Asia · Europe · IPv4 and IPv6
A VPN with Privacy by Design
- Your private key stays on your device
- No log history stored
- Nothing to see, sell, steal, or disclose
Approx. 15 MB · Android 7.0 or later · Distributed directly, not via Google Play
- Android
- iOS(in development)
- Windows(in development)
- macOS(in development)
iOS, Windows, and macOS in development
Signing certificate fingerprint
SHA-256 · com.avangard.vpn
Every genuine release is signed with this certificate. If the fingerprint of a downloaded file differs, do not install it.
Platforms
Platform availability
- Android
- Available (Android 7.0 and later)
- iOS (iPhone, iPad)
- In development
- Windows
- In development
- macOS
- In development
Privacy
Data practices
What Avangard does not store, and the main data it does keep. Disclosing the second list is what makes the first verifiable.
Not collected
Connection IP addresses
Client source addresses are not recorded.
Private keys
Generated on the device and not sent to Avangard, which holds no copy.
Browsing activity
Websites, applications and destinations accessed through the tunnel are not logged.
Retained for service operation
Email address
Used only to deliver the passwordless login link (magic link). No passwords are stored.
Public key
Required to associate the encrypted tunnel with the correct peer.
Aggregate data usage
Used only to enforce the quota of the active plan.
Last handshake timestamp
Used to release devices that have been inactive for an extended period.
Security
Security you can verify
Each claim below can be checked independently.
Client-side key generation
The app creates the key pair locally and sends only the public key to the service. The private key is not sent to Avangard.
No-logs policy for IP addresses
Connection IP addresses are not recorded. Data that is not collected cannot be disclosed to any third party.
Verifiable application integrity
The signing certificate fingerprint is published on this page, so the APK can be validated before installation.
No automatic renewal
Plans run for a fixed term and end on expiry. Payment card details are not stored, and no recurring charges apply.
Full IPv6 support in every region
IPv6 is routed through the tunnel instead of being silently disabled, which avoids a common source of traffic leaking outside the VPN.
No advertising, no trackers
The app and website contain no third-party trackers or analytics SDKs. The website is served without JavaScript.
Use cases
When a VPN is warranted
Public Wi-Fi: cafés, hotels, airports
Traffic is encrypted on the device before it reaches the network, mitigating eavesdropping and man-in-the-middle attacks on shared access points.
International travel
Exit through gateways in Asia or Europe to reach services without local network restrictions.
Campus and corporate Wi-Fi
Destinations are carried inside a single encrypted tunnel, so the local network operator sees the tunnel rather than the individual sites.
Privacy from the ISP
The ISP sees one encrypted connection to Avangard. No record of destinations is kept on the service side.
Regions
Two regions, dual-stack IPv4 and IPv6
- Asia
- IPv4 + IPv6
- Europe
- IPv4 + IPv6
Both regions are included in every plan. Users switch regions from within the app.
Installation
Install in three steps
One-time setup.
01
Download the APK (about 15 MB)
Obtain the official file and, optionally, verify its signing certificate fingerprint.
02
Allow installation from unknown sources
In Android Settings, enable “Install unknown apps” for the browser or file manager used.
03
Authenticate
Enter an email address in the app and open the verification link that is sent. No password is required.
Fingerprint matches? Then the file is genuine.
Download
Official APK download
- Independent verification. Compare the file’s signing fingerprint before installing. Full instructions are on the download page.
- Update notifications. The app alerts the user when a new release is available.
Background
How a VPN works
- Without a VPN. The ISP and local network can observe every site a device connects to.
- With a VPN. The device establishes an encrypted tunnel to a gateway in Asia or Europe. The ISP sees a single encrypted connection, and destination sites see only the gateway’s IP address.
- Key custody. Private keys are generated and stored on the device. Avangard has no access to them.
FAQ
Frequently asked questions
Why is the app not on Google Play?
Avangard distributes the app directly from this website, without an intermediary. Each release is digitally signed and the certificate fingerprint is published here, so authenticity and integrity can be verified independently.
How do I confirm the downloaded APK is genuine?
Run apksigner verify --print-certs avangard.apk and compare the SHA-256 digest in the output with the fingerprint on this page. If a single character differs, do not install the file.
The apksigner tool is part of the Android SDK build-tools. Its output is lowercase and without colons. The characters must match; the display format need not.
Are iOS, Windows and macOS versions available?
Not yet. Android is currently the only supported platform. Avangard prioritizes one secure, fully working client over a faster release on every platform.
How many devices are supported?
Three on every plan. Adding a region to an already registered device does not count as an additional device.
Why is the service not free?
Reliable gateway infrastructure has real operating costs. Free VPNs commonly fund themselves through aggressive advertising or by selling browsing data. Avangard uses a transparent subscription model with no data monetization.
Will connection speed be affected?
Slightly, which is expected. Traffic takes an indirect route through the gateway and is encrypted and decrypted at each end of the tunnel. The impact is mostly on latency (ping) rather than download throughput.
Which protocol does Avangard use?
WireGuard, with a unique preshared key (PSK) per device on top of the Curve25519 key pair generated on the device. IPv6 is fully supported in both regions.