strongSwan VPN Client
# FEATURES AND LIMITATIONS #
* Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this
- strongSwan VPN Client won't work on these devices!
* Uses the IKEv2 key exchange protocol (IKEv1 is currently not supported)
* Full support for changed connectivity and mobility through MOBIKE (or reauthentication)
* Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS is also supported
* Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739
* VPN gateway certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the gateway can also be imported directly into the app.
* IKEv2 fragmentation is supported if the VPN gateway supports it (strongSwan does so since 5.2.1)
* The IPsec implementation currently supports the AES-CBC, AES-GCM and SHA1/SHA2 algorithms
* Passwords are currently stored as cleartext in the database (only if stored with a profile)
Details and a changelog can be found on our wiki: https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient
# EXAMPLE GATEWAY CONFIGURATION #
This client can be used with the following gateway configuration that is also compatible with the Windows 7+ Agile VPN client:
https://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig
But please note that the host name configured with a VPN profile in the app *must be
* contained in the gateway certificate as subjectAltName.
# FEEDBACK #
Please post bug reports and feature requests on our wiki: https://wiki.strongswan.org/projects/strongswan/issuesIf you do so, please include information about your device (manufacturer, model, OS version etc.).
The log file written by the key exchange daemon can be sent directly from within the application.
Category : Communication
Reviews (29)
I used an old version of strongSwan for years, it was a custom version from my VPN provider. It was good, especially with battery life and network changes, but lacked many features offered with OpenVPN like excluding apps, so I used OpenVPN instead. But I've recently upgraded to the latest version of strongSwan and it's so much better now, with Always-On support and Split Tunneling for apps it has everything I need. It's great to have my battery back. Thanks to the whole team!
A good application that I use all the time, but after a few hours of use, it starts to consume a lot of battery power. Optimize your application, and add energy saving options. UPD: The battery consumption increases after automatic reconnection to the server and decreases after the forced stop and restart of the application.
This app is not very straightforward. You have to jump through too many hoops to accomplish your goal. That being connected to a VPN. Fortunately I found 2 apps that are 100% regristration free, 100% ad free, provides one touch connection to multiple VPNs all over the globe, & doesn't cost you a dime. Sorry strongSwan you have gone belly-up
I always use strong swan in order to connect to Ikev2 protocol with either Nord or Surfshark. Its so much better then the regular vpn aps provided. Handles network switches almost perfectly, speeds and ping are slightly better then using the regular app. Perfect for people with limited bandwidth like me.
An excellent app. Simple, easy to use. Hope the developer will add kill switch feature to boost the security. And always connect through a specified profile on boot will be a great feature to have.
Works great as long as my phone doesn't go to sleep. When phone is woken, it has no internet and I have to disconnect and reconnect for it to start working again. Find me a fix and I'll upgrade to 5 stars, I'm using nordvpn
This app is (was) awesome (fast and light on resources) but for some reason it stopped getting DNS from VPN server and cannot connect to network services behind the VPN with fqn anymore, only with IP address. Had to go back with OpenVPN :(
amazing app, it's essential, it allows you to insert your VPN address, and use the IKEv2 protocol, which is fast and secure. After initial configuration, the app open the connection in 1-2 seconds!
App won't install or download from playstore.. Neither from official website, I guess not compatible with huwaei mate 10 pro, probably.. When trying to install it give error app not installed.. And when trying downloading apk from playstore it says something went wrong.. Sure it has to do with recent Google update.. Since apk used to work on my phone before.. Tried different version some issue.. Hope developers can come up with some solution, cuz basically I can't use that app anymore
Indispensable. Doesn't seem to reduce battery life when left on. Easy to turn on and off. Nice small memory requirements.
Great and fast app. Specially the app exclusion functionality. But is there any settings that I can do to be able to use my chromecast, network printer or ... on my local network when the vpn is on?
All in all i like the client easy to use and very handy, person like me using different different vpn provider this client is blessed, but the only thing hurts me when i changed my phone is first time it's okay to configure all vpn server profile manually but there is no option for exploring profiles if it was available then i would definitely rate it 5 out of 5
Excellent app for connecting to VPN providers using IKEv2 protocol. Works great with ProtonVPN. Works great with older Android 4.4.2 systems running on a large installed base of TV boxes. And it's free ! Many thanks to the developpers :-)
Strongswan is the best vpn solution. Android app work very nice. We using this app more than six years without problems.
It's good but have a big problem.... I wish I could share my all profiles with others in an easy way or even make a backup of them. Plz add it.
I can not find this app on the Nvidia Shield Pro Google store. All no information on adding to routers.
I searched for a PPTP client and this was one of the top results so I tried it. There is no support for PPTP. Uninstalled
Fantastic app! It has a nice simple looking user interface and is very easy to setup VPN connections. And great developer support!
Crashes while importing pkcs#12 certificate on android 5.0 at least. Seems it happened for a file saved to google drive so bumped to 4 stars.
Some note to setup IKE2 certificate connection to mikrotik. In the self-signed ca certificate, subjectAltName have a both IP and DNS for server. A client successfully connects only when the DNS name of the server is specified in the "Server" fld, if the IP is specified, then authorization error occurs during connection. UDP:Server has a fews of ip addr. If certificate has no one dns name of server in subjAltName then client doesn't not connect. Doesn't not matter what specified in adv. settings.
Great IKEv2 VPN client but would be better if they add: 1- Reconnect on network change in setting menu 2- Block connection without VPN 3- add reconnect button and pause button in the notification area
Excellent. Too bad so many providers dont support ikev2. Openvpn is clearly not designed for frequent rapid network switching that's common on mobile.
After the latest update on Android, the app does not want to connect to my VPN anymore. This happened just after the update.
It does not change my IP whenever I connect because when I connect I check my IP and it remains the same instead of changing to one that is in the connected country
It doesn't support IKEv2 PSK. What the hell? Why don't you allow me to do what I want? Just warm me about lower security, but don't stop me. All other OSes support any type, including PSK. Strongswan for Android doesn't. Very bad!
App is great for older abdroid models. On Android 11 it is not possible to import any key. Still a great app till now.
Very good application! Unfortunately, it supports only a subset of the EAP authentication types supported in the Linux software (namely, EAP-TTLS and EAP-PEAP).
Works very well in China, as long as you already have a good VPN provider to connect to (I recommend SurfShark, PureVPN or NordVPN, sometimes ExpressVPN. Based on 10 years experience here in China)
This is the absolute best VPN app out there bar none. Do others have more features? Yes. Do others have more options? Many do. This has just the right balance of options and ease of use and performs very well out of the box, unlike most. I recently learned that IKEv2 was a very robust protocol over mobile networks and switching network on the fly. You don't need the proprietary VPN on the play store that is blocked by half of the internet. This is much more stable and lighter.