Editing Futotemporarywikipage (section)

==== 4.2 Import the Configuration into OpenVPN Connect on Android – SECURELY!!!!! ====

# Transfer the <code>.ovpn</code> file to your Android device. ''DO THIS SECURELY.''
# Install the OpenVPN Connect app from the Play Store.
# Import the configuration file and connect to the VPN.

VPN connectivity can be done with a certificate alone, without a username or password. This means that ''if you misconfigured something, and this file gets into the wrong hands, '''any Tom, Dick or Harry has access to your home network!'''''

'''Don’t upload the file to public file transfer sites'''

Don’t do this. Do not store the key to your front door on megaupload.

'''Instead, do this:'''

* Connect your phone directly to your computer with a USB cable to transfer the file; simple and secure.
* Or, use an encrypted messenger you trust. Just make sure it’s actually secure, not just convenient.

'''Why the extra caution?'''

* This <code>.ovpn</code> file is sensitive. It’s part of what allows access to your server.
* If someone gets this file &amp; figures out your password, they’re in. Not good.
* And if there’s a config mistake (it happens), they might not even need the password.
* Without this file, even if someone knows your username &amp; password, they’re not getting in.

'''Treat this file like your bank details. Don’t put it on a post-it note to the 4:3 monitor in front of your Windows XP Service Pack 1 computer.'''

Don’t leave it lying around in your downloads folder.
Don’t share it casually.

The chances of someone intercepting this file and using it maliciously are low, but we don’t take unnecessary risks with security. It’s not paranoia, it’s good practice.

Do it right, and you’ll save yourself potential headaches down the road. Plus, you’ll have the satisfaction of knowing you’ve set things up properly.

<span id="edit-settings-on-openvpn-android-application"></span>