Kumo is a free, open-source VPN client for Android, Windows, macOS and Linux, with no account to make. It finds public servers that work on your network and connects you to the fastest with one tap. It also opens your own V2Ray, Xray and sing-box configs and subscriptions (VLESS, VMess, Trojan, Shadowsocks, Hysteria2, WireGuard and more), the same links other V2Ray and sing-box clients use. It is powered by sing-box and Xray.
| System | Download |
|---|---|
| Android |
 -388e3c?style=flat&logo=android&logoColor=white&labelColor=555555){kind=icon}  
|
| Windows |
   
|
| macOS |
     
|
| Linux |
       
|
Not sure which Android file? Use ARM64, or Universal which works everywhere. Portable packages keep their data next to them.
The apps are not code-signed or on Google Play, so Play Protect, SmartScreen or Gatekeeper may warn: tap More details → Install anyway (Android), More info → Run anyway (Windows), or right-click → Open (macOS). Compare a file's SHA-256 with the one GitHub shows next to it in the release.
- One-tap connect, automatic fastest server, automatic switch when a server stops answering.
- Whole device (Android) or local proxy; per-app routing, direct countries, your own routing rules.
- Free public servers, your own configs and subscriptions (links, QR codes, files; Clash, sing-box, Xray and Surge formats).
- Many protocols: VLESS, VMess, Trojan, Shadowsocks, Hysteria 1 and 2, TUIC, AnyTLS, WireGuard, SOCKS, SSH and more.
- Privacy: kill switch, strict DNS, WebRTC leak block, ad and tracker block, IP and DNS leak tests.
- Speed tests, live speed and usage, widgets, tray icon, Android TV, seven languages.
- Open Kumo and wait for the server list to load.
- Tap the connect button (Automatic picks the fastest server).
- On Android, allow the VPN permission the first time.
- Public servers are run by unknown people. Do not use them for banking or anything sensitive.
- Kumo has no accounts and sees none of your servers, links or traffic. Once a day it sends an anonymous usage count: a random-looking code made from your device id, plus your system and app version, the app's language and your device's language and country setting, your time zone, your processor, the maker and model of your device (such as Dell XPS 15), the name of the file you installed (such as
kumo-android-universal.apk), and on Android the phone's interface and on Linux the desktop (no IP address, serial number or computer name is stored). If something breaks, Kumo can also send a crash report with the same switch: the error and where it happened in the code, the Kumo and system version, the device maker and model, the page you were on, the VPN state and the last lines of the app's own log, with links, addresses, passwords and user names removed. You can turn both off in Settings → App settings. See the privacy policy.
Flutter 3.27 (Dart 3.6): flutter pub get, flutter test. The sing-box and Xray cores are not in the repository: tools/fetch_unix_core.sh (Linux, macOS), tools/fetch_windows_core.ps1 (Windows), tools/build_libbox.ps1 and tools/build_xray.ps1 (Android). The workflow in .github/workflows/build.yml shows the full build.
Found a bug or have an idea? Open an issue.
Kumo does not provide servers and does not control the public servers it lists. You are responsible for following the laws where you live. The software is provided as is. Kumo is free software under the GNU GPL v3.0 and includes parts of sing-box and sing-box-for-android. The ad blocker uses the block lists of HaGeZi (GPL-3.0; a copy of Pro mini is built in), OISD, AdGuard DNS filter, PersianBlocker and sing-geosite; the country lists that come with it are from sing-geoip (based on GeoLite2 data by MaxMind, CC BY-SA 4.0), sing-geosite and Iran-sing-box-rules.