strongSwan VPN Client Free

strongSwan VPN Client Free strongSwan VPN Client for Android is an official IPsec/IKEv2 VPN app built on the open-source strongSwan project. It helps protect data on public networks with secure authentication, MOBIKE mobility, and split/per-app tunneling.

strongSwan VPN Client Free

strongSwan VPN Client is the official Android app built to help you set up a virtual private network (VPN). It’s based on the well-known strongSwan open-source VPN project and uses the IKEv2 key exchange method to keep your connection secure. If you want stronger privacy and protection—especially on public Wi‑Fi or other unsecured networks—this app helps safeguard your data while you browse and use online services.

Key Features

• Uses the IKEv2 key exchange protocol (IKEv1 is not supported)
• Protects data traffic with IPsec (L2TP is not supported)
• Handles changing networks and device mobility via MOBIKE (or reauthentication)
• Supports username/password EAP authentication, including: EAP-MSCHAPv2, EAP-MD5, and EAP-GTC



• Supports RSA/ECDSA private key and certificate authentication
• Supports EAP‑TLS using client certificates
• Can combine RSA/ECDSA and EAP authentication by running two authentication steps as described in RFC 4739
• Verifies VPN server certificates against CA certificates already installed on your device or added by you
• Allows importing CA/server certificate data directly into the app
• IKEv2 fragmentation is available when the VPN server supports it (strongSwan supports it starting with version 5.2.1)



• Split tunneling lets you route only selected traffic through the VPN and/or block specific traffic from using it
• Per-app VPN lets you restrict the VPN connection to specific apps—or exclude apps from VPN usage
• Current IPsec crypto support includes: AES-CBC, AES-GCM, ChaCha20/Poly1305, and SHA1/SHA2
• Passwords are stored as cleartext in the database (only when saved within a profile)
• VPN profiles can be imported from files
• Supports managed configurations through enterprise mobility management (EMM)

Frequently Asked Questions

• Is the app compatible with all Android devices?

  The app works with most Android devices that provide support for the VpnService API. However, some models—depending on the manufacturer—may not include full support, and the app might not function correctly. It’s best to confirm compatibility before installing.

• Can I import VPN profiles and CA certificates into the app?

  Yes. You can import VPN profiles and CA certificates from external storage. The app needs the READ_EXTERNAL_STORAGE permission to access and import those files, making it easier to set up and manage VPN profiles.

• Does the app support advanced encryption methods?

  Yes. It supports multiple encryption options, including AES-CBC, AES-GCM, ChaCha20/Poly1305, and SHA1/SHA2. These choices help protect the confidentiality and integrity of your data during transmission.

Summary

From a usability standpoint, strongSwan VPN Client focuses on a straightforward setup experience, with clear options for configuring and managing VPN profiles. You can move through the app to establish connections and adjust settings as needed. The strongSwan documentation also provides detailed instructions for server setup and troubleshooting, helping you get the VPN working reliably.