< Back

How to set up IKEv2 manual connection on Android?

This guide will cover the necessary steps of configuring the IKEv2 manual connection with Surfshark on your Android device. IKEv2 can help you connect to Surfshark servers in restricted network countries or on older Android versions.


Here are the steps that we will go through:

You will need an Android device and an active Surfshark subscription to follow along.



Get your credentials


  1. Please visit surfshark.com and log in to your account.  You can find the direct link here.

    In case this link doesn't work, please try this page instead.

  2. Go to the VPN -> Manual setup -> Manual -> Credentials section and copy the Username and the Password.


Select your location

  1. Go to the VPN -> Manual setup -> Manual -> Files section.

  2. Select which location do you wish to connect to and copy the domain address under the locations name like in the screenshot.



Download the certificate

  1. Go to the VPN -> Manual setup -> Manual -> Files section.

  2. Scroll down until you see the IKEv2 certificate under Other configuration files. Tap on the arrow-down logo on the right of the IKEv2 certificate to download a certificate file.


    Save it in a folder of your choice but don't open this file yet.


Install the application


  1. Search for the strongSwan VPN Client application on the Play Store. Tap on Install to install the application.


  2. Once the installation process ends, open the app using the Open button.



Set up the application


  1. Open the strongSwan VPN Client application. You will see a screen like this. Tap on three vertical dots on the top right corner.


  2. A menu will pop up. Tap on CA certificates.


  3. A certificate list will appear. Tap on three vertical dots again.


  4. Tap Import certificate on the menu that appears.


  5. Search for the certificate file called "surfshark_ikev2.crt" which you downloaded on the "Download the certificate" step and tap on it.


  6. A pop-up will appear which asks your permission to import the certificate. Tap Import certificate. Once you receive a message that the certificate was successfully imported, tap the arrow on the top-left corner to return to the main screen.


  7. Once you are back on the main screen, tap on Add VPN profile button on the top-right corner.


  8. You will see a screen where you will need to insert the required information.


    In the Server field enter the hostname of one of our servers from the "Select your location" step you will use.
    In the username and password fields enter the service credentials from the "Get your credentials" step.
    In the profile name field, you can input the name of your choice. This field is optional and you can leave it empty.

    Once you fill the fields, tap on the Save button.


  9. You will automatically return to the main screen. A new entry will appear, which is your connection profile. Tap on the profile to connect.


  10. If the connection is successful, you will see this once you connect.


    To disconnect, tap the Disconnect button right below the status bar.




To make sure that you have connected successfully, please take a look at this article.



Congratulations! You have successfully set up IKEv2 manual connection to Surfshark servers! As long as you’re connected, your location is private, and your sensitive data is secure.


If you have any further questions, our customer success team will help you 24/7 over a live chat or email.


You may also be interested in:

Was this article helpful?