VPN for Android: Setup Guide and Troubleshooting

Where to download an Android VPN: Google Play or APK

Start with Google Play. The store checks apps before publishing, handles updates automatically, and shows the developer, download count, and data safety details. Free apps from Google Play install normally in Russia.

For VLESS protocol subscriptions, you need a compatible client. Byte VPN recommends Incy for Android. As of October 30, 2026, it is available on Google Play with over a million downloads. Other apps like v2rayNG, NekoBox, and Happ also accept subscription links. We compare them in our VLESS apps roundup.

An APK is an installation file downloaded from a website rather than an app store. You need it if the app disappears from Google Play or if your phone lacks Google services (like newer Huawei models). Apple and Google remove VPN apps from Russian stores at the request of Roskomnadzor (Russia's communications regulator). An app available today might vanish next month.

If Google Play says the app is unavailable in your region or you can't find it, check the developer's website. The store filters apps by your profile country, and searching by name might lead you to a clone with a similar icon. The genuine Incy app lists "INCY-DEV" as the developer.

Only get official APKs directly from the developer. For Incy, use the releases page in the INCY-DEV GitHub repository. The mobile builds are named "Android vX.Y.Z". You'll find a SHA256SUMS file next to the Incy.apk to verify the download hasn't been tampered with.

Read more about fake VPN apps and how to verify clients before installing them in our article on free VPNs.

How to install an APK

1. Open the developer's releases page in your mobile browser and download the latest Android APK.
2. Tap the downloaded file in your notifications or the "Downloads" folder.
3. Android will warn you that installing from this source is restricted. Tap "Settings" and toggle "Allow from this source" for your browser.
4. Go back and tap "Install". Google Play Protect might warn you about an unrecognized app; this is standard for many non-store APKs.
5. After installation, revoke the browser's install permission. Go to Settings → Apps → Special app access → Install unknown apps (the exact path varies by device).

APKs have two downsides. They don't update automatically—you must download new versions manually. The Incy developer recommends an app called Obtainium to track GitHub releases. Additionally, Play Store and GitHub builds might use different signature keys. If you get an "App not installed" error when updating, uninstall the old version, install the new one, and re-add your subscription.

Setting up a VPN on Android: Adding an Incy subscription

The process is nearly identical across all apps: copy the subscription link, paste it into the app, and allow Android to create a VPN connection. Here is how it looks in Incy as of fall 2026. The Android and iPhone interfaces are similar, but some buttons might differ.

1. Copy the subscription link from your VPN provider's dashboard. It starts with https://.
2. Open Incy. Before adding any servers, you will see "+ Add", "Paste", and a QR code scanner icon.
3. Tap "Paste" to pull the link from your clipboard, or "+ Add" to paste it manually, then confirm.
4. Wait for the server list to appear. Select a server and tap the large connect button.
5. Android will show a "Connection request" pop-up. The app is asking permission to set up a VPN connection and monitor network traffic. Tap "OK".
6. When a key icon or "VPN" appears in your status bar, the tunnel is active.

If the app requests permission to send notifications, allow it. Android VPN apps usually maintain a persistent notification to show connection status.

We explain how subscription links work and why you shouldn't share them in our guide on VLESS keys and subscriptions. You can verify your traffic is routed correctly using our VPN testing guide.

How to bypass the VPN for banking apps

Unlike iPhones, Android lets you choose which apps use the tunnel. Incy calls this split tunneling. This lets banking apps and Gosuslugi (Russia's public services portal) see your real Russian IP address. We provide step-by-step instructions in our Android split tunneling guide.

Android TV and smart boxes

These devices have their own quirks: remote control navigation, TV-specific app versions, and transferring subscriptions from a phone. Read more in our guide on setting up a VPN on your TV.

"Always-on VPN" and blocking connections without VPN

Since version 7.0, Android includes an "Always-on VPN" feature. When enabled, Android automatically launches the VPN after a reboot and keeps the tunnel active while the phone is on. This is more reliable than remembering to open the app yourself.

1. Go to Settings → Network and internet → VPN. On Samsung, it's Connections → More connection settings → VPN. On Xiaomi, it's Connection & sharing → VPN. If you can't find it, just search for "VPN" in settings.
2. Tap the gear icon next to your VPN app.
3. Toggle "Always-on VPN".
4. If necessary, also enable "Block connections without VPN".

The second toggle acts as a system-level kill switch: apps have no internet access until the tunnel connects. Android will warn you when enabling this. It prevents data leaks, but there's a catch. If the server goes down or your subscription expires, your phone is completely cut off from the internet. You won't even be able to access your provider's dashboard to top up. If this happens, temporarily disable the toggle.

This setting also causes issues on public Wi-Fi networks (hotels, cafes, airports) that require you to log in via a captive portal. The VPN won't connect until you log in, but you can't load the login page because the VPN isn't connected. Disable "Block connections without VPN", log in to the network, and turn it back on.

Why an Android VPN keeps disconnecting

If your VPN drops while the screen is off and you have to manually reopen the app every morning, your operating system is likely killing it to save battery. Phone manufacturers restrict background activity much more aggressively than stock Android, and each brand handles exceptions differently. Menu names also change between software versions. If you can't find a specific setting, use the search bar to look for "battery", "auto-start", or "background".

Xiaomi, Redmi, and POCO (HyperOS and MIUI)

1. Go to Settings → Apps → Manage apps and find your VPN client.
2. Enable "Autostart". On some versions, this is called "Background autostart" and is located in the permissions section.
3. Open "Battery saver" (sometimes just "Battery") and select "No restrictions".
4. Lock the app in memory: open your recent apps list, press and hold the VPN app card, and tap the lock icon (on some versions, you swipe the card down). This prevents the "Clear all" button from closing it.

Samsung (One UI)

1. Go to Settings → Apps → [Your VPN App] → Battery and select "Unrestricted".
2. Go to Settings → Battery → Background usage limits and ensure the app isn't listed under sleeping apps. On older One UI versions, this is under Device care → Battery.
3. Go to Settings → Apps → [Your VPN App] → Mobile data and toggle on "Allow background data usage".

Honor and Huawei

1. Find the "App launch" section. It's usually under Settings → Battery. On some models, it's just called "Launch".
2. Find your VPN app and disable "Manage automatically".
3. In the pop-up window, leave "Auto-launch" and "Run in background" enabled.
4. If you have a "Battery optimization" setting, select "All apps", find your VPN client, and tap "Don't allow".

Pixel and stock Android phones

Two steps are usually enough here. Go to Settings → Apps → [Your VPN App] → App battery usage and select "Unrestricted". Then, enable "Always-on VPN" as described earlier.

If battery settings are fine

• Another VPN app is running. Android only supports one active VPN connection at a time. A new connection automatically drops the old one. Ad blockers, firewalls, and network-protecting antiviruses often behave like VPNs and will cause the same issue.
• "Data Saver" is on. This Android mode restricts background data. Whitelist your VPN app or turn the mode off.
• You are manually clearing background apps. Swiping apps away or using the "Clear all" button (or third-party speed boosters) kills the VPN along with everything else.
• Your phone is switching networks. When moving from Wi-Fi to mobile data, the tunnel reconnects. If it drops completely during this handover, update the app and enable "Always-on VPN".
• The app is running in a different profile. Android runs VPNs separately for different user and work profiles. App cloners (like "Dual Apps" on Xiaomi or "Secure Folder" on Samsung) and work profiles operate in silos, meaning the main profile's VPN might not cover them.

Private DNS conflicts: How to check

Android includes a "Private DNS" setting. If you've entered a custom server address here—like an ad blocker's DNS—your phone sends requests to that server over an encrypted channel, bypassing the VPN app's DNS settings. When paired with a VPN, this can cause issues: the VPN connects, but websites won't load, or domain-based split tunneling rules fail to work properly.

1. Search for "Private DNS" in settings. It's usually under Network & internet on Pixel, Connections → More connection settings on Samsung, and Connection & sharing on Xiaomi.
2. Change the setting from a specific address to "Automatic" or "Off".
3. Reconnect the VPN and check if websites load.

If everything works now, leave it on "Automatic". You can try restoring your custom DNS server later to see if it remains stable.

Android VPN won't connect or isn't working: What to check

First, figure out where it's failing. If the connect button is unresponsive or immediately toggles off, the VPN won't connect. If the VPN icon appears but pages won't load, the tunnel is active, but traffic isn't passing through.

Why an Android VPN won't connect

• You canceled the "Connection request" pop-up. Tap connect again and confirm the request.
• "Always-on VPN" is enabled for a different app. Android usually prevents a second client from connecting while this is active. Disable it in the system VPN settings.
• Your subscription is suspended or out of funds. Check your provider's dashboard.
• Incorrect date and time. Enable automatic date and time settings, usually found under Settings → System → Date & time.
• It's a work phone. Corporate policies might block VPN configuration changes. You'll need to contact your IT department.

If the VPN connects but there is no internet

1. Update the subscription in the app. The servers might have changed.
2. Connect to a different server.
3. Toggle between Wi-Fi and mobile data. If it works on one but not the other, the network is the problem.
4. Turn off "Private DNS" and "Data Saver" if enabled.
5. Stop other VPN apps, ad blockers, and firewalls.
6. Delete the subscription from the app and add it again. If that fails, clear the app data (Settings → Apps → [App Name] → Storage) and set it up from scratch.
7. Restart your phone.

If the VPN only fails on mobile data and only in specific locations, your carrier might be enforcing restrictions. We detail these known blocks in our article on internet whitelists.

For error code explanations (like timeouts) and what to send to support, read our general troubleshooting guide on why a VPN won't connect.

Why and how to update your VPN app

VLESS clients rely on the Xray core, which developers frequently update. For example, Incy's Google Play changelog for late October 2026 mentions updating the core to "26.10.21". VPN providers also tweak their server configurations, and older client versions might stop recognizing the new setups. If your VPN suddenly stops connecting to all servers, but friends using the same provider have no issues, updating the app should be your first step.

Google Play updates store versions automatically. To check manually: open Google Play, tap your profile icon, select "Manage apps & device", and look at available updates. If you installed via APK, compare the version number in the app's settings with the latest release on the developer's page and download a fresh file if needed.

How to turn off or delete a VPN on Android

You can disconnect the VPN using the button in the app. If you enabled "Always-on VPN" and "Block connections without VPN" in system settings, doing this will cut off your internet. Turn those system settings off first if you need a break. To remove the VPN completely, just uninstall the app—the associated VPN connection will disappear with it.