Etonify

Etonify is an open-source VPN client for Android, built on a modified sing-box core. It is designed for users who already have a VPN subscription, a share link, or a configuration file. Etonify gives you detailed routing control, diagnostics, and full oversight of your VPN connection.

Important: Etonify does NOT sell or provide VPN servers. Only use subscriptions and configurations you own or are authorised to use.

What works?

- VPN TUN (system-level) and local HTTP/SOCKS proxy (can run together) - Import subscriptions from URL, QR code, file, clipboard, Android share sheet, and deep links - Support for sing-box JSON, Xray JSON, Clash YAML, SIP008, WireGuard, and common share-link formats - Per-app split tunneling (through VPN or bypass VPN) - Traffic-rule presets (e.g., route Russian services directly, AI/social through VPN) - AdGuard DNS filtering and custom DNS resolvers (UDP, TCP, DoT, DoH) - In-app update checks and verified APK installation - Detailed diagnostics, exportable logs, traffic graph, and server testing (URLTest) - Backup/restore of profiles with names, servers, and update schedules

What does NOT work?

- Built-in free VPN servers - Windows, iOS, macOS, or Linux releases (not supported at this time)

Supported protocols and formats

- VLESS, VMess, Trojan - Shadowsocks and ShadowsocksR - Hysteria and Hysteria2 - TUIC, WireGuard, AnyTLS, NaiveProxy - HTTP and SOCKS upstream proxies Parsers recognise these when importing; unknown or invalid outbounds will be reported.

Key features for everyday use

- Foreground service keeps the tunnel alive even when the app is in the background. - Notification shows selected server, latency, traffic speed, and stop/refresh controls. - Safe refresh: an empty or invalid server response does not overwrite your last working profile. - URLTest measures actual proxy performance (including TLS handshake), not ICMP ping. - Results are clear: each server shows availability, latency, or failure reason. - Sorting: by order, availability, latency, name, or country. - Export logs with runtime, network, memory, and configuration details. - Local-network bypass, leak protection, and experimental options (FakeIP, TFO, multipath, TLS fragmentation) – keep defaults unless you know why to change them.

Security and updates

- Updates are downloaded from GitHub Releases; the app verifies package name, Android version, signing certificate, file size, and SHA‑256 before installation. - All settings, subscriptions, and credentials are encrypted with AES‑GCM; the key is stored in Android Keystore. - Secrets are redacted from logs and exported reports. - Unsafe certificate options are disabled by default and clearly marked as risky. - Subscription downloads require HTTPS (except for literal loopback addresses like localhost, 127.0.0.1).

Limitations and expectations

- Etonify is a client, not a provider. - Large subscriptions and full server checks may temporarily increase CPU, memory, network, and battery usage. - Experimental networking options may reduce compatibility; keep defaults unless you understand the changes. - Local proxy clients must be configured manually with the address, port, and credentials shown by the app.

License

GNU General Public License v3.0 or later