How to set up IKEv2 manual connection on Android – Surfshark Customer Support

In this tutorial, you will learn how to set up the IKEv2 VPN connection on your Android device.

You will need a device running the Android operating system and an active Surfshark subscription. You can find the available plans on Surfshark’s pricing page.

Get your credentials

NOTE: These are not your regular credentials, such as your email address and password.

Go to the Surfshark login page and log in. Tap on Produtcs > VPN > Manual setup > Desktop or mobile > IKEv2

NOTE: Keep this tab open as we'll need it for later.

Get server hostnames

Go to Produtcs > VPN > Manual setup > Desktop or mobile > IKEv2 and select the Locations tab.
Find the server hostname under the name of each location. Or, you might need to click on the location to find the server address.

Download the certificate

Go to Produtcs > VPN > Manual setup > Desktop or mobile > IKEv2 and select the Locations tab.
Scroll down until you see the IKEv2 certificate under Other configuration files. Tap on the arrow-down logo on the right of the IKEv2 certificate to download the certificate file.

NOTE: Don't open this file yet.

Set up the application

Search for the strongSwan VPN Client application on the Play Store. Tap on Install to install the application.
Once the installation ends, open the strongSwan VPN Client application and tap on three vertical dots in the top right corner.
In the menu that pops up, tap on CA certificates.
A certificate list will appear. Tap on the three vertical dots again.
Tap Import certificate on the menu that appears.
Search for the certificate file called surfshark_ikev2.crt (refer to Download and install the IKEv2 profile section of this article) and tap on it.
A pop-up will appear asking for your permission to import the certificate. Tap Import certificate. Once you receive a message that the certificate was successfully imported, tap the arrow on the top-left corner to return to the main screen.
Once you are back on the main screen, tap on the Add VPN profile button located in the top-right corner.

You will see a screen where you will need to insert the required information.

In the Server field, enter the hostname of the server you will be using (from the Get server hostnames section).
In the username and password fields, enter the service credentials (from the Get your credentials section).
In the profile name field, input the name of your choice or leave it empty. This field is optional.

Once you fill in the fields, tap Save.
You will automatically return to the main screen. A new entry will appear, which is your connection profile. Tap on the profile to connect.
If the connection is successful, you will see the following screen.
To disconnect, tap the Disconnect button right below the status bar.

Ensure that the connection is successful

We always recommend checking if Surfshark VPN is working after setting it up for the first time. You can easily do it by performing Surfshark IP leak test and a DNS leak test. For your convenience, both are available on our website.