package icon

TunnelForge

L2TP/IPsec VPN client for modern Android
TunnelForge is an Android VPN client for networks that still rely on L2TP/IPsec with IKEv1.

Android 12 removed the built-in L2TP and PPTP VPN options. TunnelForge provides a maintained client path for organizations, schools, universities, and personal networks that cannot immediately replace existing L2TP/IPsec servers.

Features:

* L2TP with optional IPsec IKEv1
* Full-device VPN tunnel mode
* Proxy-only mode with local HTTP and SOCKS5 listeners
* Per-app routing for include or exclude lists
* Multiple profiles with local credential storage
* Custom DNS options, including UDP, TCP, TLS, and HTTPS
* Configurable MTU
* Connection state and detailed local logs

TunnelForge does not provide a VPN service or account. You need access to an existing compatible VPN server.

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 0.7.4 (2043) suggested Added on Jul 13, 2026

    x86_64

    This version requires Android 12 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • io.github.evokelektrique.tunnelforge.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 30 MiB PGP Signature | Build Log

  • Version 0.7.4 (2042) - Added on Jul 13, 2026

    arm64-v8a

    This version requires Android 12 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • io.github.evokelektrique.tunnelforge.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 29 MiB PGP Signature | Build Log