# Setting up strongSwan VPN on Android

To install the VPN, we recommend installing [F-droid](Fdroid/Install). Afterwards, you can download [strongSwan](/https://strongswan.org/) from [[F-droid](/https://f-droid.org/en/packages/org.strongswan.android/).
To install the VPN, we recommend installing [F-droid](Fdroid/Install). Afterwards, you can download [strongSwan](/https://strongswan.org/) from [[F-droid](/https://f-droid.org/en/packages/org.strongswan.android/).

Next, download the CA certificate. The specific certificate will come from your VPN provider. If you are running your own provider with [OpenIKED](iked/configure), you'll want to download `/etc/iked/ca/ca.crt` onto your Android mobile. [[OpenHTTPd](/openhttpd/configure) can be useful for this.
Next, download the CA certificate. The specific certificate will come from your VPN provider. If you are running your own provider with [OpenIKED](iked/configure), you'll want to download `/etc/iked/ca/ca.crt` onto your Android mobile. [[OpenHTTPd](/openhttpd/configure) can be useful for this.

Open with strongSwan VPN Client.

%25width=400pxg%25 Attach:strongswancacrt.jpg

Verify the certificate is correct, then tap `Import Certificate`. You should see `Certificate successfully imported` at the bottom. Once the certificate has been imported, you may need to then tap the back button at the top left.

%25width=400pxg%25 Attach:strongswanimportcrt.jpg

Tap `Add VPN Profile`. Fill in the details:

%25width=400pxg%25 Attach:strongswanaddvpnprofile.jpg

# Server: Replace `example.com` with your actual VPN server.

# VPN Type: IKEv2 EAP (Username/Password)

# Username: Replace `username` with your actual username

# Password: Replace `password` with your actual password.

# CA certificate: Make sure `Select automatically` is checked.

# Profile name: Replace it with your server name.

Tap `Save` at the top right.

Tap on the connection.

%25width=400pxg%25 Attach:strongswanvpnprofile.jpg

Tap `OK`.

%25width=400pxg%25 Attach:strongswanconnectionrequest.jpg

Afterwards, strongSwan will need you to disable battery optimizations. Tap `OK`. Then, tap `Allow` to allow the app to run in the background.

%25width=400pxg%25 Attach:strongswanrunbackground.jpg

If it has connected properly, you should see `Status: Connected`.

%25width=400pxg%25 Attach:strongswanconnected.jpg

Make sure to [test that your IP address is concealed](/Vpn.Myipaddress).