Modern encryption
Sessions run over WireGuard or AmneziaWG. Your private keys are generated on the phone and never leave it.
The Android app is installed directly from this page as an APK file, not from the Play Store. It takes about a minute, and the guide below covers every prompt Android will show you.
SHA-256 6bbc464d475e0694570f61e20bb056840f7cb97a94b260445110ba7a742a1b72
Every download from this page is the file the TNL team published, checked against this SHA-256.
Android protects you by refusing app files from outside the Play Store until you allow them. These five steps are what that looks like.
Open this page on the phone itself and press the download button. Your browser warns that the file might be harmful — that warning appears for every APK, whatever the source. Choose Download anyway.
When you open the downloaded file, Android asks for permission once. Tap Settings on that prompt and turn on the switch for the browser you used. You can also reach it any time at Settings › Apps › Special access › Install unknown apps.
The Android package installer opens and shows the app name and what it can access. Press Install and wait a few seconds. If your phone shows a Play Protect notice about an unrecognised app, choose Install anyway — it appears because TNL is not distributed through the Play Store.
The first time you connect, Android shows a system dialog asking to set up a VPN connection. Tap OK. This is Android's own permission and every VPN app on the platform must ask for it.
Open TNL, enter the username and password you were given, choose a server and press Connect. A key icon appears in the status bar while the tunnel is up.
Sessions run over WireGuard or AmneziaWG. Your private keys are generated on the phone and never leave it.
If a direct connection is blocked, the app switches to a wrapped transport without you doing anything.
Download a newer APK from this page and install it over the top. Your account and settings stay where they are.
Common answers before you contact support.
TNL is distributed directly as an APK from this page. Download it here rather than from any other site — the SHA-256 above tells you the file is the one we published.
That permission applies to the one app you grant it to, and only lets it start an install that you still have to confirm. You can switch it back off in Settings › Apps › Special access › Install unknown apps once TNL is installed.
Play Protect flags anything that did not come from the Play Store. Choose More details and then Install anyway to continue.
An older TNL build with a different signature is still installed. Uninstall the old app first, then install this APK.
Some phones stop background apps aggressively. In Settings › Battery, exclude TNL from battery optimisation so it can hold the tunnel open.
Download the newest APK from this page and install it over the existing app. Your account stays signed in; there is no need to uninstall first.
Accounts are issued by the TNL team. The app does not create accounts and there is no self-service sign-up here.