Client apps

Each protocol has its own client apps. This page lists the apps the subscription page recommends for every platform, and how a client imports a connection into each. You do not have to hand the list to customers: their subscription page shows the right apps for their device.

Apps by protocol and platform

Protocol	Android	iPhone and iPad	Windows, macOS, Linux
OpenVPN	OpenVPN Connect	OpenVPN Connect	OpenVPN Connect
WireGuard	WireGuard	WireGuard	WireGuard
AmneziaWG	AmneziaWG, AmneziaVPN	AmneziaWG, AmneziaVPN	AmneziaWG, AmneziaVPN
OpenConnect	Cisco Secure Client, OpenConnect, F-Droid build of OpenConnect	Cisco Secure Client	Cisco Secure Client, OpenConnect-GUI, openconnect
IKEv2	Built in (Android 11+), strongSwan	Built in	Built in on Windows and macOS; strongSwan on Linux
L2TP/IPsec	Not in recent Android versions	Built in	Built in on Windows and macOS

These are the defaults. The owner can change the recommended apps, rename a protocol's tab, add a short note and hide a protocol under Settings → Subscription page → Protocols. Other apps that speak the same protocol work too, but the Amnezia parameters only work in Amnezia apps.

Import a connection

OpenVPN

1. Install OpenVPN Connect.
2. On the phone, tap Open in OpenVPN Connect on the subscription page. On a computer, press Download profile and open the .ovpn file with the app.
3. If the inbound asks for a name and password, the page shows them. Enter them when the app asks.
4. Connect.

WireGuard and AmneziaWG

1. Install WireGuard for a plain inbound, or AmneziaVPN or AmneziaWG for an Amnezia inbound.
2. On the subscription page, pick a device if there is more than one, then scan the QR code with the app or download the .conf file and import it.
3. Connect.

Each phone or computer needs its own device. Importing one device's configuration on two machines makes them disconnect each other.

OpenConnect

1. Install Cisco Secure Client or an OpenConnect app.
2. Add a new connection with the Server address from the Cisco tab.
3. Sign in with the user name and password on the page.

IKEv2 and L2TP/IPsec

No app to install on most devices. On the IKEv2 or L2TP/IPsec tab, download the setup file for the device (a profile for iPhone, iPad and Mac, a strongSwan profile for Android, a PowerShell script for Windows), or follow the manual steps shown there. See IKEv2 and L2TP/IPsec.

Cisco Secure Client refuses a self-signed server unless Block untrusted servers is off in its settings. See OpenConnect for the alternatives.

Related pages

• Choosing a protocol: which protocol suits which network.
• Subscription page: what customers see and how the owner customizes it.
• Troubleshooting: an app that connects but has no internet.