fips2go fips2go runs a FIPS mesh node on your phone and hands it to the apps you pick, over a per-app VPN tunnel. Selected apps reach the mesh and keep normal internet; every other app on the device is untouched. Per-app split tunnel. You choose which apps join the mesh. They get the mesh and clearnet at once; nothing else on the phone is affected. With no apps selected the tunnel does nothing. .fips names just resolve. DNS for covered apps is answered in-process for .fips, and forwarded to your normal resolvers for everything else. Mesh names. An address book maps readable names to nodes — home.fips instead of an npub — for every covered app, and can be synced from a node you run. Public domain names over fips. A site bound to a mesh node (fips-pub-domains) is reached by its ordinary name, verified with DNSSEC and pinned; already verified domains, and those with a signed claim on a mesh relay, keep resolving with no internet at all. Everything else resolves as before. Default-deny inbound firewall. Other mesh nodes cannot reach ports your apps listen on. Only replies to connections you opened, ICMPv6, and an explicit port allowlist get through. Identity sealed by the Android Keystore, with backup and restore so it survives a reinstall. Three links into the mesh, not one, plus optional peer discovery via Nostr and your own choice of relays. FIPS Hotspot. Auto-joins open Wi-Fi named !FIPS to reach nearby peers, while your internet stays on your normal network. LAN discovery (mDNS). Finds peers on your Wi-Fi and dials them directly, with no relay hop. Survives network changes. A Wi-Fi to cellular hand-over keeps every session and route; peers are re-pinned within a second, no reconnect. Diagnostics. Resolve or ping an npub, inspect live peer sessions, and read the node log. In-app updates, verified against the release checksum. Dark theme by default. Open source (MIT), no accounts, no telemetry. Requires Android 8.0 or later.