mqvpn
store. A server with an ordinary CA-signed certificate connects
without turning on "Insecure (skip TLS verify)"; previously such a
chain was rejected because the app had no trust store to check it
against.
- Fix a tunnel stall that a silently failing network path could hold
open: traffic now keeps flowing over the remaining path.
- Fix a receive-buffer limit that could throttle throughput on fast
links.
- Fix the IP
connections (Wi-Fi + cellular) for bandwidth aggregation and seamless
failover, speaking standards-based MASQUE CONNECT-IP (RFC 9484) over
Multipath QUIC — no proprietary tunnel format.
The app uses Android's VpnService to route the device's network traffic
through the tunnel; Android asks for your consent before the first
connection. Traffic goes only to the server you configure; the app contains
no analytics or telemetry. Privacy policy: https://docs.mqvpn.org/privacy
Features:
* Multipath: bond Wi-Fi and cellular, seamless failover between them
* Standards-based: MASQUE CONNECT-IP (RFC 9484) over QUIC
* Pre-shared-key auth over TLS 1.3
* Requires a self-hosted mqvpn server (see the project README)
- Author: mp0rta
- License: Apache License 2.0
- Issue Tracker
- Source Code
- Changelog
- Build Metadata
- Reproducibility Status
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid-
arm64-v8aThis version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Download APK 15 MiB PGP Signature | Build Log
-
arm64-v8aThis version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Download APK 15 MiB PGP Signature | Build Log
-
arm64-v8aThis version requires Android 8.0 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Download APK 15 MiB PGP Signature | Build Log
- Connection settings (including the auth key) are no longer included
in Android backups or device-to-device transfers.
- Tapping Connect while an automatic reconnect is pending now restarts
the connection immediately instead of failing.
- Server certificate verification is now on by default: the "Insecure
(skip TLS verify)" toggle resets to off once on upgrade — turn it
back on manually if your server uses a self-signed certificate.
- Ask for the notification permission when connecting, so the VPN
status notification appears on Android 13+.
- Disconnect now fully stops the VPN service and removes its
notification.
- Update BoringSSL to 0.20260813.0, picking up upstream TLS/crypto
fixes since the