WireGuard at the core
Nsec VPN uses WireGuard to connect your Android device to a real VPN node. Connection status waits for a handshake rather than treating a button press as proof.
A little more control. A lot less friction.
The essentials of a VPN, with useful controls that stay within reach.
Choose your DNS
Use the node’s automatic settings or choose Cloudflare, Google, Quad9, AdGuard, or a custom supported public IPv4 resolver. Changing DNS while connected rebuilds the tunnel. Android Private DNS and browser secure DNS may use a different resolver.
Your apps. Your choice.
Split tunneling lets you choose apps that bypass the VPN. Nsec itself stays outside the tunnel for ads and service requests. This is an intentional routing choice, not a promise that every connection on your phone is tunneled.
Free access and VIP options
Use available free nodes, or access VIP nodes through eligible purchases, rewarded ads, or promotional codes. Availability and reward duration are controlled by the service and shown in the app.
A useful connection screen
See the connected node and its public IP. The displayed IP comes from the node record after a verified handshake; it is not the private tunnel address. Verify the exit IP using a browser included in the VPN.
Designed for everyday use
Quick Settings access, light and dark themes, favorites, server requests, and connection troubleshooting are part of the Android experience. Only enabled, healthy nodes are presented as available.
Speed measurements, with a boundary
The in-app speed test uses a separately installed, matching-signature companion to send requests through the VPN while ads stay outside it. Availability depends on installing both compatible packages. Results measure HTTPS throughput, not a guaranteed line speed.