Frequently asked questions

Short answers to the questions we hear most. Each links to a fuller guide if you want the detail.

About TYO Reach

What is TYO Reach?

TYO Reach is a secure access agent — a small app that runs in your system tray and gets you to the thing you're trying to reach, using the lightest path that works.

For individuals: it routes your chosen browser through our gateway so region-locked or blocked content opens up. Only the one browser you pick is affected.

For organisations: it creates secure TCP tunnels (RDP, SSH, databases, internal web apps) to resources inside your office, and can turn a machine inside the LAN into a relay so the whole team gets access — no VPN, no firewall changes, no kernel driver.

More in How Reach differs from a VPN.

Is Reach a VPN?

Not in the traditional sense. A VPN reroutes your whole device — every app, all the time. Reach is more targeted:

  • For individuals, it routes only the one browser you choose. Everything else is untouched.
  • For corporate teams, it tunnels specific TCP ports you configure — RDP to the office server, SSH to a dev box, a database port — without touching other traffic.

Neither mode requires a kernel driver or always-on system overhead. More detail in How Reach differs from a VPN.

Will it slow down my computer?

No. Only the browser you choose (or the specific tunnels you configure) is affected. The rest of your computer runs normally, and nothing sits in the background when Reach is switched off.

Browsers & devices

Which browsers can I use?

Any Chromium-based browser — Chrome, Edge, Brave, Opera — or Firefox. Safari and a few browsers that can't be configured this way aren't supported. Only the browser you select is routed. See Choosing a browser.

Which devices does Reach run on?

A desktop app for Windows, macOS and Linux (from the Download page), plus an Android app (iOS coming soon). The desktop app also handles TCP forwarding and agent mode.

Getting started

How do I get started?

Create a free account (no card needed), download the app, choose your browser, and switch it on. Full walk-through in Getting started.

Do I need a credit card to try it?

No. Your first 2 GB is free with no card and no verification, so you can confirm the connection works first.

Windows asked me about security — is that normal?

Yes. The first time you run the installer or switch the proxy on, Windows may show a SmartScreen prompt and a Defender Firewall notice. Both are one-time. Step-by-step in the Installation guide.

If you're on a managed corporate device (endpoint protection software like PractiseProtect), see Managed Windows devices instead.

How do I check Reach is actually working?

Open myip.tyo.com.au in the browser Reach is set up for. With Reach on, you'll see our gateway address; off, your own. If they differ, Reach is working.

TCP forwarding & agent mode

Can I use Reach to access my office systems remotely?

Yes — that's one of the main corporate use cases. In the tray menu under TCP Forwards you add a forward: a label, the remote host (e.g. your office RDP server) and port. Reach creates a local port (localhost:PORT) that tunnels to that host through the Reach gateway. Open your RDP client, SSH client, or database tool and point it at localhost:PORT.

For RDP specifically, Reach generates a .rdp file automatically — just click "Save .rdp" and open it. See Group policy & TCP forwards.

What is agent mode?

Agent mode turns a machine into a relay inside your LAN. You run Reach in agent mode on one computer in the office; other group members can then forward to any host inside that LAN from outside — the traffic travels through the agent's tunnel rather than needing the target to be publicly reachable.

Useful for: WFH staff reaching office-only file servers, branch office access, administration of NAS or IoT devices behind NAT. Enable via the tray → Settings → Agent mode, or push it via group policy.

Can a group owner push TCP forwards to all members?

Yes. Group forwards appear automatically in every member's tray with a [group] label. Members can add their own forwards on top; the group admin can also mark a group forward as overridable if members should be able to replace it with their own setting. Locked group forwards can't be Ctrl+clicked away by accident.

Plans, data & billing

What does it cost?

  • Free — 2 GB/month, 1 device.
  • Pro — 50 GB/month, up to 3 devices.
  • Business — 200 GB/month, up to 10 devices.
  • Corporate (group) — per-seat, no data cap, central policy.

See current pricing; upgrade any time from your dashboard.

What happens when I reach my data limit?

Reach simply pauses — no surprise charges, ever. A notification appears with an option to top up. Allowances reset on the 1st of the month. Corporate group members have no data limit. See Managing your data.

Privacy & support

Does Reach make me anonymous?

Reach routes your browser (or specific tunnels) through our gateway, so the destination sees our IP address rather than yours. It isn't a full anonymity tool — it's built for reach, not for encrypting everything you do. If you need whole-device privacy, use a full VPN. See How Reach differs from a VPN.

Who runs Reach, and where's my data handled?

TYO Reach is built by TYO Lab, an Australian business. Data handling is done in Australia. See our privacy policy.

Something isn't working — what do I check?

Make sure Reach is on and you're using the browser it's set up for, then reload. More fixes in Troubleshooting.

How do I get help?

Get in touch and we'll help.