Start with Smart Connect

For most people, leave Settings → VPN Protocol on Smart. Smart Connect picks among WireGuard, AmneziaWG, Hysteria2, and IKEv2 using network context and fallbacks when a handshake fails. Switch manually when you already know what a hotel Wi‑Fi or carrier blocks.

WireGuard for everyday speed

WireGuard is the everyday pick for calm Wi‑Fi and cellular: modern crypto, low overhead, strong for browsing and streaming. If Speed Test looks healthy and the tunnel stays up, stay here instead of chasing novelty protocols.

AmneziaWG when WireGuard is blocked

Some networks detect or throttle plain WireGuard. AmneziaWG keeps a WireGuard-like experience with obfuscation. Try it when WireGuard never handshakes on one network but works on LTE.

IKEv2 for flaky mobile handoffs

IKEv2 still shines when you bounce between LTE and Wi‑Fi. Not always the fastest, but often the most boringly reliable on iOS mobility. Prefer it for commuting when tunnels flap more than they fail to start.

Hysteria2 on lossy or hostile paths

Hysteria2 helps on lossy, congested, or hostile paths. Use it after WireGuard/AmneziaWG struggle, then confirm with Speed Test. It is a tool for hard networks — not a permanent “faster everywhere” switch.

Manual override and Network Profiles

Pin a working protocol for a known bad location, or store it in a Network Profile with DNS and Auto-connect. Free and Premium share the same protocol toolkit — Free has weekly traffic, Premium is unlimited — and Premium mainly adds capacity and server breadth, not different engines. Chrome on desktop is a browser proxy, not these iOS tunnel protocols; macOS and Android system apps are not available yet.