Frequently Asked Questions

Does OCCLUDE slow down my connection?

No measurable impact. OCCLUDE rewrites packet headers in the kernel path (via eBPF on Linux). The rewriting adds microseconds of latency per connection, not per packet. Throughput is unaffected because only handshake packets are modified.

Does it work with VPNs?

Yes. OCCLUDE operates on outbound traffic before it enters the VPN tunnel. The VPN sees your normalized fingerprint, and so does everyone on the other side. This is the recommended setup: OCCLUDE for fingerprint normalization, VPN for IP privacy.

What happens if OCCLUDE crashes?

Traffic continues normally with your native fingerprint. OCCLUDE's network hooks are automatically removed when the daemon stops. There is no "fail-closed" mode that blocks traffic (though a kill-switch feature is planned).

Can websites detect that I'm using OCCLUDE?

If OCCLUDE is working correctly, no. The whole point is that your traffic is indistinguishable from a genuine host running the target browser/OS. However, a sophisticated adversary could potentially detect inconsistencies between your network fingerprint and your application-layer behavior.

What's the difference between Free and Pro?

Free normalizes TCP/IP parameters (window size, MSS, TTL, options). Pro additionally rewrites TLS ClientHello (JA3/JA4 fingerprint) and HTTP/2 SETTINGS frames, providing full-stack fingerprint normalization.

How do I pay?

Monero (XMR) only. No accounts, no email, no personal information collected. Visit occlude.sh/purchase to get a Pro license.

I lost my license key. Can you recover it?

No. We store only a hash of your license key. The key itself is shown once at purchase time. This is by design — we cannot identify our customers, and we cannot recover keys.