What is VPN Mode?
VPN Mode creates a secure, on-device tunnel that inspects network connections before they reach the internet. It is the recommended protection method when your device is not rooted.
Local VPN — your data never leaves the device
Pandefy runs a virtual network interface inside Android. Traffic is filtered locally and is never sent to any Pandefy server.
- •Filtering applies system-wide, including browsers, in-app WebViews, and background services.
- •No external proxy is used, so your privacy and compliance requirements stay intact.
- •Pause or resume protection instantly without affecting other network settings.
How it works
- Android routes outbound packets through Pandefy’s local VPN interface.
- Pandefy checks each request against your subscribed lists and custom rules.
- Blocked domains are dropped instantly; allowed ones continue without delay.
- Statistics and notifications update in real time so you can monitor protection.
VPN Mode vs Root Mode
VPN Mode advantages
- •Works on any Android device — no root required.
- •Supports per-app allowlists and bypass rules.
- •Shows live statistics for requests, blocks, and saved bandwidth.
Root Mode advantages
- •No VPN icon or persistent notification.
- •Lower battery impact because traffic is not proxied.
- •Compatible with third-party VPN clients and private DNS.
Before you begin
- checkAndroid 7.0 (Nougat) or newer with VPN APIs available.
- checkOnly one VPN or firewall app can run at a time — disable others first.
- checkAllow Pandefy to run in the background (exclude it from battery optimizations if prompted).
- checkReliable network connectivity to download blocklists and apply updates.
Set up VPN Mode
Grant VPN permission
Pandefy needs one-time approval to create the local VPN interface.
- Open Pandefy → Settings → Protection mode.
- Select “VPN protection”.
- Accept Android’s VPN confirmation dialog.
- Wait for the success toast indicating that protection is starting.
Configure connection options
Fine-tune how the VPN behaves before daily use.
- Stay on Settings → Protection mode → VPN options.
- Toggle “Auto-start on boot” if you want protection after restarts.
- Enable IPv6 filtering when your network supports it.
- Adjust the notification style (expanded or compact) to suit your preference.
You can change these options later. Most settings apply immediately without restarting the VPN.
Start protection
Launch the VPN tunnel and make sure requests are being filtered.
- Tap “Start protection” on the dashboard or persistent notification.
- Confirm the VPN key icon appears in the status bar.
- Browse a site with known ads to verify blocks appear in the stats tab.
- Add trusted apps or domains to the allowlist if they must bypass filtering.
Daily usage
Start Pandefy VPN
- Open Pandefy and tap “Start protection”, or use the quick settings tile.
- Android displays a VPN key icon while protection is active.
- The persistent notification shows request counters and quick actions.
Pause protection
- From the notification, tap “Pause protection”, or tap “Stop” inside Pandefy.
- The key icon disappears and traffic flows normally.
- Resume protection when you finish troubleshooting, gaming, or tethering.
Monitor status
- Open Pandefy → Dashboard → Protection status.
- Review latency and block counters for unusual spikes.
- Tap “Refresh lists” if filtering stops unexpectedly.
Key features
Per-app control
- •Allow or block individual apps without disabling global protection.
- •Bypass VPN Mode for banking, tethering, or corporate VPN apps.
- •Export or import presets when you migrate to a new device.
Protection statistics
- •Monitor total requests, blocked hosts, and saved bandwidth in real time.
- •Reset counters whenever you need a fresh baseline.
- •Use the stats tab to verify that custom rules are firing.
Connection options
- •Enable IPv6 filtering when your network supports it.
- •Toggle auto-start on boot so protection resumes after restarts.
- •Choose between expanded or compact persistent notifications.
Advanced tools
- •Optional fallback DNS when the default resolver fails.
- •Split tunneling for debugging specific domains or subnets.
- •Verbose logging to capture VPN activity for support tickets.
Notifications & indicators
Status bar key icon
Android shows a small key icon whenever any VPN is active. This is required by the OS and cannot be hidden without third-party tools.
Persistent notification
Displays request counters, quick actions (pause / resume), and shortcuts to app control. You can collapse or mute it via Android notification settings.
Other VPN detected
If another VPN connects, Android automatically disconnects Pandefy. Restart Pandefy after you finish using the other VPN or configure split tunneling there.
Best practices
- •Keep only one VPN or firewall app active to avoid routing conflicts.
- •Enable auto-start so protection returns after device restarts.
- •Review statistics weekly to ensure blocklists still match your expectations.
- •Bypass VPN Mode for banking, hotspot, or work VPN apps that must see raw traffic.
Troubleshooting
Android says “Connection request timed out”
- Reboot the device to clear stale VPN sessions.
- Disable battery optimization for Pandefy (Settings → Apps → Pandefy → Battery).
- Uninstall or pause other VPN/firewall apps that may intercept the request.
Traffic isn’t being filtered
- Confirm the VPN key icon is visible and the notification shows active protection.
- Tap “Refresh lists” to reload blocklists and custom rules.
- Check per-app control to ensure the affected app is not bypassed.
- Look for corporate VPN profiles that force all traffic through work tunnels.
Streaming or gaming apps fail to connect
- Temporarily allowlist the app or domain while you play or stream.
- Switch to another network (Wi-Fi ↔ cellular) to rule out router filtering.
- Pause protection during the session and resume it immediately afterwards.
Frequently asked questions
Does VPN Mode send my data to Pandefy servers?
No. The VPN interface is local to your device. Pandefy processes traffic on the device and never routes it through external servers.
Can I use another VPN at the same time?
Android only allows one VPN service at a time. Use Root Mode if you need to run a corporate VPN alongside Pandefy, or configure split tunneling in the other VPN.
Will VPN Mode drain my battery?
Power usage is similar to other VPN apps. Expect slightly higher CPU load than Root Mode because packets are processed in user space.
Does VPN Mode cover tethering and hotspot traffic?
Yes, as long as Android routes tethered traffic through the local VPN. Some carriers bypass VPNs for hotspot traffic, so results may vary.
Quick reference
Start protection
Pandefy → Start protection
Pause protection
Notification → Pause protection
Open per-app control
Pandefy → App control
Refresh blocklists
Pandefy → Dashboard → Refresh lists