Android guide

1. Download the .apk from the download page.

2. Enable “Install unknown apps” for your browser or file manager when prompted.

3. Open the downloaded file to install.

On first run, paste the relay-config string — the same string used on Windows and Linux.

Enter the host's code and tap Connect. Reach the host's LAN via:

Local SOCKS5 proxy

SAP quick-add

Add the SAP server's IP and instance number — the same dedicated loopback pattern as Windows:

For a SAProuter connection, add a generic forward for the router's port instead and rewrite only the first hop of the router string, exactly as on Windows.

Check the auto-detected Wi-Fi LAN, then tap Share this networkto get a code. More than one remote can join the same code at once (host fan-out) — the notification aggregates this as “N of M remotes online.” Enable Private to restrict joins to devices on the same subscription (multi-tenant/hosted relays only).

The session runs in a foreground service with wake and Wi-Fi locks, so it survives the screen turning off — but battery-optimization on some vendors can still kill it on very long sessions; exempt the app if that happens.

Relay config, WireGuard identities, and session state are encrypted at rest with the Android Keystore — the same protection DPAPI gives the Windows app.