KabelWacht
com.github.muelli.kabelwacht
Zapstore Catalog A simple, free WireGuard VPN client: scan, import, and manage tunnels.
KabelWacht is a minimal, fully free-software WireGuard® client for Android. It does one thing well: manage WireGuard tunnels and connect. Features: * Create, list, search, edit and delete WireGuard profiles. A profile that can no longer be read is shown as invalid, so you can remove it. * Import a configuration by scanning a QR code or opening a .conf file. * Export a tunnel back to a standard wg-quick .conf file, protected by device authentication — the file contains your private key. * One-tap connect/disconnect with a per-tunnel switch. * Toggle a tunnel from outside the app: launcher shortcuts, a resizable home-screen widget you can point at a particular tunnel, or a Quick Settings tile (long-press it to open the app). * Run conditions: let a tunnel connect and disconnect by itself depending on the network — only on Wi-Fi, every Wi-Fi except the ones you list, only on chosen networks, never on mobile data or while roaming, or on unmetered connections only. * Always-on VPN support, including reconnecting after a reboot. * A structured editor with Interface and Peer sections, with the complete wg-quick file one tap away. It shows the tunnel's public key too, ready to copy for whoever administers the server. * Fully usable with a hardware keyboard — shortcuts for search, new tunnel and save, and every control reachable by Tab and arrow keys. * Userspace WireGuard backend — no root required. Privacy and freedom: * 100% free and open-source software (AGPL-3.0-or-later). * No trackers, no analytics, no advertising. * No Google Play Services or other proprietary dependencies. * The only network connection made is your own WireGuard tunnel. * Location permission is optional and asked for only if you set up Wi-Fi network-name rules, because Android requires it to read Wi-Fi names. Your location is never used or stored. * Release builds are reproducible: anyone can rebuild the published APK from source and get the same bytes. Built on the official WireGuard tunnel library and the ZXing QR decoder. WireGuard is a registered trademark of Jason A. Donenfeld. This project is not officially affiliated with or endorsed by the WireGuard project.
First release: Nov 5, 2026, 3 total releases.
Most recent release: Nov 12, 2026.
Appears in 0 app stacks.
0 sats / 0 zaps received in the past year.
Sats Received
Underlying data available via MCP: app_zaps, app_releases.
Zap Count
Underlying data available via MCP: app_zaps, app_releases.
Releases
- Nov 12, 2026 187A tunnel that is connected but whose peer does not answer now raises an alert, instead of failing silently. A tunnel with a hostname endpoint (dynamic DNS) reconnects by itself when the peer's address changes. The alerts are split over three notification channels, so Android's settings can mute or raise each kind on its own. The privacy policy menu is gone from the tunnel list.
- Nov 10, 2026 174While a tunnel is connected, a status notification shows live traffic and the last handshake, with a Disconnect button. The same numbers appear on the connected tunnel's row; "no handshake yet" points at a wrong key or an unreachable endpoint. You are now alerted when a tunnel fails to connect unattended (run conditions, always-on VPN) or is stopped by the system or another VPN. Run-condition monitoring no longer stops itself right after starting.
- Nov 5, 2026 142Long-pressing the Quick Settings tile now opens the app instead of Android's app-info page. Renaming a tunnel keeps it as the always-on tunnel. A tunnel whose configuration can no longer be read is now listed, marked as invalid, so you can delete it instead of it lingering invisibly.