KabelWacht

KabelWacht is a minimal, fully free-software WireGuard® client for Android.

It does one thing well: manage WireGuard tunnels and connect.

Features:

• Create, list, search, edit and delete WireGuard profiles.
• Import a configuration by scanning a QR code or opening a .conf file.
• Export a tunnel back to a standard wg-quick .conf file, protected by
device authentication — the file contains your private key.
• One-tap connect/disconnect with a per-tunnel switch.
• Toggle a tunnel from outside the app: launcher shortcuts, a resizable
home-screen widget you can point at a particular tunnel, or a Quick
Settings tile.
• Run conditions: let a tunnel connect and disconnect by itself depending
on the network — only on Wi-Fi, every Wi-Fi except the ones you list,
only on chosen networks, never on mobile data or while roaming, or on
unmetered connections only.
• Always-on VPN support, including reconnecting after a reboot.
• A structured editor with Interface and Peer sections, with the complete
wg-quick file one tap away. It shows the tunnel's public key too, ready
to copy for whoever administers the server.
• Fully usable with a hardware keyboard — shortcuts for search, new
tunnel and save, and every control reachable by Tab and arrow keys.
• Userspace WireGuard backend — no root required.

Privacy and freedom:

• 100% free and open-source software (AGPL-3.0-or-later).
• No trackers, no analytics, no advertising.
• No Google Play Services or other proprietary dependencies.
• The only network connection made is your own WireGuard tunnel.
• Location permission is optional and asked for only if you set up Wi-Fi
network-name rules, because Android requires it to read Wi-Fi names.
Your location is never used or stored.
• Release builds are reproducible: anyone can rebuild the published APK
from source and get the same bytes.

Built on the official WireGuard tunnel library and the ZXing QR decoder.

WireGuard is a registered trademark of Jason A. Donenfeld. This project is not
officially affiliated with or endorsed by the WireGuard project.