VPN

Andiodine lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed. Based on iodine, requires Android4+.

Anywherelan (awl) is a mesh VPN that lets you connect to any of your devices at the IP level, wherever they are. It works similarly to tinc, direct WireGuard or Tailscale, but fully peer-to-peer — there are no central coordination servers to trust or set up. Your traffic goes directly between your devices. You can also route traffic through a remote device — either per-app as a SOCKS5 proxy, or all of your device's traffic at once as a full-tunnel VPN gateway (exit node). Some use cases Connect to your home or work laptop over RDP/VNC/SSH even when it sits behind NAT, without configuring port forwarding. Reach self-hosted services like Nextcloud, Home Assistant or Bitwarden without exposing them to the internet. Access websites from another country by using a remote device as a SOCKS5 proxy. Route all of your traffic through a remote device as a full-tunnel VPN gateway (exit node), like a classic VPN. Gaming: local multiplayer as if everyone were on the same LAN. Share a development server with a colleague on another device, as an alternative to ngrok. Use an old Android phone remotely with scrcpy to run Android-only apps without an emulator. Features Fully peer-to-peer. No third-party coordination servers — your traffic stays between your devices. Route traffic through a remote device like a SOCKS5 proxy. Full-tunnel VPN gateway: route all of your device's traffic through a remote exit node. Easy to use: install the app, scan the QR code of another device, and you are connected. Built-in NAT traversal. If both devices are behind NAT and direct P2P is not possible, encrypted traffic is relayed through community relays. TLS 1.3 encryption for all transports (QUIC and TCP). ed25519 peer authentication — a peer id is the device's public key. Cross-platform: Android, Windows, Linux, macOS. How it works Awl is built on top of libp2p for peer-to-peer networking and a TUN virtual interface for IP routing. QUIC or TCP with TLS is used as a transport, and a DHT is used to discover peers. On first launch, the app connects to community bootstrap nodes, registers itself, and then looks up the addresses of the peers you want to reach. Source code, desktop builds and more documentation: https://github.com/anywherelan/awl

Bitmask is a VPN client with automatic configuration. It has several techniques on board to circumvent censorship, network blocking or avoid surveillance. After choosing a compatible service provider it will encrypt and route securely all your network traffic through your trusted service provider. And you're good to go! Bitmask is open source VPN client, distributed under the GPLv3 license. See https://0xacab.org/leap/bitmask_android FAQ: * who: leap.se, a collective that loves the concept of the right to whisper, around since 2011. * Translations greatly appreciated at our Transifex project https://app.transifex.com/otf/bitmask/dashboard/ If you experience problems or want to have bleeding edge versions, please join our chat https://matrix.to/#/#leap:libera.chat or write a bug report: https://0xacab.org/leap/bitmask_android/

With CalyxVPN, you can safely encrypt all your network traffic and route it through the Calyx Institute. • Anonymous VPN: No user accounts and no logging. • Anonymous IP Address: When the VPN connection is active, all the servers on the internet will see you as originating from an anonymous IP hosted by Calyx. • Free: This is a free service provided by the Calyx Institute. • Open Source: Both the client and server are 100% free and open source software. • No IPv6 Leaks: CalyxVPN will not leak IPv6 traffic (requires root). • No DNS Leaks: CalyxVPN is configured on both the client and the server to prevent any leaking of DNS. All DNS requests are anonymously handled by Calyx when the VPN is on. • Circumvention: When "Use Bridges" option is enabled, all your traffic is hidden as normal web traffic, in order to circumvent some censorship systems that block VPN traffic. As with all VPNs, CalyxVPN only adds security to your data as it flows over the network. It cannot protect the content of your data that is stored or that you give to a website. It also does not prevent advertising and tracking in your apps or web browser (except when this tracking is based on your IP address).

Ceno (Censorship.No!) is a decentralized mobile web browser. It uses peer-to-peer technology to deliver websites to your phone and caches popular content with cooperating peers. Ceno can be used to bypass Internet censorship and help others retrieve blocked pages. Say NO to censorship! Install Ceno Browser today and be prepared for the next time you get 🔌 unplugged. 🚫🌴 Resilient. Ceno is designed with internet shutdown scenarios in mind. Websites are shared by a global network of peers, and stored in a distributed cache for availability when traditional networks are blocked or go down. 🔓👀 Unlock the web. Access any website. Frequently requested content is cached on the network and cannot be forcibly removed. 💲🌐 Reduce Data Costs. By routing user traffic through peer-to-peer networks, Ceno Browser incurs less data costs while still providing users with circumvention capability. 📖👐 Free and open source. Ceno Browser is powered by Ouinet, an open source library enabling third party developers to incorporate the Ceno network into their apps for peer-to-peer connectivity. Important: Ceno has two modes of operation - public and personal. You can easily toggle between them. Public mode offers the best connectivity but the least privacy - websites that you visit or share are recorded in a publicly accessible registry (BitTorrent). Private mode eliminates this record but may be slower and less efficient at retrieving content. See the User Manual for more details on Ceno usage. About eQualit.ie eQualit.ie develops open and reusable systems with a focus on privacy, online security, and information management. Our goal is to create accessible technology and improve the skill-set needed for defending human rights and freedoms in the digital age. To learn more about Ceno Browser and its distributed library, Ouinet, please visit https://censorship.no Questions / Need support? Read more in the Ceno User Manual, or contact us at support@censorship.no. We love receiving feedback and are continuously improving Ceno for its users! Stay connected, and help keep the web open and accessible to all!

A Graphical user interface of Clash.Meta for Android. Features Local HTTP/HTTPS/SOCKS server VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency Remote providers, allowing users to get node lists remotely instead of hardcoding in config

A Cloak plugin for Shadowsocks. Cloak is a universal pluggable transport that cryptographically obfuscates proxy traffic as legitimate HTTPS traffic, disguises the proxy server as a normal web server, multiplexes traffic through a fixed amount of TCP connections and provides multi-user usage control. Cloak works fundamentally by masquerading proxy traffic as normal web browsing traffic. This increases the collateral damage to censorship actions and therefore make it very difficult, if not impossible, for censors to selectively block censorship evasion tools and proxy servers without affecting services that the state may also heavily rely on. Details on how Cloak works can be found here. Shadowsocks-android is required, as well as a Cloak-compatible proxy server.

NOTE: The source repository has moved but the old code is no longer available. DPITunnel is a simple and effective solution against government censorship for Android. It is built on VPN Server, which intercepts traffic and directs it through the http proxy. DPITunnel for Android is active DPI circumvention utility, that works only on your phone and doesn’t send your traffic to third-party servers, respecting your privacy and do not slowing down your internet connection. It establishes a transparent proxy server on your phone and starts local VPN server, where are DPI circumvention tricks applying. Setup: * For android 5 and up (root access don't mater) just press on/off button. * For android 4.4 there are two cases: * If you have root, enable "Set DPITunnel proxy globally" and press on/off button. * If you don't have root, press on/off button and set DPITunnel proxy 127.0.0.1:8080 in system settings.

NOTE: The source repository has moved but the old code is no longer available. IMPORTANT: Root access is required. DPI Tunnel is an app, that allows you to bypass censorship PI Tunnel uses desync attacks to fool DPI filters It is NOT VPN and won't change your IP Features * Bypass many restrictions: blocked or throttled resources * Create profiles for different ISP and automatically change them when switch connection * Auto start program on device boot * Easily auto configure for your ISP

Open-source opinionated VPN client implementing major VPN protocols. Supported protocols: Shadowsocks (Outline) Shadowsocks over WebSocket Shadowsocks over Cloak Config format Dobby consumes “subscription” / “dynamic keys” as YAML over HTTPS. The full up-to-date format (with examples) is documented in the project README: https://github.com/DobbyVPN/DobbyVPN/blob/main/README.md Work in progress AmneziaWG References Connection Prefix Disguises: https://developers.google.com/outline/docs/guides/service-providers/prefixing Cloak: https://github.com/cbeuw/Cloak Outline setup: https://getoutline.org/get-started/#step-1

VPN service bundled with DuckDuckGo's Privacy Pro subscription.

Designed as a simple, minimalistic & universal client for connecting to SOCKS/HTTP/HTTPS proxies and based on VpnService.

Exclave is a proxy client. Features: - Various proxy protocols - Group and subscription - Routing - Proxy chain Some supported protocols: - Shadowsocks (with SIP003 plugin support) - Shadowsocks 2022 (with SIP003 plugin support) - Trojan - Hysteria 2 - AnyTLS - mieru - NaïveProxy (as a standalone plugin) - TUIC - Juicity - VMess (with various optional sub-protocols) - VLESS (with various optional sub-protocols) - WireGuard (TCP and UDP only) - TrustTunnel (no ICMP echo support) - SSH proxy ("dynamic port forwarding") - HTTP CONNECT tunnel (HTTP/1.1, HTTP/1.1 with TLS, HTTP/2 and HTTP/3) - SOCKS4, SOCKS4A and SOCKS5 Although it can take charge of the traffic through the VPN service provided by the system, it is a TCP and UDP proxy used as a "pseudo-VPN" rather than a VPN.

TSP is a control protocol used to establish and maintain static tunnels. The Gateway6 client (gogoc) is used on the host computer to connect to a tunnel broker using the TSP protocol and to get the information for its tunnel. When it receives the information for the tunnel, the Gateway6 client creates the static tunnel on its operating system. GogoDroid is a graphical frontend of gogoc for Android.

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.

Audited, open-source VPN with anonymous signup and no email required.

IVPN is an audited, privacy focused VPN service that offers WireGuard, multi-hop connections and built-in ad and tracker blocking. IVPN applications for all major platforms are open-source since February 2020. Notable features: * Fast servers in 45 locations * Use on up to 7 devices (Pro plan) * Split tunneling * Set trusted networks and use custom DNS * Multi-hop connections for advanced privacy * Unlimited bandwidth * 24/7 customer service What we do differently than other VPNs? * No logs and data collection on your connection * No third-party tools in app * No surveillance ads on Facebook and Google * No false promises (e.g. fully anonymous connection) * Transparent ownership and team * Civilian grade encryption More details about our company and service: https://www.ivpn.net/facts Review our privacy policy: https://www.ivpn.net/privacy Terms of Service: https://www.ivpn.net/tos Audit by cure53: https://www.ivpn.net/blog/independent-security-audit-concluded Privacy guides: https://www.ivpn.net/blog/privacy-guides WireGuard® is a registered trademark of Jason A. Donenfeld.

Preserves privacy, prevents tracking, and provides access to restricted and hidden online content. InviZible Pro combines the strengths of Tor, DNSCrypt, and Purple I2P to provide a comprehensive solution for online privacy, security, and anonymity. Tor is responsible for privacy and anonymity. It acts like an unlimited free VPN proxy, but does so in the most secure way possible. Tor uses military-grade encryption and routes your internet traffic through a network of volunteer-run proxy servers. This helps protect your identity and location by hiding your IP address. It allows you to browse the internet anonymously, access websites that are otherwise restricted, and communicate privately. Tor also allows access to websites hosted on the Tor network, known as "onion services" or dark web, which are not accessible through regular browsers. DNSCrypt is responsible for security. Every phone uses DNS (Domain Name System) when visiting online resources. But this traffic is usually not encrypted and can be intercepted and spoofed by third parties. DNSCrypt ensures that your DNS traffic is encrypted and secure. It prevents unauthorized access and tampering of your DNS queries, providing an additional layer of protection against surveillance and data interception. I2P (Invisible Internet Project) provides secure and anonymous access to internal I2P websites, chat forums and other services that are not available through regular browsers. You may know it as the deep web. It works by routing your internet traffic through a network of volunteer-run proxy servers, allowing you to hide your identity and location. I2P provides a secure and private online environment, making it a great option for those who value anonymity and privacy. Firewall is a security feature that helps protect your device from unauthorized access and potential threats. It acts as a filter for incoming and outgoing network traffic, allowing you to control which apps can access the internet. By setting up firewall rules, you can choose to block or allow internet connection for individual apps. This helps enhance your privacy and security by preventing unauthorized communication and protecting your data while using your phone. InviZible Pro can utilize root access, if available on your device, or use a local VPN to deliver internet traffic directly to the Tor, DNSCrypt, and I2P networks. Core Features: ✔ Tor Network - Achieve full anonymity, bypass censorship, and access .onion sites securely ✔ DNSCrypt - Encrypt DNS queries to prevent ISP monitoring and manipulation ✔ I2P (Invisible Internet Project) - Secure and private decentralized networking ✔ Advanced Firewall - Restrict internet access per app and block unauthorized connections ✔ No Root Access Required - Works seamlessly on all devices without modifications ✔ Maintain complete privacy without a paid VPN - Stay anonymous for free ✔ Stealth Mode - Evade Deep Packet Inspection (DPI) and regional restrictions ✔ Free & Open Source - No ads, no tracking, no compromises

JetBird is a wrapper around the NetBird client and is privacy friendly, containing no blobs or trackers. Features Native UI Supports SSO and setup keys Supports pre-shared keys Real-time logs Quick tile Exclude apps from the tunnel Exit nodes (with select and client-side customisation) Android TV support Lazy connection support Profiles

The Lavabit encrypted proxy service is a simple to use, super fast, completely secure service. The service is a completely free public service. No user account or personal information required. It's simply our way ensuring you no longer have any excuse to let anyone log and bog you (down with ads). Why should you use the Lavabit Encrypted Proxy? * We do not record anything about how you use the Internet * We do not invade your display with ads * We do not sell, give or share your data with anyone * We do not have any limits on how much or how fast you can download * We do not require a user account * We do not charge anything for this free service * We use fully encrypted physical servers to provide you with the best service • We safely mask IPv4 and IPv6 traffic * We use strong encryption to provide PERFECT FORWARD SECRECY for your surfing sessions. How does Lavabit Encrypted Proxy work? With the Lavabit Encrypted Proxy, we use Virtual Private Networking (VPN) technology to provide an encrypted pipeline for all your Internet traffic. It's a secure tunnel between your computer and the Internet backbone. Right past any peepers that might be up to no good. From our servers, you can access the Internet without censorship, or surveillance. What's more, the websites and servers you access will no longer see your identity, or rather your IP address, but will instead see the generic proxy address we provide. Using a Lavabit Encrypted Proxy is a great first step toward protecting your privacy, and taking backing control over what personal information you share, and with whom. Note, both the app and backend services have been built using F/OSS software, however this specific app variant is tied specifically to the VPN servers operated by Lavabit.

lumine-mobile is a Clash-style Android implementation built on top of enimul (formly lumine). It brings enimul's core to Android with a VPN/TUN pipeline and a mobile-friendly UI, offering a more Clash-like experience with smarter routing and rule management. You can also view it as a mobile-side functional extension of SniShaper. Features Native Android implementation built with Kotlin and gomobile Proxying and routing powered by enimul core Clash-style configuration management UI Subscription URL import and rule switching Dedicated rule page for viewing, editing, and creating rules Blacklist-driven routing based on GFWlist for smarter traffic splitting Flexible Fake IP implementation Upstream enimul (formly lumine): https://github.com/lzpls/enimul This project uses enimul as its core and includes a number of local modifications. Some modes may still be unstable. The configuration file syntax remains compatible with upstream. To optimize mobile performance, some original IP-range rules were removed and the routing behavior was adjusted. Notes This repository is not the official upstream enimul repository. It is an Android-focused implementation and adaptation layer. The project is still in an early stage, and some websites may behave unstably. Feedback is welcome.

MESH is a censorship-resisting, peer-to-peer first, end-to-end encrypted overlay network for digital forensics. It's a fork of the Tailscale protocol, but is self-hostable and heavily modified for civil society and forensic operations.

VPN service from Mozilla using the WireGuard protocol on the Mullvad network.

Open-source VPN service from Sweden with anonymous accounts and no logging.