Mobile Client
Mobile client is currently under development (closed beta), current page should be considered as preview. Some parts of UI may look different in upcoming release.
Overview
This guide explains how to use the Defguard Mobile to connect securely to VPN locations managed within your Defguard instance. It covers the entire process, from installation, adding new instances, connecting to locations, to managing your VPN connection settings.
Installation
Join closed beta for iOS or Android (Coming soon!)
Connecting made effortless
Download app from App Store or Google Play
Open app
To add instance scan QR or use manual configuartion
Connect with single click
Quick guide
Adding new instance

Add instance by QR Code
Go to "Add Instance" tab
Click "Scan QR Code"
Scan QR code
Enter name
Add instance manually
Go to "Add Instance" tab
Click "Add Instance Manually"
Enter URL and token
Confirm
Your phone will need to add new VPN configuration, when you see the request, please allow it. Without this permission, Defguard cannot establish VPN connection.
Connecting to location (without MFA)
Choose desired instance from list
Select location by clicking "Connect" next to it
Choose if you want to route your traffic with:
Predefined traffic (Faster for general browsing)
All traffic (Full encryption and privacy)
Press "Connect"
Connecting to location (with MFA)
Choose desired instance from list
Select location by clicking "Connect" next to it
Choose if you want to route your traffic with:
Predefined traffic (Faster for general browsing)
All traffic (Full encryption and privacy)
Choose MFA method which is configured in your account
Email
Authenticator App
Authenticate and connect.
If your instance has configured external OpenID authentication, it will be used as primary method for MFA
How can I obtain QR Code, URL and token?
Login to your Defguard instance
Go to "My Profile" tab
Click "Add new device" in "User devices" tab

4. Select "Remote Device Activation" and click "Next"

5. You will see URL, Authentication token and **QR Code**

What is an instance?
An instance contains locations. These are the servers you can connect to via VPN. When you use the Defguard Mobile, you select an instance first, and then choose the specific location within it to establish your VPN connection.
Instance list

Location list (inside instance)

Supported MFA Methods
Defguard Mobile supports multiple secure authentication methods:
TOTP – time‑based one‑time passwords (Authenticator apps)
Email – receive verification codes via email
OpenID – integrate with any OpenID Connect provider (Google, etc.)
Additional features
Switch to dark/light theme — adapts to your system settings
View live connection stats, logs & tunnel details
Manage multiple instances
Choose if you want to route all or predefined traffic
Last updated
Was this helpful?