OwnTunnel

OwnTunnel is not a VPN service. It is the tool that builds you one. Pick a country and OwnTunnel creates a WireGuard server inside your own cloud account — your server, on your own bill. About two minutes later this phone is connected to it. Your traffic goes from this device to that machine and nowhere else. There is no company in the middle. Not because we promise not to look, but because there is no middle to look from. What makes this different Every VPN app asks you to trust a stranger with all of your traffic. The good ones publish audits about what they promise not to keep. OwnTunnel removes the question: we run no servers, so there is nothing for us to keep, hand over, sell or lose. • No account. No sign-in, no email, no password, no phone number. • No logs. Not "we delete them" — there is no server of ours for traffic to pass through. • No analytics, no crash reporting, no advertising and no third-party SDKs of any kind. • Your keys never leave this device. The configuration and the private key are encrypted at rest under a key held in the Android Keystore, and they are excluded from cloud backup and from device-to-device transfer. • No location permission, ever. The camera is requested only when you open the QR scanner, and frames are decoded in memory and written nowhere. • Open source. Every claim above is checkable, line by line. One tap to your own server Pick a provider and a country. Paste an API token you generated yourself, in your own cloud account. OwnTunnel does the rest: it generates both key pairs on this device, creates the server, installs WireGuard on it and hands you a working tunnel. The server is yours from the first second. It lives in your account, it costs roughly 4.35 EUR a month with 20 TB of traffic, and you can delete it from your provider's console whenever you like. We cannot touch it — we hold no credentials for it and have no way to reach it. If OwnTunnel is left with a half-finished server after a crash or a cancelled setup, it asks you about it at the next launch and cleans it up. A machine quietly running on your bill is not something to be quiet about. Already have a server? Scan its QR code or paste its configuration. Everything else works the same. OwnTunnel speaks standard WireGuard: anything wg-quick understands, it understands. How the VPN works on this device OwnTunnel uses Android's VpnService API to send this device's traffic through the WireGuard tunnel you own. That is the app's core and only function. Everything inside the tunnel is encrypted by WireGuard between this device and your server. The app does not read your traffic, does not record it, does not filter it and does not send it anywhere but the server you created. Android asks for your permission the first time and shows the key icon in the status bar for as long as the tunnel is up. The kill switch is Android's own. Turn on Always-on VPN and Block connections without VPN in the system VPN settings and this device sends nothing at all while the tunnel is down; OwnTunnel answers when Android starts it that way. The app shows you where those switches live instead of pretending it owns them. Honest about the parts that are not free A server costs money and we say so before you tap anything. The setup screens quote the real monthly price and warn you that a new cloud account usually has to be verified before it can create anything. When we link you to a cloud provider and earn a referral credit for it, the screen says so in plain words — and offers the plain link that earns us nothing, right beside it. What you should know A VPN changes where your traffic leaves the network. It is not anonymity and it is not magic. What OwnTunnel gives you is a tunnel whose far end you own, instead of one that belongs to somebody selling you a promise. Requires Android 8.0 or later. WireGuard only, on purpose. English and Turkish. owntunnel.app