VPN for Android: set it up and keep it on

What is the VPN setting on Android?

It is a system API, not a service. Android ships no VPN provider of its own; that screen lists the apps allowed to create a tunnel. An app asks for permission once, receives a virtual network interface, and from then on every packet the phone sends passes through it before reaching Wi-Fi or mobile data.

You will find it under Settings > Network & internet > VPN, or, on Samsung, under Connections > More connection settings > VPN.

Once a tunnel is up, marked by a small key icon in the status bar, everything on the device uses it: the browser, background sync, app updates, messaging apps. There is nothing to configure app by app. On a coffee shop network or hotel Wi-Fi, the router only sees encrypted traffic heading to one address, the VPN server, and the sites you open see the server's IP address instead of yours.

Android VPN setup with the official WireGuard app

SuaVPN does not ship an app of its own. It runs on WireGuard, and on Android you use the official WireGuard app from Google Play: free, open source, and maintained by the WireGuard project. There is nothing to type by hand. The SuaVPN panel generates a ready-made profile for each device, and the app imports it by scanning a QR code or opening a .conf file.

Each device gets its own key pair, so a lost phone can be revoked from the panel without touching your laptop's profile. Your plan sets how many devices you can register: three on Basic, five on Pro, ten on Family. The setup takes a few minutes:

• Install WireGuard from Google Play and open it.
• Sign in to the SuaVPN panel, go to Devices, add a device with a name you will recognize later ("Pixel 8", "work tablet"), and pick a location from the ones listed on the status page.
• In the app, tap the plus button and choose "Create from QR code". Point the camera at the code shown in the panel. If you opened the panel on the phone itself, save the .conf file and use "Create from file or archive" instead.
• Name the tunnel and flip the switch next to it. The first time, Android asks you to confirm that WireGuard may set up a VPN connection.
• Open the tunnel details. A recent "Latest handshake" timestamp means the phone and the server have exchanged keys and traffic is flowing.

Always-on VPN and the built-in kill switch

Back in Settings > Network & internet > VPN, tap the gear icon next to WireGuard. Two toggles matter. "Always-on VPN" brings the tunnel back after a reboot, a switch from Wi-Fi to mobile data, or the app being closed. "Block connections without VPN" goes further: if the tunnel drops, the phone has no internet until it is back. That second toggle is the kill switch other services advertise, built into Android itself.

Turn both on if you use public Wi-Fi regularly or travel with your phone. The trade-off: if the location you picked is offline or under maintenance, the phone stays offline too until you switch profiles or disable the block. Check the status page before assuming your Wi-Fi is broken.

Does a VPN drain your Android battery?

A little, but less than most people expect. WireGuard idles when nothing is being transferred, beyond a small periodic keepalive, and its cryptography runs efficiently on mobile processors. The cost grows in weak-signal areas, where the phone reconnects often, and when the manufacturer keeps killing the app in the background.

Mobile data is a different story, and one where marketing overpromises. A VPN does not give you free or extra data: every byte still counts against your carrier plan, plus a small overhead for the encapsulation. What changes is what the carrier can see, not how much you use.

Manufacturers are the other variable. Stock Android and Pixel phones generally leave WireGuard alone, while Samsung's One UI and Xiaomi's HyperOS are aggressive about closing background apps to save power, and a VPN app closed in the background is a tunnel that silently drops. Open the app's battery settings and set it to "Unrestricted" on Samsung, or turn off battery optimization on Xiaomi. If you run a data saver mode, add WireGuard to its exceptions. The other common complaints have short fixes:

• Connected but nothing loads: turn the tunnel off and on; check the location on the status page; if it persists, generate a fresh profile in the panel and import it again.
• Tunnel disconnects on its own: fix the battery settings above and enable Always-on VPN.
• QR code will not scan: raise the brightness of the screen showing the code, or import the .conf file instead.
• One app refuses to work: some banking and payment apps block traffic from known VPN address ranges. Turn the tunnel off for that session and back on afterward.

Free VPN apps on Google Play: what to check first

Search for "vpn" on Google Play and free apps fill the first several screens. Servers and bandwidth cost money, so a free app is paying for them somehow. A 2016 academic study of 283 Android apps that requested VPN permissions found that about 18% did not encrypt traffic at all and about 38% were flagged for malware or adware; many also asked for permissions a VPN has no reason to need.

If you still want to try one, do three things before tapping Install: read the permission list, find the privacy policy and look for what the company keeps, and check whether the developer explains how it makes money. If none of that is clear, the business model is probably your data. The free VPN guide goes deeper into the trade-offs.

What SuaVPN offers on Android, and what it does not

The short version: SuaVPN gives you WireGuard profiles for the locations listed on the status page, a panel to manage devices, and three plans by device count: Basic with 3, Pro with 5, Family with 10. Current prices are on the pricing page. Card payments go through Stripe from most countries, and prices are shown in Brazilian reais, so an issuer outside Brazil handles the conversion. There is no lock-in, you can cancel at any time from the panel, and you have seven days to ask for a full refund under Brazilian consumer law, which amounts to a full trial on your own phone and network.

Just as important is what is not on the list. There is no SuaVPN-branded app, no browser extension, no dedicated IP, no business plan, and no split tunneling: the profile routes all of the device's traffic through the tunnel. If you need any of those, a different service will fit better, and we would rather say so here than after you pay. For questions before or after signing up, use the support page; the iPhone guide covers the same setup on iOS, and the gaming guide the case of playing on a phone.