A VPN for de-Googled Android is entirely doable; running Android without Google Play does not lock you out of one. It only changes how you install it.
Instead of a single store, you have three routes: an open-source repository like F-Droid, a direct APK from the provider, or an alternative app store.
Whether you are on GrapheneOS, CalyxOS, a Huawei phone, or any de-Googled setup, the question is not whether you can run a VPN but which install path fits your provider. Some VPNs are on F-Droid, some are download-only, and some sit in stores you may already have.
Here is what changes without Google Play, the three ways to install, and which VPNs are available through each.
What Changes Without Google Play
Setting up a VPN for CalyxOS, GrapheneOS, or any de-Googled system starts from the same place: de-Googling removes Google Play and, on most setups, Google Play Services along with it. That has a few knock-on effects worth knowing before you install anything.
- Your install source moves. No Play Store means apps come from F-Droid, Aurora Store, a direct APK, or an alternative vendor store.
- Some apps lean on Google for push. A few VPN apps use Google’s push service for notifications, which can misbehave without Play Services, though the core tunnel still works.
- Updates become manual, sometimes. A direct-APK install does not auto-update, so you either check by hand or use a tool that watches for new releases.
- Sideloading needs a toggle. Installing an APK requires allowing installs from the source, a permission you grant once.
None of this stops a VPN from running. It just decides which of the three routes below you take.
F-Droid and Open-Source Repositories
The purist route. F-Droid is a catalogue of free and open-source apps, and it is pre-installed on de-Googled systems like CalyxOS. If a VPN is here, it is the cleanest install a privacy-focused user can make.
- Mullvad is the standout, and honesty demands naming it. It is on F-Droid, its apps are open source, and the GrapheneOS project specifically names it as a recommended VPN because it is tested with hardware memory tagging. For pure privacy on a de-Googled phone, it is the consensus pick.
- IVPN is also here, another open-source, privacy-first option in the same mould.
The limit of this route is selection. Few commercial VPNs publish to F-Droid, so the catalogue is small and weighted toward the privacy-maximalist names, which tend to be WireGuard-only.
Direct APK From the Provider
The universal route, and the one that works for almost any VPN. To install VPN without Play Store access of any kind, this is the path that never fails. You download the APK file straight from the provider’s official website and install it, which sidesteps every store entirely.
- GnuVPN publishes a direct APK from its site, and this is where it fits a de-Googled phone well. A GnuVPN Android install by direct GnuVPN APK needs no Google dependency at all, and once running it offers SoftEther and AmneziaWG obfuscation that the F-Droid privacy VPNs, being WireGuard-only, do not.
- Most major VPNs also offer a direct APK, including NordVPN, Surfshark and Proton, though you take on manual updating in exchange.
The rule for this route is discipline about the source. A VPN APK Android download is only as safe as where it comes from, so use the provider’s own domain and never a third-party mirror like APKPure or APKMirror.
Alternative App Stores
The convenient middle ground. Several vendor and independent stores carry VPNs and handle updates for you, without Google in the loop.
- Aurora Store is a privacy-friendly front end to the Google Play catalogue that installs apps without a Google account, so most VPNs are reachable through it.
- Huawei AppGallery and Xiaomi GetApps are the vendor stores on those brands’ phones. GnuVPN is published on both, which makes it directly installable on a Huawei or Xiaomi device with no sideloading at all.
- Obtainium is not a store but a tool that installs and updates apps straight from their GitHub releases, useful for open-source VPNs.
This route gives you store-style convenience and automatic updates while keeping Google out, which is why it suits a de-Googled phone that still wants low-friction installs.
Which VPN Actually Fits a De-Googled Phone
The right choice depends on which of two things you want most: maximum privacy, or obfuscation and install flexibility.
If your priority is the purest privacy setup, Mullvad is the honest answer. It is on F-Droid, it is open source, GrapheneOS recommends it, and it asks for no email. For a threat model built around leaving no trace, nothing here beats it.
If your priority is getting through restrictive networks, or you are on a vendor phone like Huawei or Xiaomi, GnuVPN fits better. It installs by direct APK or straight from the AppGallery and GetApps stores, and it brings SoftEther and AmneziaWG obfuscation that the WireGuard-only privacy VPNs cannot offer.
It is the best VPN for users who need to defeat a block, not only to minimise data collection, and the practical pick on de-Googled vendor hardware. Most people land on one of those two. Mullvad for privacy purity, GnuVPN for obfuscation and flexible installation across the phones that lack a Play Store.
FAQ
Can I use a VPN on a phone without Google Play?
Yes. A VPN without Google Play installs through one of three routes: F-Droid for open-source options like Mullvad, a direct APK from the provider’s website, or an alternative store such as Aurora, Huawei AppGallery or Xiaomi GetApps. The VPN itself works identically; only the install source changes.
What is the best VPN for GrapheneOS?
For pure privacy, Mullvad, which GrapheneOS officially recommends and which is tested with hardware memory tagging. For obfuscation on blocked networks, GnuVPN, installed by APK, adds SoftEther and AmneziaWG that Mullvad’s WireGuard-only setup lacks. The best VPN for GrapheneOS depends on whether your priority is minimal data collection or getting through a filter.
Is it safe to install a VPN from an APK?
Yes, if the APK comes from the provider’s official website. A GnuVPN APK from gnuvpn.com, or a major VPN’s APK from its own domain, is safe. The danger is third-party mirror sites like APKPure or APKMirror, which can serve modified files, so always download from the source.
Which VPNs are on F-Droid?
Mullvad and IVPN are the notable ones, both open source and privacy-first. Most commercial VPNs are not on F-Droid, so if you want a specific provider, the direct-APK or alternative-store route is more likely to have it. The F-Droid VPN selection is small but high quality on privacy.
How do I install a VPN on a Huawei or Xiaomi phone without Google?
Use the vendor’s own store. Huawei phones have the AppGallery and Xiaomi phones have GetApps, both pre-installed, and GnuVPN is published on both. That makes it a no-Google Play VPN install with no sideloading. For a VPN not in those stores, download its official APK instead.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
