PIA v3.8.0 Sets WireGuard as Default Protocol for All Platforms

Private Internet Access has released version 3.8.0 of its VPN client, introducing significant changes to its default connectivity protocols. According to TechRadar, the Colorado-based provider has made WireGuard the standard protocol across all platforms, replacing OpenVPN as the primary connection method for new and existing users.

The update introduces the WireGuard-NT 1.1 kernel driver for Windows clients. PIA states in its patch notes that this specific driver can boost WireGuard speeds by more than three times on higher-bandwidth systems. This change aims to provide quicker access to faster connections in most typical usage scenarios, leveraging the protocol's modern architecture and lower CPU intensity compared to older standards.

Protocol Changes and Performance

WireGuard has long been available as an optional protocol within the PIA application, but OpenVPN remained the standard until this release. By switching the default, PIA ensures that users automatically utilize a faster, less resource-heavy connection without manual configuration. OpenVPN remains available as an optional choice, which supports businesses and large networks that depend on its established infrastructure and specific feature sets.

For Windows users specifically, the update also adds the OpenVPN DCO kernel driver. This addition can boost connection bandwidth by up to 100 percent, depending on the user's system specifications and connection quality. While OpenVPN is generally slower than WireGuard, this driver improvement helps mitigate performance gaps for users who must or choose to use the older protocol.

Obfuscation and Bug Fixes

The v3.8.0 update adds the AmneziaWG protocol to Linux and macOS clients. This feature allows users to obfuscate their VPN usage, disguising the fact that they are using a VPN rather than just encrypting their web traffic. This capability is designed to help users bypass VPN blockers in regions or environments that restrict such tools, while retaining the speed and efficiency benefits of WireGuard.

Users can activate the Amnezia protocol by navigating to the Protocol page, selecting WireGuard, and enabling the Obfuscation toggle. Additionally, the update addresses a macOS bug that caused the application to hang if the split tunnelling system extension setup was left incomplete in the system settings. This fix resolves a stability issue for Mac users configuring advanced network routing.

What should you do?

Security professionals and users should verify the integrity of the v3.8.0 download before installation. Those relying on OpenVPN for specific enterprise configurations should test the new default settings to ensure compatibility with their existing network rules. Users in restricted regions should review the obfuscation settings to determine if AmneziaWG provides necessary access without violating local terms of service.

What to do and how to stay safe: Private Internet Access

• Verify the digital signature of the PIA v3.8.0 installer to ensure it has not been tampered with before updating your client.
• Review your current protocol settings to confirm that WireGuard is now selected by default and assess any impact on existing firewall rules.
• Monitor connection stability after the update, particularly on Windows systems utilizing the new WireGuard-NT 1.1 kernel driver.
• Check for any incomplete split tunnelling configurations on macOS to prevent application hangs related to the recent bug fix.

Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Does PIA still support OpenVPN in version 3.8.0?

Yes, OpenVPN remains available as an optional protocol for users who require its specific infrastructure or features, though it is no longer the default.

How do I enable traffic obfuscation on Linux or macOS?

Users can activate the Amnezia protocol by going to the Protocol page, selecting WireGuard, and switching on the Obfuscation option.

What performance improvements are included for Windows users?

Windows clients now use the WireGuard-NT 1.1 kernel driver, which PIA claims can boost speeds by more than 3x on high-bandwidth systems, and the OpenVPN DCO driver for up to 100 percent bandwidth gains.