New in version 99
Fixes Wi-Fi rules for run conditions. Android hides the Wi-Fi network
name from apps working in the background, so a rule like "every Wi-Fi
except my home network" could leave the tunnel connected at home. The
app now asks for that information the way Android 12 and later expect,
whenever you have granted it location permission for Wi-Fi rules.
KabelWacht is a minimal, fully free-software WireGuard® client for Android.
It does one thing well: manage WireGuard tunnels and connect.
Features:
* Create, list, search, edit and delete WireGuard profiles.
* Import a configuration by scanning a QR code or opening a .conf file.
* Export a tunnel back to a standard wg-quick .conf file, protected by
device authentication — the file contains your private key.
* One-tap connect/disconnect with a per-tunnel switch.
* Toggle a tunnel from outside the app: launcher shortcuts, a home-screen
widget, or a Quick Settings tile.
* Run conditions: let a tunnel connect and disconnect by itself depending
on the network — only on Wi-Fi, every Wi-Fi except the ones you list,
only on chosen networks, never on mobile data or while roaming, or on
unmetered connections only.
* Always-on VPN support, including reconnecting after a reboot.
* A structured editor with Interface and Peer sections, with the complete
wg-quick file one tap away.
* Userspace WireGuard backend — no root required.
Privacy and freedom:
* 100% free and open-source software (AGPL-3.0-or-later).
* No trackers, no analytics, no advertising.
* No Google Play Services or other proprietary dependencies.
* The only network connection made is your own WireGuard tunnel.
* Location permission is optional and asked for only if you set up Wi-Fi
network-name rules, because Android requires it to read Wi-Fi names.
Your location is never used or stored.
* Release builds are reproducible: anyone can rebuild the published APK
from source and get the same bytes.
Built on the official WireGuard tunnel library and the ZXing QR decoder.
WireGuard is a registered trademark of Jason A. Donenfeld. This project is not
officially affiliated with or endorsed by the WireGuard project.
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 10 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
access approximate location only in the foreground
This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location.
-
access precise location only in the foreground
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
view Wi-Fi connections
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
run foreground service with the type "location"
Allows the app to make use of foreground services with the type "location"
-
run foreground service with the type "specialUse"
Allows the app to make use of foreground services with the type "specialUse"
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
show notifications
Allows the app to show notifications
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
com.github.muelli.kabelwacht.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
16 MiB
PGP Signature
|
Build Log
New in version 96
Run conditions: tunnels can now connect and disconnect on their own,
based on the network you are on — only on Wi-Fi, every Wi-Fi except the
ones you list, never on mobile data or roaming, unmetered only.
Quick toggles: launcher shortcuts, a home-screen widget and a Quick
Settings tile to switch a tunnel with one tap.
Search in the tunnel list, and better behaviour in desktop mode and on
large screens.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 10 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
access approximate location only in the foreground
This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location.
-
access precise location only in the foreground
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
-
view network connections
Allows the app to view information about network connections such as which networks exist and are connected.
-
view Wi-Fi connections
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
run foreground service
Allows the app to make use of foreground services.
-
run foreground service with the type "specialUse"
Allows the app to make use of foreground services with the type "specialUse"
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
show notifications
Allows the app to show notifications
-
run at startup
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
com.github.muelli.kabelwacht.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
16 MiB
PGP Signature
|
Build Log
New in version 81
Fix F-Droid reproducible build verification compatibility.
-
arm64-v8a
armeabi-v7a
x86
x86_64
This version requires Android 10 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
take pictures and videos
This app can take pictures and record videos using the camera while the app is in use.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
com.github.muelli.kabelwacht.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
16 MiB
PGP Signature
|
Build Log
