Astrill VPN

Astrill VPN encrypts your connection and carries it through Astrill's servers, so the sites and apps you use see the server's address instead of yours. It also includes a firewall on your device that decides which apps may go online, with the VPN on or off.

THE VPN

The VPN needs an active Astrill VPN membership.

- Protocols for every network: StealthVPN (based on OpenVPN), OpenWeb and Astrill WireGuard, including networks that try to block VPNs.

- Servers in more than 50 countries, with no traffic limit.

- Smart Mode: automatic routing for China.

- Where traffic goes: choose for each app whether it uses the VPN, goes direct, or uses one of your own WireGuard tunnels. An app set to "Only through" stays offline while its route is down, instead of going direct.

- Use your membership on several devices at the same time, and on supported Wi-Fi routers (DD-WRT, Tomato, ASUS-Merlin) to cover every device in your home.

THE FIREWALL

The firewall works with or without the VPN, and without a membership.

- Allow or block each installed app, separately on Wi-Fi, mobile data, roaming and in the background.

- Rules for all apps: block apps while the phone is locked, block apps you are not using, and hold newly installed apps until you allow them.

- DNS rules: block the sites and domains you choose, for every app.

- Activity: see which app connected where. It is kept only on your device, for as long as you choose (up to 7 days), and you can turn it off or clear it.

YOUR OWN WIREGUARD TUNNELS

Import a WireGuard .conf file or scan a QR code, then choose which apps use your tunnel. This works without a membership.

EVERY SCREEN

Phones, foldables and tablets, in portrait and landscape, with light and dark themes and quick settings tiles and widgets.

HOW ASTRILL USES ANDROID'S VPN SERVICE

Astrill VPN uses Android's VpnService for two things: to carry your traffic through an encrypted tunnel to the Astrill server you choose, and to run the firewall on your device. With only the firewall on, your traffic does not go to Astrill. Before the first start, Astrill explains the permission, and then Android asks you to allow it.

ACCESSIBILITY SERVICE (OPTIONAL "PRECISE MODE")

Astrill VPN uses Android's AccessibilityService API only for the optional Precise mode of its firewall. It is off by default. You turn it on yourself in Firewall › Rules for all apps › Block unused apps › Precise mode, after Astrill explains what it does and you agree. When it is on, the service notices only which app's window has just come to the front, so the firewall does not block the app you just opened. It cannot read screen content, text or passwords, it never acts on your behalf, and nothing it sees leaves your device. Block unused apps also works without it.

OTHER PERMISSIONS

- Installed apps: the firewall and "Where traffic goes" list every installed app, so you can choose any of them. The list stays on your device.

- Usage access (optional): used only by "Block unused apps" and "Allow in background", to know which app is in use. It stays on your device.

- Camera (optional): only to scan a WireGuard QR code.

- Notifications: VPN status and firewall notices.

PRIVACY

Your firewall activity and your app list stay on your device. You can delete your account in the app under Profile › Delete account.

SUPPORT

Our support team is available 24/7, 365 days a year, by live chat, email and phone.

Sign in with your Astrill account to start.