Surok

What is zapret, is it safe, and how is it different from a VPN?

Zapret explained in plain words: how it bypasses blocks without changing your IP, whether it's safe to install, where to download the real one, and when it won't help while a VPN will.

·5 min readGuidesBlocking

Search for "zapret" and the suggestions are "discord", "youtube" and "safe". People want to know what the program is, whether it's malware and how it compares to a VPN. In short: zapret is not a VPN, not a proxy and not a hack. It's a small utility that stops your ISP's equipment from recognising blocked traffic. It has real strengths and hard limits, and people usually discover the limits at the worst moment.

Quick fix. If zapret stopped working or you're on mobile data with a carrier whitelist, try Surok: entry in Moscow, exit in Europe, works on any Russian carrier. Three days free, then from 220 ₽ a month.

What zapret is

Zapret is open-source software maintained since 2016 by a developer known as bol-van on GitHub. It runs on your computer or router and slightly "damages" the packets heading to a blocked site: it splits the first TLS packet, reorders pieces, adds junk fragments. The ISP's deep packet inspection (DPI) gear fails to recognise the banned resource in that stream and lets it through. The website receives a normal request and answers as usual.

The best-known flavour for regular users is the zapret-discord-youtube build for Windows: an archive with ready-made profiles for Discord and YouTube, started with one batch file. We have a separate guide, zapret for Discord, YouTube and GitHub, including the common errors.

Zapret vs VPN

The key difference: zapret doesn't change your IP address and doesn't encrypt your traffic. It only fools the DPI on the way to the site.

Zapret VPN
Changes your IP no yes
Hides traffic from the ISP no yes
Needs a remote server no yes
Speed same as without it depends on the server
Works against IP blocks no yes
Works on carrier whitelists no yes, if the VPN is built for it
Opens services that left Russia themselves no yes
Price free from 220 ₽ a month, or free with limits

Hence a simple rule. If a site is blocked only at the DPI level, as YouTube was during the throttling, zapret works and is faster than any VPN. If a site is blocked by IP, if your carrier allows only a whitelist, or if the service itself refuses Russian users, like TikTok, Spotify or ChatGPT, zapret is useless: the site sees your Russian address.

Is zapret safe?

The code is open and has been read by thousands of people; there's nothing malicious in it. But there are three real risks.

  1. Fake builds. Tens of thousands of people search for zapret, so phishing copies with miners and stealers exist. Download only from GitHub, from the repositories bol-van/zapret and Flowseal/zapret-discord-youtube. Archives from file hosts, Telegram channels and "mirror sites" are a no.
  2. Antivirus alerts. The Windows version installs the WinDivert driver that intercepts network packets. Antiviruses often flag it; for the original build that's a false positive. If the alert is about an archive from an unknown site, though, it may be a real virus.
  3. Your ISP still sees everything. Zapret doesn't encrypt, so the carrier still knows which sites you open. Not a problem for most people, but don't expect privacy from zapret.

Legally, zapret is fine: Russian law has no fine for citizens using circumvention tools, see is VPN banned in Russia.

When zapret doesn't work

  • Mobile-data whitelists. The carrier passes only approved addresses; everything else is cut before DPI. You need a VPN disguised as a normal website, see how to bypass whitelists.
  • Discord since October 2024. Discord voice servers are partly blocked by IP, so zapret opens the chat for many people but calls drop. Comparison in Discord: zapret or VPN.
  • The ISP updated its DPI. Zapret profiles live for weeks, then stop working until an update. Normal for this kind of tool, but tiring.
  • Phones. On Android zapret runs only through awkward workarounds; on iPhone it doesn't exist.

Using zapret and a VPN together

Many people keep both: zapret on the home PC for YouTube speed, a VPN on the phone and for services that check your country. Just don't run both at once on the same device: zapret will mangle packets inside the VPN tunnel and the connection will keep dropping. Stop zapret before turning the VPN on.

Surok on a computer doesn't conflict with zapret as long as it's stopped. On phones Surok runs in its Android app and through Happ on iPhone; Russian sites go direct, foreign ones through Europe. Check that traffic goes through the VPN on the IP check page.

FAQ

Is zapret a virus? No, if downloaded from GitHub. Fake builds from other sites can be anything.

Does zapret change my IP? No. Sites see your real Russian address.

Does zapret work on phones? On Android only via non-standard methods, on iPhone not at all. A VPN is easier on phones.

Is zapret legal? Yes. There's no ban on circumvention tools for citizens.

Zapret or VPN? For YouTube on a home PC zapret is faster. For everything else, including mobile data and services that check your country, you need a VPN.

In short

Zapret fools the ISP's DPI and helps where a site is blocked only by traffic signatures. It doesn't change your IP and doesn't work on whitelists or with services that check your country. Download only from GitHub. If zapret failed, Surok gives three days free.

Try Surok
3 days free, no card needed. Apps for everything.

More to read