The most advanced multi-protocol Android VPN client.
The only one with TAP interface support without root permissions.
Connect to any OpenVPN (TUN/TAP), SSTP, WireGuard, AmneziaWG, SoftEther, ShadowSocks, SSH
(TUN/TAP), OpenConnect (ocserv) and Cisco AnyConnect SSL gateway server and configure your VPN
connection with full control over every detail.
PAUSED
Android Exclusive
Bridging Layer 2: TAP without Root.
We're proud to offer the only solution on the store that can emulate a TAP interface and manage
802.1Q VLANs without root. Bring your LAN to Android.
App Features
A complete ecosystem for networking experts and demanding users.
Networking & Core Protocols
OpenVPN: Full support for TAP devices (No Root required), VLAN
802.1Q tagging, Obfsproxy (obfs2/obfs3), and advanced Scramble options.
WireGuard & AmneziaWG: High-performance modern protocols with
integrated AmneziaWG obfuscation to bypass strict censorship.
SoftEther: Support for SoftEther TCP and UDP over DNS / NAT-T for
versatile connectivity.
Enterprise Standards: SSTP support with EAP-TLS, EAP-MS-CHAPv2,
and MS-CHAPv2/CHAP/PAP. Fully compatible with Cisco AnyConnect and OpenConnect SSL
protocols.
Stealth & Shadowsocks: Secure tunneling via Shadowsocks (AEAD,
AEAD-2022, Stream) and SSH Tun (TUN/TAP).
Advanced Security & Privacy
Port Knocking: FWKNOP, UDP, TCP, ICMP, URL.
Modern DNS: Secure your queries with DNS over HTTPS (DoH) and DNS
over TLS (DoT).
Granular DNS Control: Split DNS by domain and local hosts mapping
to override DNS requests.
Certificate Management: Import certificates in PEM, DER, and
PKCS12 formats.
Biometric Lock: Secure your vpn connection with fingerprint or
facial recognition.
Automation & System Integration
Intelligent Connectivity: Connect on demand, auto-connect on boot,
and smart rules for WiFi, Mobile, and WiMAX networks (Auto connect/pause/disconnect).
App Filter (Split Tunneling): Choose exactly which apps go through
the VPN and which stay on the local network.
Advanced Automation: Tasker/Locale plugin support for complex
automation workflows.
System Integration: Quick Settings tiles, Widgets, and Dynamic
Shortcuts for immediate control.
Device & Ecosystem Support
Wear OS: Dedicated companion app and complications for your
smartwatch (Android 8.0+).
Network Versatility: Full IPv6 support, HTTP/SOCKS proxy support,
and customizable HTTP headers.
Reliability: Failover VPN profiles to ensure you stay connected if
a server goes down.
Maintenance: Robust Backup/Restore system for your entire
configuration.
Big Screen Experience
Optimized for Android TV
Don't settle for a mobile app stretched on a TV. We've built a dedicated interface to
ensure the best VPN experience on your media center.
D-Pad Support
Navigate every menu using your standard TV remote.
Streaming Ready
Keep your streaming sessions private.
PAUSED
Frequently Asked Questions
Our core engine, optimized in C++, emulates a Layer 2 Ethernet stack over the standard Android
VpnService. This allows the app to handle Ethernet frames and VLAN tagging (802.1Q) entirely in
user-space, providing a real TAP experience for protocols like OpenVPN and SoftEther without
needing
system-level modifications.
VPN Client Pro supports a wide range of protocols: OpenVPN (TUN/TAP), WireGuard, AmneziaWG,
SSTP,
SoftEther, Shadowsocks, SSH Tun, OpenConnect (ocserv), and Cisco AnyConnect SSL. It's designed
to be
a universal client for any enterprise or personal VPN server.
The basic features for the OpenVPN protocol are free for all users.
To use other protocols (such as WireGuard, SSTP, etc.) and advanced features
(such TAP, Auto Connect, Connect on Demand, Tasker plug-in, etc.),
you need to purchase a license.
Yes! VPN Client Pro offers numerous automation options, such as automatically connecting at
device startup
or based on network type (WiFi, Mobile, Ethernet, etc.).
It also includes a Tasker/Local plugin.
Absolutely. The app uses the latest encryption standards provided by each protocol (like
ChaCha20
for WireGuard or AES-GCM for OpenVPN). We do not collect any personal data or browsing logs.
All your settings are saved on your device in an AES-GCM encrypted format, and can be further
protected with biometric authentication.
No. The app does not collect or share any user data with third parties.
The location permission is only required to read the current Wi-Fi SSID, which is essential for
the automatic connection feature to work.
The permission is only requested if actually required based on the configuration.
The device's geographic location is never read.
The camera permission is required to import settings from QR codes.
This permission is requested and used only to acquire QR codes.
The Bluetooth (nearby devices) permission is used to disconnect the VPN when the device is
connected to user-selected Bluetooth devices.
The permission is only requested if actually required based on the configuration.
Yes! With the App Filter (Split Tunneling) feature, you can specifically select which apps are
allowed to use the VPN tunnel and which are not.
Yes! It's also available on Android TVs with an optimized user interface.
Yes! There's a companion app for Wear OS that lets you connect or disconnect the VPN directly
from the watch, as well as a "complication" for quick access to your favorite profiles.
Ready to take control of your VPNs?
Download the Android VPN client that gives you complete control.