Start with WireGuard
WireGuard is a recent protocol built on a small amount of code. It connects fast and usually gives the highest speed, which is why we suggest it as the default.
Traffic is encrypted with ChaCha20. WireGuard is also the protocol for routers: download the configuration file from the Downloads tab in your dashboard and load it into the router.
OpenVPN for strict networks
OpenVPN has a long track record and works on most networks. VPN Club runs it with AES-256-GCM encryption.
Try UDP first, since it is quicker. Move to TCP when a hotel, office or school network blocks or throttles UDP. TCP is a little slower but holds up better there.
IKEv2 for phones on the move
IKEv2 copes well when the network underneath changes. Walk out of Wi-Fi range onto mobile data and it picks the tunnel back up quickly.
It also uses AES-256-GCM on VPN Club. Phones and tablets that hop between networks during the day are a good fit.
Changing the protocol
A simple order works for most people: WireGuard, then OpenVPN UDP if it will not connect or keeps dropping, then OpenVPN TCP on restrictive networks. On a phone that changes networks a lot, give IKEv2 a try.
There is no extra cost for any protocol, and you can change it as often as you want. The choice applies from your next connection.
- In the VPN Club app, open Settings > Connection > Protocol
- Choose WireGuard, OpenVPN UDP, OpenVPN TCP or IKEv2
- Disconnect, then connect again

