timing analysis, device fingerprinting, usage-pattern inference, and operational mistakes remain available to an observer.

For a privacy-service bundle, the useful lesson is that “single bill” does not have to mean “same account identifier everywhere.” It can mean a central payer relationship that issues unlinkable or partly unlinkable service entitlements.

Built on 1 source (1 external).

Working out connections…