OnionVPN

🧅 OnionVPN — Privacy-Focused Tor VPN for Android

OnionVPN is an advanced, privacy-focused Android VPN designed to route your device traffic through the Tor network while adding DNSCrypt protection, an interactive firewall, kill switch functionality, and extensive Tor configuration options. Built as part of the OnionPhone family, it combines Tor-based routing with modern leak-protection and security features.

🔐 Full-Device Tor VPN • Routes all device traffic through a Tor-based VPN tunnel. • Built-in kill switch blocks traffic whenever the tunnel is unavailable. • Uses hev-socks5-tunnel with Tor SOCKS for full-device routing. • Supports both the classic C Tor engine and the Rust-based Arti engine. • Tor bridges and pluggable transports are supported for restrictive networks.

🌐 DNSCrypt Protection • Resolves application DNS traffic through DNSCrypt. • DNSCrypt upstream traffic can be routed through Tor. • Uses TunDnsMux to integrate DNS resolution directly with the VPN tunnel. • Helps reduce exposure to conventional DNS-based tracking and leaks.

🛡️ Interactive Firewall • OpenSnitch-style interactive firewall for outbound connections. • Receive prompts when applications attempt new network connections. • Accept or deny connections directly from notifications. • Create permanent, temporary, or session-based rules. • FIFO connection queue helps manage multiple connection requests.

🚨 Domain Threat Intelligence • Uses multiple reputation and threat-data sources, including HaGeZi, URLhaus, Yoyo and uAssets. • Destinations can be visually classified in firewall prompts: 🟢 Safe / unlisted 🟠 Ads, tracking or telemetry 🔴 Malware / command-and-control • Threat-list updates prefer Tor when the tunnel is active.

🧅 Advanced Tor Controls • Circuit rotation presets. • Stream-isolation modes. • Configurable Tor settings through editable torrc configuration. • Select Tor exit countries where supported. • Entry and excluded-node controls with the C Tor engine. • New identity / circuit controls. • Detailed circuit and stream information with C Tor. • Support for .onion destinations and automatic onion routing. • Per-app Tor hops and per-app NEWNYM controls through the Onionmasq path.

⚙️ Flexible Architecture • Choose between C Tor and Arti at runtime. • Multiple TUN data-plane options using hev-socks5-tunnel or onionmasq. • Supports Tor pluggable transports including obfs4, meek, WebTunnel, Snowflake and Conjure. • Native Tor, DNSCrypt and networking components are integrated into the application.

🔒 Security & Privacy • Full-device VPN architecture helps keep applications behind the Tor tunnel. • Kill switch prevents traffic from escaping when the tunnel goes down. • Hardware Memory Tagging Extension (MTE) support on compatible devices. • Designed with GrapheneOS compatibility and hardened Android environments in mind. • Native components are built and maintained through the project's own build infrastructure.

🎨 Modern Android App • Built with Kotlin and Jetpack Compose. • Android 8.0+ (API 26+) support. • Optimized with Android Baseline Profiles for important VPN, Tor and DNSCrypt operations. • Available for ARM64 and x86_64 Android builds.

📌 Important OnionVPN is a privacy and anonymity tool, not a guarantee of complete anonymity or security. Tor can significantly change connection performance and latency, and the effectiveness of censorship circumvention depends on the network and available bridges/transports.

🔓 Open Source The application is publicly developed on GitHub and integrates Tor, Arti, DNSCrypt and other open-source networking components. The repository currently describes the OnionPhone family license as proprietary; check the project's repository for the latest licensing terms.