WirePilot

Android VPN that embeds official WireGuard tunnel and applies SSID rules

Features Import and export official WireGuard ZIP archives of *.conf files, or a single .conf Create and edit tunnels in the app Many tunnels, one active Default tunnel for Wi‑Fi, plus one designated mobile-data tunnel Skip VPN on chosen SSIDs Split tunnel: AllowedIPs from the config, plus per-app exclude or include Automatic control: on, off, or timed pause (1–24 hours) Optional always-on VPN (the OS may restart the VPN; WirePilot still decides up vs down) Optional app lock (PIN and biometrics) Optional local logs and live tunnel usage Optional GitHub update check (Settings button, or once a day) that opens the release page How control works When automatic control is off or paused, WirePilot takes the default tunnel and the mobile tunnel down if they differ.

When control is on:

No imported / selected tunnel: do nothing Wi‑Fi with an unreadable SSID: do nothing, unless a last-known SSID is still valid (60 seconds) Wi‑Fi on an excluded SSID: tunnel down Cellular / other: bring up the designated mobile tunnel, or down if none is set Every other Wi‑Fi case: bring up the default tunnel Network changes and boot wait 3 seconds, then apply once. Timed pause expiry applies immediately.

While control is enabled or timed-paused, a foreground service keeps event-driven network monitoring alive so the SSID stays readable without opening the UI. WirePilot does not poll SSIDs or networks and does not prompt for battery optimization. A once-daily GitHub Releases check can notify when a newer tag exists.