nymtech/nym-vpn-client nym-vpn-v2026.16.0-beta.1

v2026.16.0-beta.1

on GitHub

Nym VPN v2026.16.0-beta.1 application and core binaries. This release is for all platforms, except Android (Google Play)

🚀 What's New

🛠️ Core

Added

• [Linux] Add NetworkManager VPN plugin that can be used to manage VPN connection from system menu. Note that removing VPN from system network settings also disconnects VPN. In all other cases VPN is only managed via UI interaction by user. (#6873, #6861)
• Add NYM_VPN_API_URL_OVERRIDE compile time environment variable to override VPN API server in nym-vpnd during development (#6962)
• [Android] Expose apply_freepass to apply a free pass to the signed-in account (#7085)
• Add redeem_freepass command that creates the stored account on the VPN API with a free pass applied (#7085)

Changed

• Strip debug info in release builds (#7018)
• [Linux] Use the same systemd unit for nym-vpnd in the Debian and AUR packages. The daemon restarts only on failure, 2 seconds after it stops, and no longer orders itself relative to network-pre.target or network-online.target (#7072)

Fixed

• Restrict allowed IPs for exit gateway (#6952)
• Show a specific error when Enhanced connection is On and the entry server has no bridge (#6973)
• Connect directly in Auto when the entry server has no bridge (#6976)

Security

• [Android] Build C/C++ dependencies of nym-vpn-lib with -fstack-protector-strong (#6960)
• [Linux, macOS] Disable core dumps of nym-vpnd, which would contain the WireGuard private key and account tokens (#7067, #7078)
• [Windows] Exclude nym-vpnd from Windows Error Reporting so that crash dumps don't contain the WireGuard private key and account tokens (#7078)
• [macOS] Require user presence with password or Touch ID for account-related operations. Affects the app and the CLI. Use nym-vpnc authorize and nym-vpnc deauthorize to manage authorization (#6980)
• Keep the login link received from the website, which carries login data, out of the logs and error messages (#7086)
• Zeroize the copy of the account's ecash private key taken when deriving the ecash keypair (#7084)
• Zero WireGuard configuration buffers holding private and preshared keys after passing them to wireguard-go (#7069)

🤖 Android app

Added

• Sign in by scanning a QR code from a signed-in device (#7085)
• Redeem a free pass by scanning or typing a code, from Welcome or Settings (#7085)
• qrscanner module for on-device QR scanning (#7085)

Changed

• Build the server list off the main thread with search debounce (#6959)
• Decode only the gateway list that changed in DataStoreGatewayRepository (#6959)
• Cache flag resource IDs instead of calling getIdentifier for every row (#6959)
• Use countryCodesForRegionSupport instead of a hardcoded "us" (#6959)
• Let the Android Gradle plugin strip all native libraries, including libjnidispatch.so from JNA (#7018)
• Extract native debug symbols with the Android Gradle plugin for Google Play builds (#7021)

Fixed

• Show a specific error when Enhanced connection is On and the entry server has no bridge (#6974)

🐧🪟 Windows & Linux apps

Added

• Split tunneling settings explain that excluded apps' DNS lookups still go through NymVPN (#7105)

Fixed

• Show a specific error when Enhanced connection is On and the entry server has no bridge, and say the connection is reconnecting when the setting changes (#6973)

🍎 iOS & macOS apps

Added

• macOS: Split tunneling settings explain that excluded apps' DNS lookups still go through NymVPN (#7104)

Fixed

• iOS: when the Apple ID's subscription belongs to another NymVPN account, the plan screen now explains it and opens Apple's subscription settings instead of letting a second account pay into that subscription (#6915)
• Show a specific error when Enhanced connection is On and the entry server has no bridge (#6975)
• Show app window with quit prompt when attempting to quit from app menu with no visible windows (#6899)

📦 Core Components Overview

• nym-vpnd: Background daemon service managed via the UI app or CLI.
• nym-vpnc: Command-line interface (CLI) to control the daemon (nym-vpnd).
• nym-socks5-proxy: SOCKS5 proxy handling geo-exclusion routing.
• nym-diagnostic: System information and network troubleshooting tool.
• nym-setup: macOS helper tool for system service configuration.

💾 Downloads & Assets

🤖 Android

• nym-vpn-fdroid-2026.16.0-beta.1-prerelease.apk: Android App (F-Droid Build)

3c98a016aa4f14a3ba185c764ed363415cf7ff3c3d328a87ffff2ff1b140ff06

apksigner verify --print-certs "nym-vpn-fdroid-2026.16.0-beta.1-prerelease.apk" | grep SHA-256

🐧 Linux

• Desktop App
  • nym-vpn-app_2026.16.0-beta.1_amd64.deb: Nym VPN app, debian package (x86_64)
  • nym-vpn-app_2026.16.0-beta.1_arm64.deb: Nym VPN app, debian package (arm64)
  • NymVPN_2026.16.0-beta.1_amd64.AppImage: Nym VPN app, AppImage (x86_64)
  • NymVPN_2026.16.0-beta.1_aarch64.AppImage: Nym VPN app, AppImage (arm64)
• CLI & Daemon
  • nym-vpnd_2026.16.0~beta.1_amd64.deb: Nym VPN daemon, debian package (x86_64)
  • nym-vpnd_2026.16.0~beta.1_arm64.deb: Nym VPN daemon, debian package (arm64)
  • nym-vpnc_2026.16.0~beta.1_amd64.deb: Nym VPN command-line tool, debian package (x86_64)
  • nym-vpnc_2026.16.0~beta.1_arm64.deb: Nym VPN command-line tool, debian package (arm64)
• NetworkManager Plugin
  • nym-vpn-networkmanager_2026.16.0~beta.1_amd64.deb: NetworkManager VPN plugin, debian package (x86_64)
  • nym-vpn-networkmanager_2026.16.0~beta.1_arm64.deb: NetworkManager VPN plugin, debian package (arm64)

🍎 macOS

• NymVPN-2026.16.0-beta.1.pkg: Desktop App Installer
• nym-vpnc-2026.16.0-beta.1.pkg: Command-Line Tool Installer

🪟 Windows

• NymVPN_2026.16.0-beta.1_x64-setup.exe: Desktop App Installer (x64)
• NymVPN_2026.16.0-beta.1_arm64-setup.exe: Desktop App Installer (arm64)