OnionVPN

byPsychopath · Tools

Verified safeExclusive

Download APK

—

No reviews reviews

downloads

8.0

android

AI summary

Privacy-focused VPN that routes all device traffic through Tor with DNSCrypt, interactive per-app firewall, and threat-list filtering. New OpenVPN-over-Tor support, EU/EEA/Schengen relay exclusions, and three-way firewall verdicts (Tor, OVPN, or Deny). Dual Tor engines: C Tor or Arti/onionmasq. Includes kill switch, app lock, and editable torrc.

Generated by AI. May contain inaccuracies.

About this app

Privacy-focused Android VPN that routes all device traffic through Tor, with DNSCrypt for app DNS (over Tor SOCKS by default; FakeDNS / SOCKS5A as a settings fallback). Inspired by InviZible and Mullvad-style leak protection.

What it does

- Feature: Tor tunnel Description: Full-device VPN via hev-socks5-tunnel -> Tor SOCKS; kill switch blocks traffic when the tunnel is down

- Feature: DNSCrypt Description: App DNS resolved through DNSCrypt (upstream via Tor); TunDnsMux on 10.8.0.1

- Feature: Interactive firewall Description: OpenSnitch-style Accept / Deny for new outbound connections (notification + prompt, FIFO queue, permanent / session / temporary rules)

- Feature: Domain threat lists Description: HaGeZi lists colour destinations on prompts: safe (unlisted), ads/tracking/telemetry, malware/C2 — updates prefer Tor when the tunnel is up

- Feature: App lock Description: Lock the UI without stopping the tunnel or kill switch

- Feature: Tor tuning Description: Circuit rotation presets, stream isolation modes, editable torrc / dnscrypt-proxy.toml

- Feature: Tor engine Description: Dual backend: C Tor (libtor.so, default) or Arti (arti-mobile and/or onionmasq TUN)

- Feature: TUN data plane Description: hev-socks5 (C Tor / Arti fallback) or onionmasq (Arti preferred when libonionmasq_mobile.so is present)

- Feature: Circuit UI Description: Onionmasq path: per-app hops, NEWNYM-per-app, exit directory from NewDirectoryEvent

License

Proprietary / OnionPhone family

vpn privacy tor firewall dns open source

What's new

v0.3.69Aug 21, 2026

Added OpenVPN over Tor support — TCP OpenVPN client routed through Tor SOCKS, with dedicated OVPN SocksPort and sidecar relay. - Added Tor country exclusions for EU/EEA/Schengen federations, including Tor GeoIP {eu} for relays without a member-state tag. - Added wallet preset with extended MaxCircuitDirtiness for Cake Wallet-style Electrum and RPC. - Added three-way firewall verdicts: Via Tor, Via OVPN, or Deny. - Added live bridge and pluggable transport enable from clearnet with tunnel restart.
Improvements
Improved C Tor and Arti engine correctness for EntryNodes, ExitNodes, and ExcludeNodes with StrictNodes enforcement. - Improved Always-On VPN reconcile — no longer tears down Tor on cold idle blocking. - Improved firewall UI with heads-up prompts for OVPN-over-Tor when the tunnel is active. - GeoIP downloads now use probe SocksPort instead of SessionGroup. - Hardened recovery from kill-switch blocking when uplink is validated. - Auto-migrate legacy ExcludeNodes lists to include {eu} federation. - Tor country exclusions now support EU/EEA/Schengen federations with Tor GeoIP {eu}. - Settings preset for wallets with long MaxCircuitDirtiness and tips for Cake Wallet-style Electrum and RPC.
Fixes
Fixed OpenVPN over Tor sidecar SOCKS allowlist and libonionmasq_mobile.so rebuild. - Fixed Arti Entry/Exclude fail-closed behavior and circuit timing result handling. - Fixed onionmasq start parsing of ExitNodes via TorCountryCatalog. - Fixed Always-On and Private Space reconcile for cleaner state transitions. - Fixed OnionVPN notifyCoordinator retries and VPN ready wait.
And more...