Skip to content
Tunnexa
Get Tunnexa

VPN protocols explained, and which one to use

A VPN protocol is the set of rules your phone and a VPN server follow to build the encrypted tunnel. Some are built for speed, some for shaky connections, and some for networks that try to block VPNs. Tunnexa has six, and for most people Recommended is the right one.

Download Free Find Your Protocol
  • 3 protocols as a guest
  • All 6 with a free account
  • Switch any time

● Free for guests● Needs a free account

Protocol chooser

Which VPN protocol should I use?

Match the protocol to the problem. If nothing is wrong, you don't need to change a thing.

Start here

Recommended

Let Tunnexa choose the right protocol for you.

It's the default, and the one we'd leave on. If something isn't working, find your situation below and switch.

Free for guests
  1. 01

    You want the quickest everyday connection

    Browsing, streaming and video calls at home, on mobile data or on café Wi-Fi.

    WireGuard● Free for guests
  2. 02

    Your connection keeps dropping

    A patchy signal, or a tunnel that falls over every few minutes.

    OpenVPN UDP● Free for guests
  3. 03

    Strict Wi-Fi at work, college or a hotel

    The VPN connects everywhere except on one locked-down network. More on VPNs on strict work and school Wi-Fi.

    OpenVPN TCP● Free account
  4. 04

    A network that blocks VPNs

    Every connection fails the moment the network notices a VPN. Here is why networks block VPNs.

    AmneziaWG● Free account
  5. 05

    Nothing else connects

    You tried AmneziaWG and the network still won't let you through.

    Stealth● Free account
Comparison

VPN protocol comparison, side by side

Guests can use the first three. A free Tunnexa account adds the other three, and costs nothing.

Tunnexa VPN protocols compared: what each is good for, how it travels, how well it blends in, and who can use it
Protocol Good for Travels over Blends in Guest Free account
Recommended Most people, most of the time Depends on the pick Depends on the pick
WireGuard Everyday speed: browsing, streaming, calls UDP Easy to recognize
OpenVPN UDP Connections that keep dropping UDP Easy to recognize
OpenVPN TCP Strict Wi-Fi at work, school or hotels TCP Fits strict firewalls Needs a free account
AmneziaWG Networks that ban VPNs UDP Harder to spot Needs a free account
Stealth When nothing else connects TCP Looks like website traffic Needs a free account

Not every location offers every protocol. When you pick one, the server list shows only the locations that support it.

Recommended

Recommended is the default, and it’s the setting we’d keep. When you tap connect, Tunnexa uses the protocol our servers suggest for the location you picked.

As a guest, Recommended always lands on WireGuard or OpenVPN UDP. Signed in, it simply follows the server’s suggestion.

It’s a suggestion from our side, not a speed test on your phone. So if one network gives you trouble, choose a protocol yourself with the chooser above. You can always switch back.

How Recommended decides● Default
You tap connect
Protocol: Recommended
It checks the location you chose
Which protocols it offers
As a guest
WireGuardorOpenVPN UDP

Whichever of the two the server suggests.

With a free account
The protocol the server suggests

Taken from the protocols that location offers.

In the app

How to change your VPN protocol

  1. 01

    Open Settings

    Tap the gear in the bar at the bottom of the screen.

  2. 02

    Tap Select Protocol

    It sits at the top, under Connection, and shows the protocol you're on now.

  3. 03

    Pick a protocol

    A lock means it needs a free account. Tap it and the app offers to sign you in.

  4. 04

    Connect again

    Already connected? The app asks you to disconnect first. Then tap connect with the new protocol.

FAQ

VPN protocol questions

Something not covered here? Write to us at support@tunnexa.com.

What is the best VPN protocol?

There isn't one best protocol for every network. On Android, WireGuard is our quickest option and the right everyday choice. OpenVPN TCP gets through strict Wi-Fi more often, and AmneziaWG and Stealth are for networks that block VPNs. If you're not sure, keep Recommended.

Why are some protocols locked?

OpenVPN TCP, AmneziaWG and Stealth need a free account. Sign in with an email code, Google or Apple and all six open up, with nothing to pay.

How do AmneziaWG and Stealth deal with VPN blocks?

AmneziaWG reshapes WireGuard's traffic so it's harder to spot. Stealth makes your VPN look like website traffic. Neither is invisible, and detection varies by network.

Is it legal to use AmneziaWG or Stealth?

Using a VPN is legal in most countries, but some restrict it, and network owners can set their own rules. Check what applies where you are before you try to get past a block.