Secure, fast, and private VPN protection for your Android device.
Download the latest version or previous releases
Android 1.0.370 (2026-10-06): Corrected server selection after failed latency probes, kept Kazakhstan explicitly marked Demo, and fixed duplex stream backpressure in SRSP.
Google Play is recommended. APK download is available for Android devices without Google Play.
GhostMesh_1.0.370.apk SHA256:
dcee66e1c0001ddeed6bf0d028cf79becb1a55a70ac1373e62e4535d89fa4e2fAfter downloading, run in PowerShell or Command Prompt:
sha256sum GhostMesh_1.0.370.apkBy downloading, you agree to our Terms of Service and Privacy Policy.
Android 1.0.368 (2026-10-04): Improved server-list access when DNS is filtered, server caching, SRSP startup verification and recovery through a pinned direct egress. Added an optional popular-services-only setting in Proxy mode; other traffic goes direct.
1.0.367 (2026-10-02): Android — Fixed VPN reconnections after browsing the server list. Server checks and endpoint DNS now use the physical network, and virtual tunnel addresses cannot enter the endpoint cache.
1.0.366 (2026-10-01): Android — Native VPN no longer floods an unreachable server with parallel connection attempts. Dials are coordinated per server; failures pause for 1 s, then 2 s, then 30 s. Ready connections continue working, and a configured fallback can be used after a failed dial. Includes the stream stall fixes from 1.0.365.
1.0.363 (2026-09-29): Android — fixed an endless reconnect: while the local proxy restarted, the app's own requests to the GhostMesh server went to the stopped 127.0.0.1:10808 port and failed, leaving Telegram and other apps stuck on "Connecting…". The tunnel to the server is also warmed up in advance now, so apps open their first connection faster after connecting.
1.0.361 (2026-08-26): Android — switched fully to the native SRSP runtime, removed the unused legacy transport and obsolete large ruleset, and added lightweight native traffic telemetry. APK and AAB include arm64-v8a and armeabi-v7a runtimes.
1.0.360 (2026-08-24): Android — the embedded SRSP core now applies traffic shaping in the production mux write path. Padding uses cryptographic randomness and conservative defaults, while bounded backpressure prevents unbounded queue growth under load. The signed APK and Google Play AAB include refreshed arm64-v8a and armeabi-v7a native runtimes.
1.0.359 (2026-08-16): Android — the connection button stays available while connecting, and tapping it again cancels the current attempt. Connections that do not complete within 60 seconds are stopped automatically; the VPN service, TUN and SRSP process are cleaned up without reporting an intentional cancellation as an error.
1.0.358 (2026-08-14): Android — fixed SRSP startup when the server endpoint is supplied as a hostname. GhostMesh now resolves and reuses a numeric IP before starting the native tunnel, avoiding the ‘host must be an IP literal’ failure. Server lists are cached for faster startup and temporary API outages, and connection diagnostics include the app version and selected language without exposing credentials.
1.0.357 (2026-08-13): Android — fixed Telegram losing connectivity after about two minutes while other apps remained online. External health probes are now diagnostic only and cannot restart a working tunnel merely because public check URLs are unavailable. The connection pool no longer retires a carrier with active MTProto/TCP streams, and empty native UDP keepalives cannot create or retain stale server associations. The language used for a delivered sign-in email is saved as the default for account notifications when no preference was set, and diagnostic reports now include the selected app language.
1.0.356 (2026-08-08): Android — connecting is immediate again. A local port the app needs for DNS is often already taken on Android, and when it was, the tunnel engine failed to start and the app waited out a ten-second timeout before switching to its fallback. Every connection paid those ten seconds. The engine now picks a free port instead of giving up. Also fixes a green band across the top of the screen while the app was starting.
1.0.354 (2026-08-07): Android — the tunnel now runs on our own engine. The app hands the system tunnel straight to the GhostMesh core instead of routing it through a third-party component, which removes a whole layer between your traffic and the server. Along the way we fixed a fault that could leave a connection showing as active while carrying nothing: the engine stopped reading the tunnel after a harmless first empty read and never said so.
1.0.353 (2026-08-06): Android — the app starts about a third faster: heavy initialisation moved off the main thread. The server list appears immediately from the saved copy and refreshes in the background. Separately, server chains ("Russia (White List)") were fixed on the servers: the connection was established but carried no traffic, because the relay dropped the marker that signals a connection is ready. That fix is already live and needs no app update.
1.0.352 (2026-08-04): Android — fixed disconnect→reconnect stuck until force-stop (SRSP always torn down; disconnect serialized; sticky auto-start cleared with commit). Reduced overheating: timed wake lock, slower health probes, longer SRSP idle/rekey intervals.
1.0.344 (2026-07-30): Android — verified GhostMesh App Links now open the intended screen safely on cold and warm starts. VPN telemetry no longer extracts or sends domain names; aggregate upload and download counters remain available for account usage. Turkish localization was added for the main onboarding, connection, server, account, and billing screens.
1.0.343 (2026-07-28): Android — adds an optional Full ad & tracker database setting. It stays off by default for fast connections; enabling the 16 MB filter list can add about 10 seconds to connection setup. The standard fast AdBlock mode and existing SRSP recovery safeguards remain available.
1.0.340 (2026-07-22): Android — adds SRSP adblock hashlist support, refreshes tunnel client binaries, and improves connection stability when OEM battery savers freeze the VPN.
1.0.337 (2026-07-20): Android — detects frozen tunnels that OEM battery savers leave looking connected, recovers the session automatically, and adds a battery optimization prompt so the VPN is not suspended in the background. Also ships an SRSP client with a Chrome 150-shaped TLS ClientHello that includes GREASE and an ML-KEM-shaped key-share extension for fingerprint camouflage; this is not negotiated ECH and does not provide post-quantum session-key protection.
1.0.336 (2026-07-15): Android — keeps active VPN sessions running during app restore and prevents the subscription prompt from appearing while the account still has valid time.
1.0.334 (2026-07-10): Android — fixes a reconnect edge case where the CPU wake lock could be released between stopping the old runtime and starting the new VPN connection.
1.0.333 (2026-07-10): Android — further improves VPN startup reliability by keeping the tunnel service awake during connection startup, plus the 3-day gift popup and connection stability fixes.
1.0.332 (2026-07-10): Android — improved VPN connection stability, fixed cases where the connect button could appear unresponsive, and added a localized 3-day free gift popup.
1.0.331 (2026-07-07): Android — improved support chat with a messenger-style layout, topic selector, automatic message refresh, unread indicators, fixed support API routing, and better SRSP startup diagnostics.
1.0.328 (2026-06-15): Android — improved SRSP startup readiness detection and retry handling, added Google Play subscription payments in Settings > Account > Subscription, and updated the direct APK download for devices without Google Play.
1.0.326 (2026-04-23): Android — Proxy mode: messenger DNS server (dns-telegram) now uses the same Google DoH as dns-remote (8.8.8.8 / dns.google) instead of Cloudflare 1.1.1.1, which is often blocked. Added DNS/route domain suffixes for Tencent (.qq.com, .qpic.cn, .gtimg.com) and Meta CDN (.fbcdn.net, .fbsbx.com, .discordapp.net) for WeChat/WhatsApp/Discord.
1.0.323 (2026-04-23): Android — Proxy multi-protocol: pinned messengers use the same outbound as route.final (urltest) again — one straight tunnel with the browser and the rest of the app (drops the separate UDP-first messenger path from 1.0.322). WeChat/Discord pinning from 1.0.322 is unchanged.
1.0.322 (2026-04-23): Android — Reverted proxy messenger outbound to UDP-first Hy2→Tuic→Vless (as before 1.0.321). Added WeChat (com.tencent.mm) and Discord to pinned messenger packages + DNS suffixes (weixin.qq.com, discord.gg, etc.) so proxy mode keeps them in-tunnel like Telegram/WhatsApp.
1.0.320 (2026-05-24): Android — fixed SRSP file-transfer disconnects under load by turning mux queued-byte limits into real backpressure instead of resetting streams. Also includes SRSP connect-readiness handling, mux pooling improvements, safer TCP handling, and favorite add/remove feedback.
Tap the Google Play button above to open the GhostMesh app page.
Install or update GhostMesh from Google Play.
Follow Google Play's on-screen instructions to complete the installation.
Open GhostMesh and sign in with your account.