1
VLESS over TLS
Your traffic rides inside a standard TLS session on port 9443 — no SOCKS5 fingerprints, no plaintext handshakes, no local converter.
Android + Windows · VLESS over TLS
A quieter way
A quieter way
through the firewall.
VaLink wraps your traffic in ordinary-looking HTTPS. Log in, pick a plan, connect — server nodes are delivered automatically and every link stays encrypted on the wire.
No SOCKS5TUN straight into the tunnel
AES-256-GCMSubscriptions sealed per account
SHA-256 pinningServers can't be swapped out
Multi-regionSwitch nodes in one tap
Built to look like nothing
Every layer is chosen so the connection is indistinguishable from a normal visit to an HTTPS site.
2
Certificate pinning
The server fingerprint is captured on first connect and pinned afterwards, so a hijacked DNS answer cannot impersonate your node.
3
Nodes delivered for you
The control plane seals your node list with AES-256-GCM; the app decrypts it locally. You only ever see regions — never raw addresses.
4
DNS stays inside
DNS is hijacked into the tunnel and resolved over TCP, so queries never leak to your carrier and QUIC simply falls back to TCP.
5
Plans, usage, expiry
Time and data plans, daily caps, live usage. When a plan ends the nodes refuse new connections — no silent overage.
6
English and 中文
Switch language inside the app at any time. Credentials live in Android Keystore-backed encrypted storage.
Three steps, once
-
Sign in
Use a VaLink account or single sign-on from the user center. One account works across devices.
-
Pick a plan
Card payment in USD or aggregated local payment. Monthly plans can auto-renew.
-
Tap connect
Nodes sync automatically, the app verifies the server identity, then the VPN service starts.
Download
Android and Windows. Builds are attached to GitHub Releases in valzexa/app — no account, no installer bundle.
Builds are attached to GitHub Releases (tag v2.3.14) in the valzexa/app repository.
On Android, sideloading requires allowing installs from your browser or file manager.
The Windows client is a single portable EXE: it uses the system proxy and needs no administrator rights.
iOS is not supported: it needs a Network Extension entitlement and a Mac build.
Browse on GitHub · Direct link not working? Open the file page on GitHub
| Version | Date | Size | Notes | Download |
|---|---|---|---|---|
| 2.3.14 latest | 2026-10 | 68.6 MB | Real-time traffic accounting fix; auto-disconnect with a notice when traffic runs out; buy guidance instead of connection errors; claimed free trial stays listed with a grayed-out button | Download |
| 2.3.10 | 2026-10 | 68.5 MB | USDT payment dialog stays open for repeated status checks | Download |
| 2.3.5 | 2026-10 | 68.5 MB | Wallet-only purchase: plans are paid from your UserCenter balance, shown on the plans page; in-app top-up (USDT / card / PayPal) | Download |
| 2.3.1 | 2026-10 | 68.5 MB | Login captcha, safer sign-up, bilingual UI, payment method picker, password recovery | Download |
| 1.0.5 Windows | 2026-10 | 49 MB | Desktop client: buy guidance on connect refusal, auto-disconnect with a notice when traffic runs out, claimed trial grayed out, bilingual UI | Download |
Looking for an older build? The full list lives on the repository's Releases page.
Questions
Is VaLink free?
The app is free to download. Every account gets a 1-hour free trial (up to twice per device); after that choose the 7-day, monthly, yearly or 2-year plan.
What do you log?
We count bytes per account to enforce quotas and expiry. Browsing content and destination history are not recorded.
How do I pay?
Top up your in-app wallet with USDT, a card (Creem) or PayPal, then pay for plans from the balance — no checkout page. Top-ups arrive in about a minute.
I forgot my password.
Local accounts can submit a recovery request in the app; an admin resets it and contacts you. User-center accounts recover on the user center.
Which devices are supported?
Android 10 and newer, including tablets. iOS is not supported yet.