Server and client update on the same day.
If a region's protocol starts getting fingerprinted, Iceslab rotates and Iceshard follows the same hour. Universal clients can't do this — they ship on the App Store's timeline.
icecompany.tech/iceshard
/ Native client|Planned — not yet built
Iceshard
The first-party native client for Iceslab. Five platforms. Reads Iceslab subscriptions — and only Iceslab subscriptions. By design.
We're not building another universal proxy client. Iceshard only works with VPN services running on Iceslab — because the value of a client app is the part you don't have to think about, and the only way to deliver that is to control both halves.
Why first-party
Four things you get from a closed loop
Signed bundles, pinned certs, no random parsers.
Iceshard never parses a vless:// URL from the public internet. The subscription comes from your Iceslab instance via signed channel. Smaller attack surface, less to go wrong.
Consistent across Windows, macOS, Linux, iOS, Android.
Same buttons in the same places. Switch from your laptop to your phone and the muscle memory carries. No "wait, where's the region picker on this one?"
Sign in. Done. That's the setup flow.
No copy-pasting URLs. No "which format does my client want?" Iceshard discovers your subscription from your Iceslab operator the second you sign in.
Platforms
Wherever
you live
- Windows10 / 11 · x64 · arm64
Native tray app, WireGuard-style system VPN integration, MSI installer.
.msi · signed · auto-update - macOS14+ · Apple Silicon & Intel
Menu bar app, signed Network Extension, no kernel kext.
.dmg · notarized - Linuxx64 · arm64 · GTK & Qt
AppImage, Flatpak, deb. Headless CLI mode for servers / containers.
no sudo daemon - iOS17+ · SwiftUI shell
NetworkExtension provider, Always-On VPN, Shortcuts integration.
App Store + TestFlight - Android10+ · Kotlin shell
VpnService API, Always-On, quick tile. Reproducible APK builds.
Play Store + F-Droid + .apk
Inside the app
Connect, switch, read the room
Iceshard - IcepathVPN (powered by Iceslab)
Connected
Netherlands — AMS-01
02:14:36 uptime
Latency
42 ms
↘ -2ms
Protocol
hysteria2
Today
1.42 GB
↑480MB ↓940MB
Status
healthy
↑ 100% / 7d
Switch region
- Germany — FRA-0156 ms
- Finland — HEL-0161 ms
- Singapore — SIN-02186 ms
Desktop preview — click the sidebar tabs to explore
Built for Iceslab
Iceshard only works
if your VPN runs on Iceslab.
Either you subscribe to Icepath (which runs on Iceslab), or your VPN operator runs Iceslab themselves. Either way you sign in once with a code from your operator and Iceshard takes care of the rest — the subscription flows down through the panel, you don't paste anything.
01
Operator runs Iceslab
They provision your account
02
You get a sign-in code
Telegram, email, QR — whichever they pick
03
Open Iceshard, paste code
Subscription syncs automatically
04
Connected
No URL pasting, no manual config
Not yet built
We'll tell you
when there's something to install.
Iceshard is on the roadmap, not the build queue yet. We'll start the moment Iceslab has enough operators that "branded native client" is a credible up-sell — current estimate, late 2026.
No spam · one email when builds are downloadable