package icon

Socks5 Proxy

Socks5 client based on VPN
Socks5 Proxy routes your device's internet traffic through an encrypted SSH tunnel using Android's built-in VPN framework — no root access required. It creates a local TUN network interface that captures all outgoing IPv4 traffic, forwards it through a secure SSH connection to your server, and sends it out to the internet from there. This effectively masks your device's real IP address and encrypts all data in transit between your device and the SSH server.

=== WHAT IT DOES ===

When connected, every app on your device — browsers, email, messaging, streaming — has its traffic routed through the SSH tunnel automatically. You don't need to configure individual apps. The persistent notification shows real-time connection status and data usage so you always know what's happening.

It also includes a local SOCKS5 proxy (RFC 1928 compliant) on 127.0.0.1:1080, allowing individual apps like browsers to use the tunnel without enabling the system-wide VPN. An interactive terminal lets you open shell sessions directly to the remote server from within the app, useful for server administration, file management, or running commands.

=== KEY FEATURES ===

• System-Wide VPN — Routes all device IPv4 traffic through an SSH tunnel via Android VpnService. No root needed.
• SOCKS5 Proxy — Built-in RFC 1928 proxy on localhost:1080 for per-app or per-browser use.
• SSH Key Support — Full support for RSA (up to 4096-bit), ECDSA (P-256/P-384/P-521), and Ed25519 key algorithms.
• Dual Authentication — Connect using password authentication or SSH private key authentication with optional encrypted passphrases.
• Interactive Terminal — Open multiple concurrent shell sessions to the remote server with PTY resize support.
• DNS over TCP — Intercepts DNS queries from the VPN interface and resolves them through the encrypted tunnel, preventing DNS leaks.
• Secure Storage — SSH private keys are encrypted with AES-256-GCM using the Android Keystore (hardware-backed on supported devices). Passwords and key passphrases are stored in EncryptedSharedPreferences.
• Connection Profiles — Save multiple server configurations with different authentication methods and switch between them quickly.
• Auto-Reconnect — Exponential backoff reconnection with configurable keep-alive interval to maintain connectivity on unstable networks.
• Boot Start — Optionally start the VPN automatically when your device boots.
• Traffic Statistics — Real-time upload and download byte counters shown in the notification and main screen.
• Foreground Service — Persistent notification with connection status, server hostname, and live traffic data.
• Material Design 3 — Clean, modern interface with bottom navigation and dark mode support.
• Host Key Verification — SSH host keys are verified and cached, protecting against man-in-the-middle attacks.

=== REQUIREMENTS ===

• Android 7.0 (API 24) or higher
• An SSH server you control or trust, with password or key-based authentication enabled
• The server must allow TCP forwarding (AllowTcpForwarding must be set to yes in sshd_config)

=== USE CASES ===

• Privacy — Hide your real IP address from websites and services by routing traffic through your own server.
• Security on Public Wi-Fi — Encrypt all traffic when using untrusted networks at coffee shops, airports, or hotels.
• Bypass Network Restrictions — Access services blocked on restrictive networks by tunneling through your SSH server.
• Remote Access — Securely access resources on the SSH server's local network.
• Server Administration — Open a shell on your server directly from the app for quick maintenance tasks.

=== OPEN SOURCE ===

This app is free and open-source software licensed under the MIT License. The source code is available on GitHub. It is built with trusted open-source libraries including mwiede/jsch for SSH connectivity, Bouncy Castle for Ed25519 support on older Android versions, dnsjava for DNS resolution, and Android Jetpack components for the UI and data layer.

=== IMP

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 3.0.2 (302) suggested Added on Jul 23, 2026

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • com.socks5.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 5.5 MiB PGP Signature | Build Log

  • Version 2.0.5 (205) - Added on Jul 12, 2026

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • com.socks5.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 5.5 MiB PGP Signature | Build Log

  • Version 1.0.2 (102) - Added on Jul 01, 2026

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • com.socks5.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 5.6 MiB PGP Signature | Build Log

Find Apps