KabelWacht

KabelWacht

A simple, free WireGuard VPN client: scan, import, and manage tunnels.

Tobias Mueller Connectivity Security VPN & Proxy

Download (16 MB)

Screenshots

Screenshot of KabelWacht Screenshot of KabelWacht Screenshot of KabelWacht Screenshot of KabelWacht Screenshot of KabelWacht

Description

KabelWacht is a minimal, fully free-software WireGuard® client for Android.

It does one thing well: manage WireGuard tunnels and connect.

Features:

* Create, list, search, edit and delete WireGuard profiles.
* Import a configuration by scanning a QR code or opening a .conf file.
* Export a tunnel back to a standard wg-quick .conf file, protected by
device authentication — the file contains your private key.
* One-tap connect/disconnect with a per-tunnel switch.
* Toggle a tunnel from outside the app: launcher shortcuts, a home-screen
widget, or a Quick Settings tile.
* Run conditions: let a tunnel connect and disconnect by itself depending
on the network — only on Wi-Fi, every Wi-Fi except the ones you list,
only on chosen networks, never on mobile data or while roaming, or on
unmetered connections only.
* Always-on VPN support, including reconnecting after a reboot.
* A structured editor with Interface and Peer sections, with the complete
wg-quick file one tap away.
* Fully usable with a hardware keyboard — shortcuts for search, new
tunnel and save, and every control reachable by Tab and arrow keys.
* Userspace WireGuard backend — no root required.

Privacy and freedom:

* 100% free and open-source software (AGPL-3.0-or-later).
* No trackers, no analytics, no advertising.
* No Google Play Services or other proprietary dependencies.
* The only network connection made is your own WireGuard tunnel.
* Location permission is optional and asked for only if you set up Wi-Fi
network-name rules, because Android requires it to read Wi-Fi names.
Your location is never used or stored.
* Release builds are reproducible: anyone can rebuild the published APK
from source and get the same bytes.

Built on the official WireGuard tunnel library and the ZXing QR decoder.

WireGuard is a registered trademark of Jason A. Donenfeld. This project is not
officially affiliated with or endorsed by the WireGuard project.

What’s new (117)

No changes to the app itself.

This release only changes how the build is packaged and signed for
distribution channels outside this project's own repository.

Versions

Version Date Size Requires Android Download
117 current
7c7fe1ef7d679d44…
 2026-10-07 16 MB API 29
112
f01fdb35e8bd5778…
 2026-10-05 16 MB API 29
99
8fd64a0fdd645ac7…
 2026-10-01 16 MB API 29

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • Internet accessSend and receive data over the internet.
  • Network stateCheck whether and how the device is connected.
  • Wi-Fi stateRead information about the Wi-Fi connection.
  • Foreground serviceKeep running in the background, visible in the status bar.
  • FOREGROUND_SERVICE_SPECIAL_USE
  • FOREGROUND_SERVICE_LOCATION
  • Run at startupStart automatically after the device is switched on.
  • NotificationsShow notifications.
Show 5 more permissions
  • Approximate locationDetermine the location via the network.
  • Precise locationDetermine the location via GPS.
  • CameraTake photos and videos.
  • BiometricsUnlock with fingerprint or face.
  • kabelwacht.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Comments