Install Ombra
Download Zapstore
Download
- Scan the code with your phone’s camera
- Tap Download anyway if the browser warns about the file
- Allow your browser to install unknown apps if Android asks
- Open Zapstore and finish the onboarding
Open Ombra in Zapstore
Open
- Scan the code to open Ombra in Zapstore, or search for it there
- Tap Install, and Download if Zapstore asks you to confirm the developer
- Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks
Unofficial client for Obscura VPN with two-hop WireGuard. Supports Stealth, Speed, and TCP/TLS protocols. Features relay selection, DNS blocking, split tunnelling, kill switch, and a Quick Settings tile.
An independent Android client for Obscura VPN, built for speed and privacy: a native Jetpack Compose app on top of the upstream Obscura Rust core, with our own patches. Ombra is not made by Obscura. Android 16 or newer, arm64.
- Three protocols: Stealth (WireGuard in QUIC), Speed (WireGuard over UDP) and TCP/TLS, through the two-hop Obscura relay.
- Faster data path: in our tests, downloads are about 13x faster than with the official app (estimate).
- Control: choose the entry relay and the exit, DNS content blocking, split tunnelling, kill switch status and a Quick Settings tile.
- Privacy: no analytics, no crash reporting, no Google Play Services. The WireGuard key is encrypted with an Android Keystore key and rotates every 30 days, every day or at each connect.
Referral: when you create an account, a switch (on by default) adds the Obscura referral code of the Ombra developer. Turn the switch off, and Ombra sends no referral. A login with an existing account never sends one.
Summary generated by Zapstore from source.
Original description, as the developer published it.
Stacked in
Latest release
It asks for no sensitive access.
Permissions
- Notifications POST_NOTIFICATIONS Send you notifications
Release notes
Ombra 0.2.12: speed. Uploads and downloads with 4 streams are about twice as fast as with 0.2.11 on the test phone, and an upload starts at its full speed.
Android 16 or newer, arm64. Ombra-0.2.12.apk is signed with the Ombra release key and installs as an update over 0.2.11.
Changed
- Speed on a Pixel 9 Pro XL, Stealth with padding, against 0.2.11 (estimates, the median of three interleaved runs on one Wi-Fi network): upload with 4 streams about 170 -> 355 Mbit/s, upload with 1 stream about 100 -> 175 Mbit/s, download with 4 streams about 320 -> 680 Mbit/s, download with 1 stream about 325 -> 480 Mbit/s.
- The ping during a transfer with 4 streams is about 5 ms (upload) and 9 ms (download) higher. The ping without a transfer is the same.
- The congestion control of the tunnel is a copy of quinn's BBR without its ProbeRTT state. On mobile data the ping during an upload was the same as before.
- The UDP receive buffer is 8 MiB (before 4 MiB) and the queue of packets for the TUN device is 4096 packets (before 1024).
Fixed
- An upload no longer starts at about a quarter of its speed. Before, it needed about 9 s to come to its full speed and fell again every 10 s.
- An upload no longer loses packets in the core when the phone sends faster than the tunnel. Before, the part that reads packets from Android did not let the part that sends them run.
- The first packet after a second of silence no longer waits 2 ms.
Privacy and security
- No change to the data that the app stores or sends. The app connects to the same hosts.
quinn-protois now a direct dependency of the core. It was in the build before, so the APK has no new third-party code.
Install
| File | Use | SHA-256 |
|---|---|---|
Ombra-0.2.12.apk |
Release build, signed. | 51d2d0ebcf40e8af972ec73f1b148996e081e544ecfc2edcd7c67aafe4f6119e |
Ombra-0.2.12-crypto-library-sources.tar.gz |
Source of the crypto libraries that the APK links. | 0c5d63c1a7feb24e5b939fd3ab600bc97704a3bac544a7761a97987aef20357b |
- Certificate SHA-256:
484d7a1d0cc09100bde5e509d5c6050c7d75a43ba90a2b31e139ed02e70efb91
Source
GPL-3.0-only. The source of this APK is this tag. Ombra-0.2.12-crypto-library-sources.tar.gz has the source of ring 0.17.14, aws-lc-rs 1.18.2 and aws-lc-sys 0.46.0, which the APK links (see rust/UPSTREAM.md, licence notes). These versions did not change since 0.2.5.
Comments
Loading comments…
More privacy apps
See more-
M
Mail by Form*
by Form*
Email on Nostr — your keys are the account, and your mail lives encrypted on relays you choose.
-
Q
QREncoder
by Juraj🏴💛🌘
Local-only QR generator for macOS, Linux and Android — fourteen payloads, three symbol styles, no network.
-
E
EclipseTracker
by Stormberry
Every solar and lunar eclipse to 2100, with alarms that ring, all offline
-
P
PrivacyNotes
by Lifetime Labs
Notes. Tasks. Files. Vault. Zero knowledge.
-
H
Haven
Private and censorship-resistant location sharing.
-
P
PosterFox
by verita84
PosterChan's Firefox for Android — your bookmarks synced with PosterChan, no telemetry
Get Ombra the private way
Updates checked on your device, and every release verified before it installs.