strongSwan VPN Client
Free App
Advertisements
About strongSwan VPN Client
Official Android 4+ port of the popular strongSwan VPN solution.
# FEATURES AND LIMITATIONS #
* Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - strongSwan VPN Client won't work on these devices!
* Uses the IKEv2 key exchange protocol (IKEv1 is not supported)
* Uses IPsec for data traffic (L2TP is not supported)
* Full support for changed connectivity and mobility through MOBIKE (or reauthentication)
* Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS is also supported
* Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739
* VPN gateway certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the gateway can also be imported directly into the app.
* IKEv2 fragmentation is supported if the VPN gateway supports it (strongSwan does so since 5.2.1)
* Split-tunneling allows sending only certain traffic through the VPN and/or excluding specific traffic from it
* Per-app VPN allows limiting the VPN connection to specific apps, or exclude them from using it
* The IPsec implementation currently supports the AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2 algorithms
* Passwords are currently stored as cleartext in the database (only if stored with a profile)
* VPN profiles may be imported from files (this is the only reason why the app requests android.permission.READ_EXTERNAL_STORAGE)
Details and a changelog can be found on our wiki: https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient
# EXAMPLE GATEWAY CONFIGURATION #
This client can be used with the following gateway configuration that is also compatible with the Windows 7+ Agile VPN client:
https://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig
But please note that the host name configured with a VPN profile in the app *must be* contained in the gateway certificate as subjectAltName.
# FEEDBACK #
Please post bug reports and feature requests on our wiki: https://wiki.strongswan.org/projects/strongswan/issues
If you do so, please include information about your device (manufacturer, model, OS version etc.).
The log file written by the key exchange daemon can be sent directly from within the application.
# FEATURES AND LIMITATIONS #
* Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - strongSwan VPN Client won't work on these devices!
* Uses the IKEv2 key exchange protocol (IKEv1 is not supported)
* Uses IPsec for data traffic (L2TP is not supported)
* Full support for changed connectivity and mobility through MOBIKE (or reauthentication)
* Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS is also supported
* Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739
* VPN gateway certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the gateway can also be imported directly into the app.
* IKEv2 fragmentation is supported if the VPN gateway supports it (strongSwan does so since 5.2.1)
* Split-tunneling allows sending only certain traffic through the VPN and/or excluding specific traffic from it
* Per-app VPN allows limiting the VPN connection to specific apps, or exclude them from using it
* The IPsec implementation currently supports the AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2 algorithms
* Passwords are currently stored as cleartext in the database (only if stored with a profile)
* VPN profiles may be imported from files (this is the only reason why the app requests android.permission.READ_EXTERNAL_STORAGE)
Details and a changelog can be found on our wiki: https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient
# EXAMPLE GATEWAY CONFIGURATION #
This client can be used with the following gateway configuration that is also compatible with the Windows 7+ Agile VPN client:
https://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig
But please note that the host name configured with a VPN profile in the app *must be* contained in the gateway certificate as subjectAltName.
# FEEDBACK #
Please post bug reports and feature requests on our wiki: https://wiki.strongswan.org/projects/strongswan/issues
If you do so, please include information about your device (manufacturer, model, OS version etc.).
The log file written by the key exchange daemon can be sent directly from within the application.
All Application Badges
Good rating
Free
downl.
downl.
Android
4.0.3+
4.0.3+
Bug
buster
buster
Android app
App History & Updates
What's Changed
# 1.9.5 #
- IKE/ESP algorithms configurable
# 1.9.4 #
- Supports delta CRLs
- Bug fixes (see website for details)
# 1.9.3 #
- Verifies server certificates via OCSP
- Caches CRLs in the app directory (can be cleared via main menu)
- Adds a 'reconnect' button in the 'currently connected' dialog
# 1.9.5 #
- IKE/ESP algorithms configurable
# 1.9.4 #
- Supports delta CRLs
- Bug fixes (see website for details)
# 1.9.3 #
- Verifies server certificates via OCSP
- Caches CRLs in the app directory (can be cleared via main menu)
- Adds a 'reconnect' button in the 'currently connected' dialog
Version update strongSwan VPN Client was updated to version 1.9.5
Version update strongSwan VPN Client was updated to version 1.6.2
Version update strongSwan VPN Client was updated to version 1.5.0
Version update strongSwan VPN Client was updated to version 1.4.5
What are users saying about strongSwan VPN Client
R
by R####:
by R####:
Love the app. Would be nice to have a start vpn on launch of app option so I can automate starting and killing a vpn on wifi to mitigate KRACK. Or even just allow broadcasts so I can use Automate!
R
by R####:
by R####:
Very well-designed app. Easy-to-use, includes good debugging features, and has worked flawlessly for me, which is something I cannot say of most software. Connections are made very quickly and it comes with all options I desire for a VPN app.
B
by B####:
by B####:
No application is showed when i try to exclude some apps using the VPN. My device is huawei mate9. I have found the solution. it need to go to phone manager->permissions->permission access history->select strongswan->allow to read installed app list.
C
by C####:
by C####:
Not working on android 8.1 Please add autostart at boot option
Z
by Z####:
by Z####:
Great for secure VPN inside my home network.
R
by R####:
by R####:
Works nicely together with IKEv2
V
by V####:
by V####:
Doesn't support pre shared key
R
by R####:
by R####:
not working on android 8.1 beta , pls checkout GitHub issue
R
by R####:
by R####:
What is the passwkord
R
by R####:
by R####:
I installed this application recommended by nordvpn support so that I can speed up my connection. It doesn't work at all. I followed instructions step by step and it won't connect at all. I click on it to connect and nothing happens. Reading the other reviews it seems I'm not the only one. Fix this or no one will be able to use it.
R
by R####:
by R####:
Was working perfectly on previous version on my Android 4.4, but this upgrade not even able to connect to vpn and saying Strongswan stop working, jump out from the apps. Fix please. 5 Jul, it works with new update. Thanks for the prompt action.
R
by R####:
by R####:
We are having problems connecting. It's hit or miss. Also it would be great to have this app auto-connect on startup and reconnect if the connection breaks. Happy to pay for a pro version with such features.
R
by R####:
by R####:
Yeah thanks, the new update indeed fixes the crashes! Now it works perfectly as before, and I love the option to exclude certain apps from the VPN.
R
by R####:
by R####:
Have to add the same profile everyday because eventually the previous one fails to connect. Other than this, it works flawlessly for me.
R
by R####:
by R####:
Nice app. Last update was great. I have a couple of apps that don't work with VPN and app selection option is great. It would be nice to have a Connect on Boot feature.
Z
by Z####:
by Z####:
Unable to import CA certificate. the root.der file appears as obsolete always.:( Waiting for your.solution.
R
by R####:
by R####:
don't work properly when i updated to 1.9.2 . trying to find what version i used before, and roll back.
R
by R####:
by R####:
It will be 5 if it implement always-on vpn
L
by L####:
by L####:
Works flawlessly. Really love parsing through the log to view what's going on behind the scenes.
R
by R####:
by R####:
Works great with nord vpn. Just have to make sure always on vpn setting is off.
R
by R####:
by R####:
Perfect now with split tunneling and per app-vpn.
R
by R####:
by R####:
Using this with Windscribe vpn and it works great for my needs
V
by V####:
by V####:
it works nicely. Thank you so much.
R
by R####:
by R####:
Best (only?) IKEv2 client
X
by X####:
by X####:
Bad
W
by W####:
by W####:
Seem that fc issue has been fixed now
P
by P####:
by P####:
Great VPN client. Basically the only ikev2 ipsec client for Android! Great job strongswan devs
X
by X####:
by X####:
Force close issue of 1.9.0 fixed. Excellent VPN client.
R
by R####:
by R####:
crashes after last update
R
by R####:
by R####:
Turns out the issue below was due to an overlay issue with another app - turning off the app corrected the problem - therefore now 5 stars as the VPN works as described with little to no effect on speed. After the latest update the app will no longer allow you to select "ok" when starting the vpn. Works as describe only after the initial setup then once you've disconnected you are unable to connect again - "cancel" option works ,but "ok" no longer functions. Previous version worked as describe.
G
by G####:
by G####:
Sweet as a nut!! A reboot after setup is essential; without a reboot it won't work... without the correct configuration, it won't work... without the correct credentials, it won't work! Great app; Thanks devs... The app works perfectly with NordVPN - IKEv2/IPsec!! Suggestion: Start on boot, and profile backup, would be nice.
R
by R####:
by R####:
Clicking on the created profiles results in nothing, absolutely nothing. No log, no error, no nothing. I reinstalled, restarted the phone, put dummy data, correct data, ip, dns, tried it with wifi, 4g all the same. I tried to report the issue on their issue tracker but my sign in request never got approved
R
by R####:
by R####:
Works great with Algo VPN. Only wish it had always on support and/or some way to automate it using Tasker. Edit: initiate, yes, but I can't automate disconnecting when no longer connected to WiFi.
N
by N####:
by N####:
nearly fabulous but split tunnelling doesn't seem to work here. I'm using the ikev2 certificate method on android 6.01 (oxygen os 3.5.8) on a Oneplus 2
Y
by Y####:
by Y####:
Works great with Algo VPN. Would love an updated interface and the option to specify trusted networks to connect by default to, and to connect to VPN automatically on any untrusted WiFi network
R
by R####:
by R####:
Appears to be working, but even connected to a paid VPN server, this app still leaks my IP
R
by R####:
by R####:
It should have an option whether to connect after boot or not.
R
by R####:
by R####:
Created a profile to work with nordvpn absolutely nothing happens when I click to activate my vpn connection profile
G
by G####:
by G####:
Nice and simple vpn client with IPSec/IKEv2 certificate based authentication. Works perfectly with my subscription.
by D####:
If the IKEv2 vpn server (like Mikrotik) disconnect and reconnect to the internet, strongswan has not any outage timeout and can not reconnect again. It is unacceptable.