< Back

How to set up an IKEv2 manual connection on Android?

This guide will cover the necessary steps of configuring the IKEv2 manual connection with Surfshark on your Android device. IKEv2 can help you connect to Surfshark servers in restricted network countries or on older Android versions.

 

Here are the steps that we will go through:

You will need an Android device and an active Surfshark subscription to follow along.

 

 

Get your credentials

 

  1. Please visit surfshark.com and log in to your account.  You can find the direct link here.

    In case this link doesn't work, please try this page instead.

  2. Go to VPN -> Manual setup -> Manual -> Credentials and copy the Username and the Password.

    Mobile_credentials_borderless.png


Select your location



  1. Go to VPN -> Manual setup -> Manual -> Files.

  2. Select which location you wish to connect to and copy the domain address under the location's name like in the screenshot.

    location.png

 

Download the certificate



  1. Go to VPN -> Manual setup -> Manual -> Files.

  2. Scroll down until you see the IKEv2 certificate under Other configuration files. Tap on the arrow-down logo on the right of the IKEv2 certificate to download the certificate file.

    IKEv2_certificate.png

    Save it in a folder of your choice but don't open this file yet.

 

Install the application

 

  1. Search for the strongSwan VPN Client application on the Play Store. Tap on Install to install the application.

    playstore1.png

  2. Once the installation process ends, open the app using the Open button.

    playstore2.png

 

Set up the application

 

  1. Open the strongSwan VPN Client application and tap on three vertical dots on the top right corner.

    ikev21.png

  2. A menu will pop up. Tap on CA certificates.

    ikev22.png

  3. A certificate list will appear. Tap on the three vertical dots again.

    ikev23.png

  4. Tap Import certificate on the menu that appears.

    ikev24.png

  5. Search for the certificate file called "surfshark_ikev2.crt" (which you downloaded on the "Download the certificate" step) and tap on it.

    ikev25.png

  6. A pop-up will appear asking for your permission to import the certificate. Tap Import certificate. Once you receive a message that the certificate was successfully imported, tap the arrow on the top-left corner to return to the main screen.

    ikev26.png

  7. Once you are back on the main screen, tap on the Add VPN profile button located in the top-right corner.

    ikev27.png

  8. You will see a screen where you will need to insert the required information.

    ikev28.png

    In the Server field enter the hostname of the server you will be using (from the "Select your location" step).
    In the username and password fields enter the service credentials from the "Get your credentials" step.
    In the profile name field, input the name of your choice or leave it empty. This field is optional.

    Once you fill the fields, tap Save.

    ikev29.png

  9. You will automatically return to the main screen. A new entry will appear, which is your connection profile. Tap on the profile to connect.

    ikev291.png

  10. If the connection is successful, you will see this once you connect.

    ikev292.png

    To disconnect, tap the Disconnect button right below the status bar.

 

To make sure that you have connected successfully, please take a look at this article.

 

Congratulations! You have successfully set up an IKEv2 manual connection to Surfshark servers! As long as you’re connected, your location is private, and your sensitive data is secure.

 

If you have any further questions, our customer success team will help you 24/7 over a live chat or email.

 

You may also be interested in:

Was this article helpful?