OpenVPN Connect App for Android Settings Configuration⁠

Device ID

Displays the unique identifier of your device where the app is installed with the option to copy it to your clipboard. Also called the client UUID and can be used as part of a device enforcement policy. It's generated at installation and can't be changed.

VPN Protocol

• Adaptive

• TCP

• UDP

Force a particular transport protocol (UDP or TCP) or set to adaptive, which individually chooses the protocol from the remote lines in the profile.

Connection Timeout

• 10 sec

• 30 sec

• 1 min

• 2 min

• Continuous Retry

How long the app tries to connect to a VPN server before giving up. If set to Continuous Retry, the app retries indefinitely.

Battery Saver

On/Off

Pause the VPN connection when the mobile device screen goes blank.

Launch Options

• Connect latest

• Restore connection

• None

App behavior configuration after the device reboots:

• Connect latest: Launches the app after a reboot and tries to connect to the latest connected profile in the list.

• Restore connection: Launches the app after a reboot and tries to reconnect to the profile that was connected before the app shut down.

• None: No actions taken after a reboot.

Seamless Tunnel

On/Off

Block the internet while the VPN is paused or reconnecting.

Shortcut Minimize

On/Off

When enabled, the shortcut is minimized for a VPN connection launched from a shortcut that doesn't require user input for authentication.

Captive Portal Detection

On/Off

The app tries to detect a network with a captive portal during either a network change or the app launch.

Confirmation Dialogs

• All

• None

• On disconnect

• On reconnect

Choose which actions the app shows confirmation dialogs: all, none, on disconnect, or on reconnect.

Theme

• System

• Light

• Dark

Set the application's color theme.

Notifications

On/Off

Show OpenVPN Connect notifications as toast messages.

Security Level

• Preferred (Recommended)

• Legacy

• Insecure (Not Recommended)

Set the security settings for the VPN connection:

• Preferred: Uses modern, recommended security settings for today's systems and servers. This level disables compression and only supports secure AEAD ciphers (such as AES-GCM and ChaCha20-Poly1305).

• Legacy: (Default) Use the currently acceptable cryptographic algorithms that adhere to current security standards. This setting allows some older, yet still secure algorithms in widespread use, ensuring compatibility with a wide range of servers. This setting allows downlink compression, utilizes the AES-CBC algorithm, and requires a minimum TLS version 1.2.

• Insecure: Use algorithms and other features no longer considered secure. This should only be used as a last resort; we recommend upgrading the OpenVPN server to use more secure algorithms. This setting enables legacy ciphers and algorithms (DES, 3DES, MD5, BF-CBC, and RC4), weak certificate signatures, TLS 1.0, 1024-bit RSA certificates, and full compression.

Enforce TLS 1.3

On/Off

Force the VPN connection to use TLS 1.3 as the minimum version for communicating with the server.

Allow Unused Address Families

• Yes

• No

Allow address-family traffic that is different from the VPN IP configured through the tunnel.

Allow LAN Access

On/Off

Allow LAN reachability with an active VPN connection.

DNS Fallback

On/Off

If enabled, use Google DNS servers (8.8.8.8 and 8.8.4.4) as a fallback for connections that route all internet traffic through the VPN tunnel but don't define any VPN DNS servers.

System Browser Auth

On/Off

Whether to use the system browser for web authentication.