Skip to main content

Settings

You can customize your OpenVPN Connect app using the attributes listed in the table below.

To edit these settings:

Launch the app.
Click or tap the menu icon.
Click or tap Settings.

Table 5. Application settings

Attribute Name	Format/Values	Description
Device ID		Displays the unique identifier of your device where the app is installed with the option to copy it to your clipboard. Also called the client UUID and can be used as part of a device enforcement policy. It's generated at installation and can't be changed.
VPN Protocol	Adaptive TCP UDP	Force a particular transport protocol (UDP or TCP) or set to adaptive, which individually chooses the protocol from the remote lines in the profile.
Connection Timeout	10 sec 30 sec 1 min 2 min Continuous Retry	How long the app tries to connect to a VPN server before giving up. If set to Continuous Retry, the app retries indefinitely.
Battery Saver	On/Off	Pause the VPN connection when the mobile device screen goes blank.
Seamless Tunnel	On/Off	Block the internet while the VPN is paused or reconnecting.
Shortcut Minimize	On/Off	When enabled, the shortcut is minimized for a VPN connection launched from a shortcut that doesn't require user input for authentication.
Captive Portal Detection	On/Off	The app tries to detect a network with a captive portal during either a network change or the app launch.
Confirmation Dialogs	All None On disconnect On reconnect	Choose which actions the app shows confirmation dialogs: all, none, on disconnect, or on reconnect.
Theme	System Light Dark	Set the application's color theme.
Minimum TLS Version	Profile default TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3	Set the minimum SSL/TLS version for communication with the OpenVPN server. If you select a specific TLS version, it overrides any profile setting. If you select Profile Default, the app uses the tls-version-min profile directive if it exists, or TLS 1.0 otherwise.
Notifications	On/Off	Show OpenVPN Connect notifications as toast messages.

Table 6. Advanced settings

Attribute Name	Format/Values	Description
Security Level	Preferred (Recommended) Legacy Insecure (Not Recommended)	Set the security settings for the VPN connection: Preferred: Use the current, preferred security settings for modern systems and servers. This setting also disables compression. Legacy: (Default) Use the currently acceptable cryptographic algorithms that adhere to current security standards. This setting allows some older, but still secure algorithms in widespread use, ensuring compatibility with a wide range of servers. This setting allows downlink compression, the AES-CBC algorithm, and requires at least TLS version 1.2. Insecure: Use algorithms and other features no longer considered secure. This should only be used as a last resort, and we recommend you upgrade the OpenVPN server to use more secure algorithms. This setting enables legacy ciphers and algorithms (DES, 3DES, MD5, BF-CBC, and RC4), weak certificate signatures, TLS 1.0, 1024-bit RSA certificates, and full compression.
Enforce TLS 1.3	On/Off	Force the VPN connection to use TLS 1.3 as the minimum version for communicating with the server.
Allow Unused Address Families	Yes No	Allow address-family traffic that is different from the VPN IP configured through the tunnel.
Allow LAN Access	On/Off	Allow LAN reachability with an active VPN connection.
DNS Fallback	On/Off	If enabled, use Google DNS servers (8.8.8.8 and 8.8.4.4) as a fallback for connections that route all internet traffic through the VPN tunnel but don't define any VPN DNS servers.
System Browser Auth	On/Off	Whether to use the system browser for web authentication.

In this section:

Was this helpful?