Published May 22, 2026
How to Set Up a VPN on Android in 2026: WireGuard, AmneziaWG and VLESS
A complete guide to setting up a VPN on Android: which app to choose, how to import a config by QR or file, enable always-on and kill switch, configure split tunneling and fix the dreaded "no internet".
To set up a VPN on Android, install the right app (the official WireGuard client, AmneziaVPN for AmneziaWG/AWG 2.0, or a v2ray client for VLESS Reality), get your configuration from @fiery_VPN_bot or the mini-app, and import it via QR code, file or link. Setup takes 2-3 minutes, and after the first time connecting is a single tap.
In short: for plain WireGuard, install the WireGuard app and import the config by QR. But after Roskomnadzor escalated blocking in May 2026, the most resilient choice is now AmneziaWG (AWG 2.0) via the AmneziaVPN app β its obfuscated traffic looks like ordinary traffic and survives DPI-level blocking. Be sure to turn on "Always-on VPN" and "Block connections without VPN" (kill switch) in Android settings.
Which protocol and app to choose on Android
There is no single "correct" app on Android β your choice depends on the protocol you were issued. Fiery runs three current protocols, each with its own client.
WireGuard β the WireGuard app
The official WireGuard app from Google Play is the fastest and lightest. It's ideal when your ISP doesn't interfere with VPNs: minimal battery drain, instant connect, a clean interface. The one important downside: "plain" WireGuard is easy to detect by signature, and in some networks in 2026 it's throttled via DPI. If the connection drops or the handshake won't complete, switch to AmneziaWG.
AmneziaWG (AWG 2.0) β the AmneziaVPN app
AmneziaWG is the same WireGuard but with obfuscation: the traffic is disguised as ordinary traffic and doesn't reveal itself through a tell-tale signature. You set it up through the AmneziaVPN app (import by QR or file). This is the best choice for Russia in 2026: AWG 2.0 stays stable where plain WireGuard and VLESS already stumble. More in AmneziaWG vs WireGuard.
VLESS Reality β a v2ray client
VLESS Reality disguises traffic as ordinary HTTPS to a real website and works well as a backup. On Android you import it by link into a v2ray client (such as v2RayTun or Hiddify). What it is and how it works is covered in what is VLESS Reality.
| Option | Obfuscation | Ease of use | Best for |
|---|---|---|---|
| WireGuard app | No | Very high | Speed and battery life when DPI isn't in the way |
| AmneziaVPN (AWG 2.0) | Yes, built-in | High | Russia 2026, resilience to RKN blocking |
| v2ray client (VLESS) | Yes (as HTTPS) | Medium | Backup channel, TLS-disguised bypass |
Where to get your Fiery configuration
The config is issued in three formats, and all three work on Android:
- QR code β the fastest way: the app reads the settings with the camera.
- File (.conf for WireGuard/AmneziaWG) β handy if the QR isn't visible or you're configuring on the same phone.
- Link (vless://...) β for VLESS, imported into a v2ray client from the clipboard.
You can get the config in the Telegram bot @fiery_VPN_bot or in the mini-app at vpn.fiery.host: pick a protocol and device, and the bot sends you the QR, file and link.
Step by step: WireGuard on Android
- Install the WireGuard app from Google Play.
- In @fiery_VPN_bot or at vpn.fiery.host, pick the WireGuard protocol and Android device β get a QR or a .conf file.
- Open WireGuard, tap "+" β "Scan from QR code" (or "Import from file"). Grant camera access.
- Name the tunnel (e.g. Fiery) and save.
- Toggle the tunnel switch to "on". On first launch Android asks to allow a VPN connection β confirm it.
- Check that foreign sites open while Russian ones (banking, gov apps) stay direct and fast β that's Fiery's RU-direct routing.
Step by step: AmneziaWG (AWG 2.0) via AmneziaVPN
- Install the AmneziaVPN app from Google Play.
- In the bot, pick the AmneziaWG (AWG 2.0) protocol and Android device β get a QR or file.
- In AmneziaVPN choose to add a configuration and scan the QR (or import the file).
- Confirm the VPN profile creation when Android prompts.
- Tap "Connect". If the connection holds steady, this is your primary protocol for 2026.
Always-on VPN and kill switch on Android
Android can keep the VPN on system-wide and block any traffic that bypasses the tunnel β this prevents leaks the moment the network reconnects.
- Open "Settings" β "Network & internet" β "VPN" (on some firmwares it's "Connections" β "More settings" β "VPN").
- Tap the gear icon next to your profile (WireGuard or AmneziaVPN).
- Turn on "Always-on VPN" β the system will bring the tunnel up automatically.
- Turn on "Block connections without VPN" (kill switch) β without an active tunnel there's no internet, so leaks are impossible.
On some devices (especially with aggressive battery saving) always-on is only available for system VPN profiles β in that case set it up for WireGuard/AmneziaVPN specifically, not a third-party client.
Per-app split tunneling
You can route only the apps you need through the VPN and leave the rest direct. This saves battery and keeps maximum speed for Russian services.
- In WireGuard: open the tunnel β "Edit" β "All applications" and choose "Only these applications" or "All but these".
- In AmneziaVPN: the profile settings have a per-app split section β mark what should go through the tunnel.
Note: thanks to Fiery's relay architecture, Russian traffic already goes direct (low latency, banking and gov apps keep working), so split tunneling is more for fine-tuning specific apps than for splitting "RU vs foreign".
Battery and performance
- WireGuard is the most efficient β the protocol was designed for mobile and barely loads the CPU.
- Disable "battery optimization" for the VPN app (Settings β Apps β your app β Battery β "Unrestricted"), or the system may kill the tunnel in the background and drop the connection.
- AmneziaWG is slightly heavier than WireGuard due to obfuscation, but the difference is unnoticeable on modern phones.
- If you want maximum speed and DPI isn't a problem, stay on WireGuard; if resilience matters more, choose AmneziaWG.
What to do if there's "no internet" or the handshake fails
The most common Android problems and how to fix them:
- The tunnel is on but there's no internet. Make sure a second VPN isn't running β Android allows only one VPN connection at a time. Turn the others off.
- The handshake won't complete. This is often the sign of plain WireGuard being blocked by DPI. Switch to AmneziaWG β obfuscated traffic usually connects where plain WG goes silent.
- Re-issue / re-import the config. Grab a fresh QR/file from the bot and import it again β a stale or corrupted profile is a frequent culprit.
- Change location or protocol. If one protocol is throttled on your network, try another or a different server.
- Check the device clock. A badly wrong system time breaks the handshake β enable automatic date and time.
- Mobile data vs Wi-Fi. Sometimes a specific carrier filters UDP harder than your home ISP (or vice versa) β compare behavior on both networks.
If the problem is systemic and VPNs are throttled at the ISP level, see why VPN is blocked in Russia.
FAQ
Which VPN protocol is best for Android in 2026?
For speed and battery life, plain WireGuard. For resilience to blocking after the RKN escalation in May 2026, AmneziaWG (AWG 2.0) via AmneziaVPN. It's the most reliable choice right now.
Can I import the Fiery config by QR code?
Yes. Both WireGuard and AmneziaVPN can scan a QR with the camera. The @fiery_VPN_bot and the mini-app provide a QR, a .conf file and a link β pick whichever format is convenient.
Do I need root to set up a VPN on Android?
No. All protocols work through Android's system VPN API without root. You only confirm the VPN connection prompt on first launch.
Will banking and gov apps work with the VPN on?
Yes. Thanks to Fiery's RU-direct routing, Russian traffic goes direct from a Russian IP, so banks, SBP and gov services work without blocks and with low latency, while only foreign traffic goes through the tunnel.
Why does the connection drop when the screen turns off?
Battery optimization is to blame. Disable it for the VPN app and enable "Always-on VPN" in system settings so Android doesn't kill the tunnel in the background.
Get connected
Ready to set up a VPN on Android in a couple of minutes? Get your config by QR, file or link in @fiery_VPN_bot or the mini-app at vpn.fiery.host. WireGuard, AmneziaWG (AWG 2.0) and VLESS Reality, payment by MIR card, SBP, crypto or Telegram Stars, no logs. If you're unsure which protocol to choose, start with AmneziaWG β it's the most resilient in 2026.