Short answers about Sentinel accounts, plans, and access.
Answers support forum-style Markdown (bold, lists, links, code). Permanent anchors stay stable for deep links.
Create a free account, verify your email when prompted, open the dashboard, start a session, download your personal access profile, and connect with the official access client. Free plans use short sessions; Premium removes the time limit and unlocks Trusted Web Proxy.
Any device with an official access client can connect: Windows, macOS, Linux, iOS, and Android. Dedicated Sentinel mobile apps are on the roadmap; until then use access plus the portal for session control and proxy features.
Email verification confirms you control the address and reduces abuse. Some features (dashboard actions, referrals, full product notes) require a verified account.
Use the Forum dashboard → Security tab for password changes, and Profile for your public display name and community bio. VPN sessions are controlled from the main service dashboard.
Premium subscriptions are handled via Stripe from the Billing page. Card data is processed by the payment provider; Sentinel stores subscription references and plan status, not full card numbers.
A VPN creates an encrypted tunnel between your device and Sentinel. Your traffic enters the internet from the service network according to your plan, which helps protect connectivity on untrusted networks and provides a stable, account-bound private path.
Guest sessions are intentionally time-limited. Start a new session from the dashboard when you need access again, or upgrade to Premium for unlimited active session time.
From the dashboard or the Download profile page after login. Configs are personal; protect the private key material and do not post it in chats or public forums.
Confirm your portal session is active, the profile is the latest download for your account, the device clock is correct, and local firewall/network policy allows UDP for access. If you recently stopped the session in the portal, start it again before reconnecting.
Trusted mode (Premium+) fetches sites via Sentinel-owned egress. Public / experimental mode may use third-party uncontrolled paths that we do not control - useful for testing, not for secrets or banking. Prefer Trusted or the VPN for confidential work.
Destination addresses are carried in time-limited encrypted tokens bound to your account so the target is not exposed as plain text in the path. Tokens expire; open a new proxy session from the portal when needed.
Sentinel blocks private network ranges and cloud metadata endpoints to reduce restricted destinations abuse. Destination sites may also refuse proxy traffic. That is expected hardening, not a bug.
We process operational data needed to run the service: account identifiers, session timing, security events, and limited proxy metadata. We do not sell browsing history. Details are in the Privacy Policy.
Yes. Elevated operators can enrol TOTP MFA. Regular users should still use a strong unique password. MFA setup is available from account security links when enabled for your role.
Sensitive administration is network-gated: operators connect through Sentinel before using elevated consoles. That reduces exposure of management interfaces to the open internet.
Each member has a Referral ID plus secret tokens. Create managed invite links with optional expiry, max clicks, and max signups. Share the full URL; rotating or revoking a token does not need to kill every older managed link unless you revoke it.
Discussions, guides, and FAQ threads moderated by staff. Manage your public forum profile from the Forum dashboard.
The token may be revoked, expired, or over its click/signup limit. Ask the inviter for a fresh managed link, or register without a referral and ask an administrator to attach attribution if appropriate.
Login, proxy, and some download endpoints are rate-limited against abuse. Wait and retry, avoid rapid refreshes, and contact support if the block persists after a calm interval.
Stable anchors: /v2/faq#kw-term. Content is served from the secure FAQ JSON pipeline.
A lean, high-performance VPN protocol used by Sentinel for client tunnels. You import a personal configuration file into the official access profile app on your device.
Your Sentinel login identity. Holds plan, session rights, referral links, and forum profile. Keep the password private and unique.
How much data can transfer per second. Shared infrastructure, Wi-Fi quality, and destination servers all affect real-world speed.
A digital certificate helps a client verify it is talking to the intended HTTPS server. Browser warnings usually mean validation failed - do not ignore them for sensitive sites.
Classless Inter-Domain Routing notation such as 10.8.0.0/24 describing a block of addresses assigned to a plan or peer.
An attack that tricks a logged-in browser into submitting unwanted actions. Sentinel forms use CSRF tokens to mitigate this.
Domain Name System translates human names (example.com) into IP addresses. DNS behaviour can differ on VPN vs local network depending on client and policy.
Where traffic leaves the service toward the public internet. Trusted proxy egress uses addresses under operational control; public relays do not.
Mathematical protection so data cannot be read without keys. Used in access profile tunnels, HTTPS/TLS, and Sentinel’s encrypted proxy tokens.
Time-limited Sentinel access for evaluation and light use. Upgrade to Premium for unlimited sessions and Trusted Web Proxy.
Software or hardware that allows or blocks connections by rule. Corporate or hotel firewalls sometimes interfere with VPN or uncommon ports.
An older protocol for transferring files. Classic FTP is often unencrypted; prefer SFTP/FTPS or HTTPS uploads. Sentinel focuses on VPN and web proxy, not hosting FTP servers for customers.
Hypertext Transfer Protocol - the language browsers use to request pages and APIs. Plain HTTP is unencrypted; prefer HTTPS on the public internet.
HTTP secured with TLS encryption and certificate authentication. Protects data between your browser and the destination site (independent of whether you also use a VPN).
The addressing system that routes packets across networks. IPv4 addresses look like 203.0.113.10; ranges are often written in CIDR notation.
How long packets take to travel. VPN and proxy hops add some latency; choose nearby regions when available and avoid overloaded public relays.
In networking, a “layer” refers to a level in models such as the OSI or TCP/IP stack (for example link, internet, transport, application). VPN tunnels typically encapsulate higher-layer traffic inside encrypted packets.
An extra login factor beyond the password - typically a rotating code from an authenticator app (TOTP). Strongly recommended for elevated operators.
A teaching model that splits networking into layers from physical media up to application protocols. Helpful vocabulary when discussing where encryption or proxying sits.
In access profile, a peer is one side of the tunnel (your device or the server), identified by public keys and allowed IP ranges.
A 16-bit number that distinguishes services on a host (for example 443 for HTTPS, 22 for SSH). Firewalls may block ports required by some applications.
Subscription tier for continuous VPN use and Trusted Web Proxy features. Managed via the Billing page.
A proxy fetches content on your behalf. Sentinel’s Web Proxy opens destinations via encrypted portal tokens; Trusted mode uses Sentinel egress, Public mode may use third-party relays.
When someone registers with your invite link, they can be attributed to your account for status tracking (free vs Premium). Managed links support expiry and usage caps.
An attack where a service is tricked into requesting internal addresses. Sentinel blocks private ranges and metadata IPs on the proxy module to reduce this risk.
The combined technical and organisational measures - encryption, authentication, rate limits, least privilege, audit logs - that keep accounts and infrastructure safer.
In Sentinel, a VPN session is the server-side window during which your tunnel is authorised. Guest sessions expire; Premium sessions can remain active without a short hard stop.
Secure Shell provides encrypted remote login and file transfer (including SFTP). Teams often use SSH over a VPN path for an extra control layer to internal systems.
Transmission Control Protocol - connection-oriented transport used by most web and many application protocols. Ensures ordered delivery with retransmission.
Transport Layer Security encrypts application connections such as HTTPS. Complements VPN encryption rather than replacing site-level HTTPS.
A random secret used in invite links or encrypted proxy URLs. Tokens should be treated like passwords: do not post them publicly and rotate if leaked.
Codes that change every 30 seconds in apps such as Aegis, Google Authenticator, or 1Password. Used for Sentinel operator MFA.
A logical encrypted path that wraps your packets so intermediaries on the local network cannot easily read or alter the inner traffic.
User Datagram Protocol - low-overhead transport often used by access profile and real-time applications. Faster handshakes, no built-in retransmission.
An encrypted tunnel between your device and a remote service so traffic is protected in transit and can exit via a controlled network path. Sentinel uses modern access profile tunnels bound to your account.
Account-specific help: Contact with your Sentinel email. Product scope: Product guide.