One stable online identity — wherever you've settled
Moving abroad long-term means your logins suddenly come from a new country, and a lot of the services you rely on notice. TYO Reach gives your chosen apps a single, stable exit IP and MFA-protected access, so your accounts stop treating a routine login like a threat.
What changes when your login moves countries
Most online security isn't just checking your password — it's checking whether you look like you. A login from a country you've never used before is exactly what looks suspicious.
Security systems flag the move, not just you
Banks, email providers, and work tools score logins partly by location. The moment your IP jumps from Australia to wherever you've relocated, that's often enough to trigger extra verification, a temporary hold, or a call to a fraud line — right when you're jetlagged, on an unfamiliar phone number, and least equipped to deal with it.
Every move resets the clock
Expats don't move once. A new apartment, a new city, a new country a year or two later — each move is a fresh "we don't recognise this login" flag on every account that tracks location, repeated every time.
You're on unfamiliar networks while you settle in
Home internet takes time to set up in a new country. Until then you're on hotel Wi-Fi, a temporary SIM, or a shared network you don't control — exactly when you're also trying to sort out banking, paperwork, and logins that matter.
Some destinations block the services you rely on outright
This is a different problem to the ones above. If you've relocated somewhere with active internet filtering — mainland China is the most common example for Aussie expats — everyday tools like Gmail and Facebook aren't flagging your login, they're simply unreachable. Staying in touch with work and family needs a different fix than a stable IP.
A stable exit IP for the apps that need it
Set it up once. The apps you add to the routing list always appear to be coming from the same address, no matter which country you're actually in.
One IP, wherever you live
Your chosen traffic exits from the same stable gateway IP whether you're in Berlin, Singapore, or back in Australia for a visit. The services you've added see one consistent address instead of a different country every time you relocate.
Fewer 'unusual activity' security holds
Because the IP doesn't change with every move, you trip fewer of the location-based checks that banks, email providers, and SaaS tools use to flag risk — the checks that can lock you out at the worst possible time.
Selective routing — only what you need
Add the accounts where a stable identity matters — banking, a work tool, whatever keeps flagging you. Everything else bypasses the gateway entirely. You pay data only for what you route, and add no latency to services that don't need it.
MFA protects your gateway account
Your TYO Reach account is protected by TOTP authenticator codes or Verified Push. Even on an unfamiliar overseas network, your gateway session is authenticated end-to-end. A stolen password alone is not enough to access your account.
Works across all your devices
TYO Reach runs on Android, iOS, Windows, macOS, and Linux. One account covers every device you use. Your phone and laptop both route through the same gateway simultaneously — no per-device licence required.
Works through most overseas networks
Reach connects to the gateway over standard HTTPS — the same protocol as any web browser. If your home network or workplace internet in your country of residence allows regular browsing, Reach works. No special ports, no kernel modules.
Reaches blocked services on filtered networks too
This is separate from the stable-IP benefit above. For networks with active filtering — mainland China being the case most Aussie expats ask about — Reach includes a WebSocket tunnel transport and a Hong Kong gateway aimed at this exact situation, so tools like Gmail and Facebook stay reachable. Conditions on restricted networks change, so this isn't an absolute guarantee — see the docs for current status.
Set up before you need it
Create your Reach account and enable MFA
Sign up with your email or Google account. Set up MFA while you're on a reliable connection — it is much easier to handle before you're abroad and dealing with roaming data or an unfamiliar network. Your first 2 GB is free with no card required.
Add the accounts that flag you most
In the Reach app, add the domains for whichever services keep challenging your logins or holding your sessions after a move — often banking, email, or a work tool. You can add more at any time.
Download the app on all your devices
Install Reach on your laptop and your phone before you move. Test it from home — confirm your added accounts log in cleanly. Verifying before you land means no surprises after you arrive.
Browse normally, wherever you land
With Reach running, everything in your routing list exits from the same stable address regardless of where you actually are. Everything else — your local banking, local maps, local services — goes direct at full speed.
What Reach does and doesn't do
Understanding the tradeoffs helps you set it up correctly and avoid surprises.
Reach does not give you an Australian-appearing IP
This matters, so it's worth being direct: TYO Reach's gateway does not exit from Australia. It will not unlock Australian banking, streaming, or government services that specifically geo-check for an Australian IP address. What it gives you is one stable identity for the accounts you route through it — useful for cutting down location-based security friction, not for appearing to be in a particular country.
Reach routes selected apps — it is not a full VPN
Reach proxies the specific domains and apps you add to the routing list. Your other internet traffic — local services, general browsing, video calls — goes direct on your local connection.
SMS codes still need a working number
Reach resolves the IP-based part of a login challenge. If a service separately requires a one-time code sent to a specific phone number, you still need access to that number — physical SIM, eSIM, or forwarding service. Reach cannot receive SMS verification codes on your behalf.
No guarantees against fraud checks
A stable IP reduces the location-based signal that triggers security holds, but no gateway can guarantee any particular service will never challenge a login. Fraud detection policies vary by provider and can change.
Does Reach give me an Australian IP so I can access Australian banking or streaming from overseas?
No. TYO Reach does not provide an Australian-appearing exit IP, so it will not unlock services that specifically require one — Australian bank overseas-login checks, ABC iView, 9Now, myGov, and similar geo-restricted Australian services all still see a non-Australian IP through Reach. What Reach gives you is a single stable exit IP for the accounts you choose to route — genuinely useful for reducing "new location" security friction, but it's not a way to appear to be in Australia.
Will a stable IP stop every security challenge?
It reduces the most common trigger — a login suddenly coming from an unfamiliar country or city — but it's not a guarantee. Providers use other signals too (device fingerprint, browser, time of day), and fraud policies vary and change. Most users see meaningfully fewer challenges once their routed accounts settle on one IP.
Can I use this for work tools from my Australian employer?
If your employer's tools use IP allowlisting, a stable Reach IP can help — but only if your employer specifically allowlists it. Reach doesn't guarantee its IP is already trusted by any third party; you (or your IT team) would need to add it, the same as any other network change.
I've moved to mainland China — will Reach let me use Gmail and Facebook there?
That's the most common restricted-network question we get from Aussie expats, and it's a genuinely different feature from the stable-IP one this page is mostly about. Reach includes a WebSocket tunnel transport built for actively filtered networks, plus a Hong Kong gateway aimed at exactly this situation, so Gmail, Facebook, and similar blocked services stay reachable for most users. Filtering conditions in China change over time, so this isn't a guarantee for every network or moment — check the docs for current status, or get in touch and we'll talk through your specific setup.
Does Reach work in other countries with internet restrictions?
Reach connects to the gateway over HTTPS, which passes through most networks that allow general web browsing. In countries with stricter filtering, the same WebSocket tunnel mode used for China provides an additional layer. Reliability varies by country — check the documentation or contact support for guidance on your specific destination.
Can I still use local accounts abroad without Reach interfering?
Yes — just don't add a domain to the routing list. Reach is per-domain: only the services you explicitly add go through the gateway. Your local banking, local maps, and local services all go direct and are not affected.
Can I use Reach on multiple devices at the same time?
Yes — one account covers all your devices simultaneously. Your phone and laptop can both route through the same gateway at the same time. There is no per-device limit on personal plans.
How much data does this typically use?
Banking and account-login sessions are low-bandwidth — typically a few megabytes per visit. If you route anything heavier, plan accordingly. See the pricing page for current plan allowances.
Is Reach built and operated in Australia?
Yes. TYO is an Australian company (ABN registered) and support operates in AEST business hours — even though the gateway itself isn't an Australian exit point. When you subscribe to Reach, you're supporting an Australian product.
What happens if I move again?
Nothing to reconfigure. Your gateway IP stays the same regardless of which country you move to next — that consistency is the whole point.
One stable identity, wherever you've landed
2 GB free, no card needed. Your gateway IP is available the moment you sign up.