Android Security FAQs for OpenVPN Connect
Wondering about OpenVPN Connect security and best practices? Refer to these FAQs.
No, OpenVPN Connect uses the OpenSSL library, which is immune to Heartbleed.
The safest options to protect your VPN profiles against compromise due to a lost or stolen mobile device are:
Avoid saving your password on your device.
Use the Android Keychain as a repository for your private key.
The safest option is to use the Android Keychain as a repository for your private key. When you edit the profile, you can save the password by checking Save Password. When you do this, OpenVPN Connect stores your password in the keychain.
The save password switch on the authentication password field is typically turned on, but you can turn it off by adding the following OpenVPN directive to the profile:
setenv ALLOW_PASSWORD_SAVE 0Yes, OpenVPN Connect supports the tls-crypt option in recent versions.