The DefGuard Mobile Client is a secure, self-hosted WireGuard VPN mobile client designed for enterprise and personal use. It enables seamless management of WireGuard® VPN tunnels on the go with enhanced security through multi-factor authentication (MFA), including biometrics, TOTP, and external SSO providers like Google, Okta, and Microsoft EntraID.
This open-source, cross-platform VPN app supports easy QR code onboarding and flexible traffic routing to meet diverse secure remote access needs. DefGuard is part of a modular ecosystem built for VPN orchestration and identity management . Defguard provides a mobile VPN client with biometrics and TOTP.
- Secure WireGuard VPN mobile client with Multi-Factor Authentication (MFA)
- Internal SSO/OIDC support with biometrics, TOTP, email verification
- External SSO support: Google, Okta, Microsoft EntraID, JumpCloud, and more
- Quick and easy onboarding via secure QR code VPN onboarding or URL/token
- Flexible traffic routing: all traffic via VPN or selective routing
- Real-time synchronization of VPN configurations with the DefGuard server
- Native cross-platform VPN app support for Android VPN client and iOS VPN client
- Fully self-hosted VPN solution for ultimate privacy and control
- Open-source codebase for transparency and customization
You need to have a running Defguard Server to use the mobile app.
Join closed beta for iOS or Android.
- Download from Google Play
- Available soon on the App Store
Documentation available at : https://docs.defguard.net/help/mobile-client
DefGuard is a comprehensive platform offering secure remote access, identity management, and VPN orchestration with a focus on security using multi-factor authentication for VPN.
Visit defguard.net for more information.