Android has built-in support for VPNs using the PPTP, L2TP/IPSec, and IPSec/IKEv2 protocols.

Of these, the IPSec/IKEv2 combination offers the best protection.

PPTP and L2TP/IPSec are both considered outdated and weak, as they do not provide strong security levels.

Article image

Note: IPSec is a suite of communication protocols used to secure communications between two devices.

Additionally, a leaked NSA presentation suggests that they are aware of a vulnerability in the protocol.

With IPSec/IKEv2, the IKEv2 protocol within the IPSec suite is specifically used to secure the connection.

Article image

There are no known vulnerabilities in the protocol.

Once in the VPN prefs, tap Add VPN in the top-right corner.

Next is the punch in of VPN connection.

You will have to choose your VPN connection protocol from those offered by your VPN provider.

opt for best VPN protocol offered by your VPN provider.

This will be specific to an individual VPN server rather than the entire VPN provider.

To switch VPN servers, youd either need to edit the VPN profile or make a new one.

There are now three certificate options, IPSec user certificate, IPSec CA certificate, and IPSec server certificate.

The other two certificate options can be left blank unless otherwise instructed.

To do so you may be required to specify a DNS server.

This will configure your equipment to use the Cloudflare public DNS server.

Once youve specified a DNS server, it’s possible for you to switch on the always-on VPN setting.