To set up Windscribe on your Android device, download the app from the Google Play Store (or grab the APK directly from our site if you'd rather not let Google log the install), sign in or create a free account, then tap the big power button to connect.
The whole thing takes just a few minutes. This guide walks you through each step and the settings worth turning on once you're in.
Make sure you have the following ready before beginning the setup process:
There are two ways to install Windscribe, depending on how much you trust app stores. The Windscribe Android client is fully open-source, so you can inspect the code yourself on GitHub if you're the suspicious type.
This is the easiest way to get Windscribe on your Android device. Truly easy peasy lemon squeezy.
If you can't use Google Play, you can download the APK directly from Windscribe. FYI, an APK is just the Android installation file, the package your phone uses to install an app outside the Play Store. Installing this way also avoids tying an install record to your Google account (Google calls this "library history," which is a polite name for a list of everything you've ever installed).
Note that the APK installs the same app with the same requirements, so it won't run on Android versions older than 7.0.
Figure 1: Windscribe for Android welcome screen showing Google sign-in, login, and sign-up options.
Figure 2: Windscribe Android Locations screen while disconnected. The public IP address has been redacted for privacy.
NOTE: Free Windscribe users can only connect to free locations (we offer servers in 10 countries on the free plan). All paid locations are marked with a star and require a paid plan.
Once connected, a few options under the menu are worth your time. Here is a breakdown of what they do and how they protect you.
On desktop (Windows, Mac, and Linux), Windscribe has a built-in Firewall setting that blocks all traffic outside the VPN tunnel. On Android, that job is handled by the operating system itself rather than by a setting inside the app.
HOW TO SET IT UP: Open Android's Settings > Network & internet > VPN, tap the gear icon next to Windscribe, and turn on Always-on VPN and Block connections without VPN. (The exact menu path varies slightly by manufacturer and Android version.)
Together, these two Android settings stop any traffic from leaving your phone unless it's going through the VPN tunnel. If your connection ever drops, nothing leaks out over your real IP address (which reveals your approximate location). The connection simply fails closed. Windscribe's own Firewall page notes that Always-on VPN has the same effect on Android as the desktop Firewall. Turn this on.
What it is: Our customizable, network-level blocker.
What it does: While you're connected, it blocks many ad, tracker, malware, and other unwanted domains at the DNS level, before they ever load on your phone.
Why you need it: It can save your mobile data, speed up your web browsing, and cut down on tracking. You choose what to block. (Yes, it's named after a real person. No, we won't explain.)
A note on plans: The Free plan includes the Malware and Ads blocklists plus 3 custom rules. Build-A-Plan unlocks all blocklists plus 10 custom rules, and Pro unlocks all blocklists plus 1,000 custom rules. You can read more on the R.O.B.E.R.T. feature page, and change your own settings from your account's R.O.B.E.R.T. configuration in the app or web dashboard.
What it is: A feature that splits your phone's internet connection into two pathways.
What it does: On Android, split tunneling is app-based: you choose specific apps to either route through the VPN or send straight to your normal internet provider.
Why you need it: Some banking apps or local food delivery services get suspicious and lock you out if they think you're logging in from another country. With split tunneling, you can exclude your banking app from the VPN while keeping the rest of your phone protected.
Important caveat: If you've turned on Android's Always-on VPN plus Block connections without VPN (recommended above), Exclusive mode in split tunneling won't work as expected, because Android blocks any connection that tries to bypass the tunnel, so apps you meant to send outside the VPN simply won't get online. Pick one approach or the other depending on what matters more to you.
What it is: An automated trigger for your security settings.
What it does: It monitors your phone's network connection and automatically turns the VPN on when you join an untrusted network.
Why you need it: You shouldn't have to manually remember to turn on your VPN every single time you connect to a sketchy coffee shop, hotel, or airport Wi-Fi. This does the remembering for you.
What it is: A protocol is the connection method the VPN uses to package and send your data.
What it does: It dictates how your data is encrypted and transmitted over the web.
Why you need it: Different networks block different types of traffic. On Android we offer industry standards including WireGuard (blazing fast and lightweight), IKEv2, and OpenVPN (both TCP and UDP). Windscribe also includes obfuscated connection modes:
When to change it: If you're in a restrictive region that actively blocks VPN networks, switching to Stealth or WStunnel can help you slip past deep packet inspection and stay connected.
For a set-and-forget setup, combine Windscribe's Network Options / Auto-Secure with Android's Always-on VPN and Block connections without VPN. That way the moment your phone joins an unknown Wi-Fi network, Windscribe connects, and if the connection ever drops, nothing leaks. The most secure setup is the one you don't have to think about, because the security feature you forget to turn on protects exactly nobody.
Now that Windscribe is set up on your Android device, it's time to get the most out of your setup. Learn more on the R.O.B.E.R.T. feature page, or visit our Help Center for setup guides for your other devices.