How to set up IKEv2 manual connection on Android

This guide will cover the necessary steps for configuring the IKEv2 manual connection with Surfshark on your Android device.

Here are the steps that we will go through:

• Get your credentials
  
• Select your location
• Download the certificate
• Install the application
• Set up the application
  
• Make sure your connection was successful

You will need an Android device and an active Surfshark subscription to follow along.

Get your credentials

1. Please visit surfshark.com and log in to your account.  You can find the direct link here.
   
   In case this link doesn't work, please try this page instead.
   
   
2. Go to VPN -> Manual setup -> Manual -> Credentials and copy the Username and the Password.
   
   
   
   
   

Select your location

1. Go to VPN -> Manual setup -> Manual -> Files.
   
   
2. Select which location you wish to connect to and copy the domain address under the location's name like in the screenshot.
   
   
   
   

Download the certificate

1. Go to VPN -> Manual setup -> Manual -> Files.
   
   
2. Scroll down until you see the IKEv2 certificate under Other configuration files. Tap on the arrow-down logo on the right of the IKEv2 certificate to download the certificate file.
   
   
   
   Save it in a folder of your choice but don't open this file yet.
   
   

Install the application

1. Search for the strongSwan VPN Client application on the Play Store. Tap on Install to install the application.
   
   
   
   
2. Once the installation process ends, open the app using the Open button.
   
   

Set up the application

1. Open the strongSwan VPN Client application and tap on three vertical dots on the top right corner.
   
   
   
   
2. A menu will pop up. Tap on CA certificates.
   
   
   
   
3. A certificate list will appear. Tap on the three vertical dots again.
   
   
   
   
4. Tap Import certificate on the menu that appears.
   
   
   
   
5. Search for the certificate file called "surfshark_ikev2.crt" (which you downloaded on the "Download the certificate" step) and tap on it.
   
   
   
   
6. A pop-up will appear asking for your permission to import the certificate. Tap Import certificate. Once you receive a message that the certificate was successfully imported, tap the arrow on the top-left corner to return to the main screen.
   
   
   
   
7. Once you are back on the main screen, tap on the Add VPN profile button located in the top-right corner.
   
   
   
   
8. You will see a screen where you will need to insert the required information.
   
   
   
   In the Server field enter the hostname of the server you will be using (from the "Select your location" step).
   In the username and password fields enter the service credentials from the "Get your credentials" step.
   In the profile name field, input the name of your choice or leave it empty. This field is optional.
   
   Once you fill the fields, tap Save.
   
   
   
   
9. You will automatically return to the main screen. A new entry will appear, which is your connection profile. Tap on the profile to connect.
   
   
   
   
10. If the connection is successful, you will see this once you connect.
    
    
    
    To disconnect, tap the Disconnect button right below the status bar.

Make sure your connection was successful

It's always recommended to check whether your connection was successful after setting up a VPN for the first time. This can be easily done by doing an IP leak test and a DNS leak test which is available on our website. Click here to find out how to make sure your connection was successful.

Congratulations! You have successfully set up an IKEv2 manual connection to Surfshark servers! As long as you’re connected, your location is private, and your sensitive data is secure.

You may also be interested in:

• How to set up OpenVPN client on Android?
  
• What protocols can I use with Surfshark?
• Why am I receiving Captcha requests?