Questions and answers
Stealtify is an Android traffic routing client, not a VPN service. We run no servers and sell no subscriptions: the server or the subscription is yours, and the client routes app and domain traffic across them according to your rules. Below are the questions we get most often.
Is Stealtify a VPN service?
No. Stealtify is a routing client for Android. We do not provide servers and we do not sell subscriptions: you connect your own server, or a subscription bought from your provider, and the client routes traffic through it according to your rules.
Is root required?
No. The client works through the system VpnService API — the same mechanism ordinary VPN apps use. No firmware changes are needed.
Does the app collect my activity?
No. Zero telemetry: the app does not collect, store or send data about your activity. Configurations stay on the device and private keys are held in the Android Keystore.
How do I import my subscription?
Three ways: paste a link from the clipboard, scan a QR code, or import a full configuration backup. These link formats are supported:
vless://…vmess://…trojan://…ss://…awg://…
Which transports are supported?
Eight: SOCKS5, HTTP CONNECT, SSH, VLESS (including Reality and XTLS-Vision modes), VMess, Trojan, Shadowsocks and AmneziaWG. The list is closed — the client connects to nothing beyond it.
The detailed table with engines and specifics is on the Tech page.
Does it work with my current proxy subscription?
Yes, if the link format is one of the supported transports. Most panels hand out exactly those links. If your seller sends something outside these eight transports, the client will not connect it.
Is there a Kill Switch?
Yes, as a setting: Settings → Security → Kill Switch. With it on, an interrupted VPN connection blocks internet access entirely until the connection is back, so your real IP cannot leak. The app also suggests enabling the system-level Always-on VPN alongside it.
Why an APK instead of Google Play?
Google Play policy restricts publishing clients used to bypass blocking. Distribution is therefore direct: the APK on the releases page plus the update.stealtify.app update channel.
Is the code public?
No. Stealtify is a proprietary product distributed under a licence agreement (EULA). Only release artifacts are published: the APK and the changelog.
Is there an iOS version?
No, and none is planned. The obstacle is distribution rather than development: regional restrictions keep apps of this class off the App Store, and there is no other delivery route to iOS. Stealtify exists for Android 10+ (API 29) only.
Is Android TV supported?
Yes, but through a separate app: boxes get StealtifyTV, which is not the same APK as the phone one. Routing works there as it does on mobile — per-app rules are present. Installation, D-pad navigation and the limitations are described on the Stealtify on Android TV page.
Can I use Stealtify as a reseller or proxy panel?
Yes, there is a separate track for that — Stealtify Inside. What a partner gets and how to reach the team is described on the For panels page.
Which languages does the app support?
The app interface is Russian only for now. The website is available in Russian and English.
How does the app update?
Through the update.stealtify.app update channel: the app tells you when a new version is out. The APK for every version is also available on the releases page.
What happens to traffic no rule covers?
While there are no rules at all, the raised tunnel carries every app's traffic through the proxy. As soon as one rule exists, the rules decide: a rule assigns the app or domain to a group, traffic goes through that group's proxy, or through the fallback group if that proxy is unavailable. Anything the rules do not cover goes direct.
Limits and rough edges
What the client cannot do, or does with conditions. These are not faults — they are the edges people run into most often.
Will Stealtify run on my phone?
It needs Android 10 or newer and an arm64-v8a processor — which covers the vast majority of phones released since 2019. It will not install on 32-bit devices or on older Android versions.
Can I go back to an earlier version of the app?
Only by uninstalling first: Android refuses to install a lower version code over a higher one. Uninstalling wipes your settings and the server database, so export a backup before you remove anything.
Why does the connection fail to come up while another VPN is on?
Android allows only one active VPN at a time. That is a system limit, not the client's: the other VPN app has to be switched off, or Stealtify will not get a tunnel.
Shadowsocks will not connect — why?
Most likely the server was issued on Shadowsocks-2022 (SIP022, blake3 methods), which is not supported. Plain Shadowsocks works: aes-128-gcm, aes-256-gcm, chacha20-ietf-poly1305, xchacha20-ietf-poly1305. Ask the provider to switch the server to a classic encryption method.
Which transports will not carry UDP?
HTTP CONNECT and SSH — they carry TCP only. Anything that lives on UDP will not go through those two. The other six transports do carry UDP; the transports table shows which is which.
VLESS, VMess or Trojan will not connect even though the parameters are right
Check the clock on the device. REALITY and TLS are sensitive to time, and a wrong clock is the usual cause of a refusal when the UUID, SNI and fingerprint are all correct. Turn on automatic time sync and try again.
Why did my domain rule not take effect?
Domain rules match the host name in TLS. An app that talks to a hardcoded IP address, or resolves names over DNS-over-HTTPS, will bypass such a rule. Route the app itself in that case — with an app rule rather than a domain rule.
The tunnel drops when the screen goes off
That is battery saving. Exclude Stealtify from battery optimisation in the Android settings and turn on auto-reconnect in the client. On Xiaomi, Huawei, Oppo and Samsung firmware, allow autostart as well — without it the connection will not survive the screen going off.
Can an update be postponed?
An ordinary one, yes — the dialog offers a "Later" button. A mandatory one cannot be postponed: those close whatever makes the older build unsafe or unworkable.
The app will not read my QR code
The scanner rejects codes over 8 KB and links with unfamiliar schemes — that is a safety limit, not a broken code. Check the lighting and the sharpness of the image, and if it still will not read, ask for the same config as a line of text and paste it by hand.
Will importing a backup replace my configuration or add to it?
It replaces it completely. An import overwrites the whole current configuration with the contents of the file: the servers, groups and rules you had are deleted. So export your own configuration before importing someone else's — otherwise there is nothing to restore it from. The file itself holds server keys and passwords, so keep it like a password.
Did not find your answer?
The step-by-step first-run guide covers most practical questions.