v2rayNG
by 2dust · GPL-3.0 · open source
An open-source proxy client built on Xray-core. Add your own server or subscription and it routes the phone’s traffic, or chosen apps, through it as a VPN.
Needs:Android 7.0+ · 64-bit ARM · your own server
2113 Apps is independent, not affiliated with or endorsed by 2dust. Official sources: v2rayng.2dust.link · source code on GitHub.
- Version
- 2.3.14
- Size
- 32.5 MB
- Requires
- Android 7.0+
- Updated
- 2026-10-28
Introduction
v2rayNG is a proxy client for Android, built on Xray-core, which also handles V2Ray’s protocols. It has no servers of its own: you add one or more servers, from your own setup or a provider’s subscription, and v2rayNG sends the phone’s traffic through them. It is developed by 2dust, who also makes v2rayN for Windows, macOS and Linux.
What it supports
From the app’s menus and source code for version 2.3.14:
- Protocols: VMess, VLESS, Trojan, Shadowsocks, SOCKS, HTTP, WireGuard and Hysteria2, plus policy groups, proxy chains and full custom configurations.
- Security and transports: TLS and REALITY, XTLS Vision, uTLS fingerprints; TCP, mKCP, WebSocket, HTTPUpgrade, XHTTP and gRPC. The menu still offers HTTP/2, but this version’s Xray core has removed that transport and refuses it.
- Importing from a QR code (camera or picture), the clipboard, a file, a subscription address, or v2rayN’s own
v2rayn://share links. - Three ways to run: as a VPN for the whole phone (the default), as a local proxy that apps connect to, or a root mode that redirects traffic without a VPN. The developer calls root mode a community contribution.
- Per-app proxying, in either direction, and routing rules by domain, IP address, port, protocol or app.
- Routing presets: China whitelist (the default), China blacklist, global, Iran whitelist and Russia whitelist. With the default, Chinese sites and local addresses connect directly and everything else goes through the proxy.
- A Quick Settings tile, a home-screen widget, Tasker actions and backups to a WebDAV server.
On a new install, DNS for proxied traffic defaults to Cloudflare’s DNS over HTTPS (https://cloudflare-dns.com/dns-query), and to AliDNS (223.5.5.5) for direct connections. If you update from 2.2.x, the app keeps the proxied DNS you already had, which was 1.1.1.1 by default.
What changed from 2.3.11 to 2.3.14
Version 2.3.11, released on 11 October 2026, was the first full release since 2.2.6 in July, after ten 2.3 pre-releases. It brought:
- An interface rebuilt with Jetpack Compose, with Material You colours on Android 12 and later.
- Background subscription tasks that can combine updating, testing every server, deleting the ones that fail and sorting the rest; custom HTTP headers for subscription updates.
- A TCP ping test, import of v2rayN share links, a page crediting translators, and a DNS field for WireGuard servers.
- The core moved to Xray-core 26.10.10; 2.3.13 then updated it to 26.10.21, an emergency security release that stopped trusting three root certificates affected by compromised intermediary keys and was built with a newer Go version to reject them even where the operating system’s certificate store had not caught up.
It also fixes two problems 2.2.6 had: the batch delay test showing −1 for WireGuard servers (#5918), and root mode breaking routing when a SOCKS username and password are set (#5908).
Versions 2.3.13 and 2.3.14 add subscription traffic, expiry and support-link information; a floating row of subscription tabs with server counts; and the default port when importing a Hysteria2 link that omits one. Version 2.3.14 was released on 28 October 2026.
What goes online
From the 2.3.14 source code:
- Nothing when the app starts. Subscriptions update automatically only if you turn that on for a subscription. If you also switch on testing after updates, each automatic update then tests every server in that subscription.
- The update check runs only when you open Check for update. It asks GitHub for the latest full release, or for pre-releases if you tick that, and the update opens in your browser.
- Routing data (the geoip and geosite files) is built into the app and only downloaded again from GitHub when you ask for it.
- The connection test, when you tap the status bar while connected, loads Google’s generate_204 page through the proxy and then asks api.ip.sb for your IP address and country.
- The Promotion item in the side menu opens a web page in your browser that advertises paid proxy services, with referral codes; the address is stored in the app in encoded form. Nothing is loaded unless you tap it.
We found no analytics or crash-reporting code. The developer’s privacy note, written in Chinese, says that v2rayNG itself sends no information to the developer.
About this file
- This is the developer’s standard arm64 APK of 2.3.14 from GitHub, signed with the key of the project (certificate O=v2ray), which the project’s release workflow holds. Each APK on GitHub also has a GPG signature; the key’s fingerprint is in the README.
- v2rayNG isn’t on Google Play, F-Droid or IzzyOnDroid; GitHub is its only official source.
- It is for 64-bit ARM phones. For 32-bit ARM phones and TV boxes, the project’s GitHub has an armeabi-v7a file, and, since 2.3.11, a universal APK for any processor, about twice the size.
- The 32.5 MB file runs on Android 7.0 and later and declares 12 permissions: the VPN, notifications, the camera for QR codes, the list of installed apps for per-app proxying, and starting at boot if you enable auto-connect, which is off by default. With auto-connect on, the VPN now also starts again after the app is updated.
- There are no screenshots: the project doesn’t publish any of the app itself.
- v2rayNG is licensed under the GPL-3.0. Its core library, AndroidLibXrayLite, is under the LGPL-3.0 and Xray-core under the MPL-2.0; this version uses Xray-core 26.10.21. The routing data comes from the Loyalsoldier projects, under the GPL-3.0 and CC BY-SA 4.0. The source of this version is at https://github.com/2dust/v2rayNG/tree/2.3.14, and of its core at https://github.com/2dust/AndroidLibXrayLite/tree/v26.10.21.
What’s inside the APK
Trackers
No code matching the Exodus Privacy tracker signatures.
Native code
Needs a 64-bit ARM phone; 32-bit-only devices are not supported.
Android versions
Built for Android 17 (target API 37).
Permissions
2 of them need your approval first.
CPU types in this build: arm64-v8a (64-bit ARM, almost every phone since 2017).
Asks you first (2)
Android shows a prompt before the app can use these.
- Use the camera · CAMERA
- Show notifications (Android 13+) · POST_NOTIFICATIONS
Granted at install (9)
Low-risk permissions Android grants automatically, plus any we have not classified.
- ACCESS_LOCAL_NETWORK
- ACCESS_NETWORK_STATE
- CHANGE_NETWORK_STATE
- FOREGROUND_SERVICE
- FOREGROUND_SERVICE_SPECIAL_USE
- INTERNET
- QUERY_ALL_PACKAGES
- RECEIVE_BOOT_COMPLETED
- WAKE_LOCK
Defined by other apps (1)
Permissions that belong to another app or to this app itself.
- com.v2ray.ang.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
More Information
- Package name
- com.v2ray.ang
- Version
- 2.3.14 (build 4000754)
- File size
- 32.5 MB (32,470,932 bytes)
- Requires
- Android 7.0 or later
- Category
- Network & Privacy
- License
- GPL-3.0
- Developer
- 2dust
- Source code
- github.com/2dust/v2rayNG
- Released
- Oct 28, 2026
- Signer SHA-256
- b7dc883e7678d6c618569e48a1c8c267a134a75f8bcb763510c8bffb3b90b077
- File SHA-256
- e574d20ae4f2962c225785c31480b1c82a2a0dae1b7fbda5bf7fb510d8c3a05b
- Checked
- , against the 2.3.14 release on GitHub · how we check · verify it yourself
Common questions
Is this APK the official v2rayNG release?
Yes. It is the file from the project’s 2.3.14 release on GitHub, byte for byte, and it matches the SHA-256 checksum GitHub publishes for it. It is signed with the certificate we recorded when we first checked v2rayNG (SHA-256 b7dc883e7678d6c618569e48a1c8c267a134a75f8bcb763510c8bffb3b90b077); a release signed with a different key would not be published here.
What Android version does v2rayNG need?
Android 7.0 or later (API level 24). Version 2.3.14 is built for Android 17 (target API 37). Needs a 64-bit ARM phone; 32-bit-only devices are not supported.
Can v2rayNG access the internet?
Yes. The APK requests Android’s internet permission. In total it declares 12 permissions, and 2 of them need your approval first.
Does v2rayNG contain trackers?
No known trackers: our scan of version 2.3.14 found no code matching the Exodus Privacy tracker signatures. The scan covers known tracker libraries; it doesn’t show what data the app itself sends.
Is v2rayNG open source?
Yes. v2rayNG is released under the GPL-3.0 licence, and its source code is published at https://github.com/2dust/v2rayNG.
Does v2rayNG come with servers?
No. You add your own by scanning a QR code, pasting a share link or adding a subscription address; this version ships no servers and no default subscription. The side menu has a Promotion item that opens an outside web page with advertisements for paid proxy services.
Does it work on an Android TV box?
Not well with a remote control. An open report says that since 2.3.1, when the interface was rebuilt with Jetpack Compose, the app “is no longer operable with a TV remote (D-pad)”; a proposed fix still hadn’t been merged when 2.3.14 came out. The developer has said the app “was not designed to support TV” at all. A mouse or a phone works.
Standard or “-fdroid” APK?
This is the standard one, which the developer’s wiki calls the first choice. The “-fdroid” file on GitHub differs “only” in its package name, for some devices such as Xiaomi’s; it isn’t from F-Droid, which doesn’t carry v2rayNG. The two install side by side and don’t update each other.
A server won’t connect, with a warning about “allowInsecure”. Why?
The Xray core in this version has removed the option to skip a server’s certificate check and refuses servers set that way; the app warns you and copies the warning to the clipboard. Turn the option off if the server has a valid certificate, or enter the certificate’s SHA-256 fingerprint; otherwise the provider of the subscription has to change the server.
Recent releases
| Version | Released | Size |
|---|---|---|
| v2.3.14 · this download | Oct 28, 2026 | 32.5 MB |
| v2.3.11 | Oct 11, 2026 | 33.5 MB |
| v2.2.6 | Jul 5, 2026 | 28.7 MB |
| v2.2.5 | Jun 20, 2026 | 28.5 MB |
| v2.2.4 | Jun 14, 2026 | 28.5 MB |
Recent releases on the project’s GitHub. We host and check only the newest one. Full changelog.
Alternatives and related apps
-
NekoBox Another open-source proxy client for many of the same protocols, built on the sing-box core.Download -
Shadowsocks The official client for Shadowsocks only, if that is the one protocol your server uses.Download -
WG Tunnel A WireGuard client with automatic tunnelling by network, for WireGuard servers.Download