Logo

TAP support NO-ROOT

The most advanced multi-protocol Android VPN client.

The only one with TAP interface support without root permissions.

Connect to any OpenVPN (TUN/TAP), SSTP, WireGuard, AmneziaWG, SoftEther, ShadowSocks, SSH (TUN/TAP), OpenConnect (ocserv) and Cisco AnyConnect SSL gateway server and configure your VPN connection with full control over every detail.

PAUSED
Android Exclusive

Bridging Layer 2:
TAP without Root.

We're proud to offer the only solution on the store that can emulate a TAP interface and manage 802.1Q VLANs without root. Bring your LAN to Android.

App Features

A complete ecosystem for networking experts and demanding users.

Networking & Core Protocols

  • OpenVPN: Full support for TAP devices (No Root required), VLAN 802.1Q tagging, Obfsproxy (obfs2/obfs3), and advanced Scramble options.
  • WireGuard & AmneziaWG: High-performance modern protocols with integrated AmneziaWG obfuscation to bypass strict censorship.
  • SoftEther: Support for SoftEther TCP and UDP over DNS / NAT-T for versatile connectivity.
  • Enterprise Standards: SSTP support with EAP-TLS, EAP-MS-CHAPv2, and MS-CHAPv2/CHAP/PAP. Fully compatible with Cisco AnyConnect and OpenConnect SSL protocols.
  • Stealth & Shadowsocks: Secure tunneling via Shadowsocks (AEAD, AEAD-2022, Stream) and SSH Tun (TUN/TAP).

Advanced Security & Privacy

  • Port Knocking: FWKNOP, UDP, TCP, ICMP, URL.
  • Modern DNS: Secure your queries with DNS over HTTPS (DoH) and DNS over TLS (DoT).
  • Granular DNS Control: Split DNS by domain and local hosts mapping to override DNS requests.
  • Certificate Management: Import certificates in PEM, DER, and PKCS12 formats.
  • Biometric Lock: Secure your vpn connection with fingerprint or facial recognition.

Automation & System Integration

  • Intelligent Connectivity: Connect on demand, auto-connect on boot, and smart rules for WiFi, Mobile, and WiMAX networks (Auto connect/pause/disconnect).
  • App Filter (Split Tunneling): Choose exactly which apps go through the VPN and which stay on the local network.
  • Advanced Automation: Tasker/Locale plugin support for complex automation workflows.
  • System Integration: Quick Settings tiles, Widgets, and Dynamic Shortcuts for immediate control.

Device & Ecosystem Support

  • Wear OS: Dedicated companion app and complications for your smartwatch (Android 8.0+).
  • Network Versatility: Full IPv6 support, HTTP/SOCKS proxy support, and customizable HTTP headers.
  • Reliability: Failover VPN profiles to ensure you stay connected if a server goes down.
  • Maintenance: Robust Backup/Restore system for your entire configuration.
Big Screen Experience

Optimized for
Android TV

Don't settle for a mobile app stretched on a TV. We've built a dedicated interface to ensure the best VPN experience on your media center.

D-Pad Support

Navigate every menu using your standard TV remote.

Streaming Ready

Keep your streaming sessions private.

PAUSED

Frequently Asked Questions

Our core engine, optimized in C++, emulates a Layer 2 Ethernet stack over the standard Android VpnService. This allows the app to handle Ethernet frames and VLAN tagging (802.1Q) entirely in user-space, providing a real TAP experience for protocols like OpenVPN and SoftEther without needing system-level modifications.
VPN Client Pro supports a wide range of protocols: OpenVPN (TUN/TAP), WireGuard, AmneziaWG, SSTP, SoftEther, Shadowsocks, SSH Tun, OpenConnect (ocserv), and Cisco AnyConnect SSL. It's designed to be a universal client for any enterprise or personal VPN server.
The basic features for the OpenVPN protocol are free for all users. To use other protocols (such as WireGuard, SSTP, etc.) and advanced features (such TAP, Auto Connect, Connect on Demand, Tasker plug-in, etc.), you need to purchase a license.
Yes! VPN Client Pro offers numerous automation options, such as automatically connecting at device startup or based on network type (WiFi, Mobile, Ethernet, etc.). It also includes a Tasker/Local plugin.
Absolutely. The app uses the latest encryption standards provided by each protocol (like ChaCha20 for WireGuard or AES-GCM for OpenVPN). We do not collect any personal data or browsing logs. All your settings are saved on your device in an AES-GCM encrypted format, and can be further protected with biometric authentication.
No. The app does not collect or share any user data with third parties.
The location permission is only required to read the current Wi-Fi SSID, which is essential for the automatic connection feature to work. The permission is only requested if actually required based on the configuration. The device's geographic location is never read.
The camera permission is required to import settings from QR codes. This permission is requested and used only to acquire QR codes.
The Bluetooth (nearby devices) permission is used to disconnect the VPN when the device is connected to user-selected Bluetooth devices. The permission is only requested if actually required based on the configuration.
Yes! With the App Filter (Split Tunneling) feature, you can specifically select which apps are allowed to use the VPN tunnel and which are not.
Yes! It's also available on Android TVs with an optimized user interface.
Yes! There's a companion app for Wear OS that lets you connect or disconnect the VPN directly from the watch, as well as a "complication" for quick access to your favorite profiles.

Ready to take control of your VPNs?

Download the Android VPN client that gives you complete control.