OpenVPN UDP
“Reliable and widely supported. Good if WireGuard is unstable.”
OpenVPN UDP
“Reliable and widely supported. Good if WireGuard is unstable.”
OpenVPN TCP
“Slower, but gets through firewalls that block UDP, such as hotels, offices and schools.”

OpenVPN UDP vs TCP
OpenVPN UDP vs TCP comes down to the network you’re on. Both are the same long-established, open protocol with AES-256 encryption, sent two different ways. UDP is the reliable fallback when WireGuard is unstable, and TCP is slower, but gets through firewalls that block UDP.
No plan needed on iPhone, iPad and Android, on the free locations: you can choose any protocol there.
30-day money-back guarantee (except crypto and manual payments)
Hotel Wi-Fi
You don’t need to know in advance what your network blocks. Try OpenVPN UDP first, and if it won’t connect, switch to OpenVPN TCP in the same picker. Back on a network that doesn’t get in the way, switch back to WireGuard or Optimal.
OpenVPN UDP · this firewall blocks UDP, so the connection can’t start.
The difference
UDP and TCP are two ways of moving data across the internet. Same OpenVPN, same encryption, different delivery.
UDP sends each piece and moves on, without waiting to hear that it arrived. That makes OpenVPN UDP the lighter of the two, and the next one to try if WireGuard keeps dropping on your network.
TCP checks that every piece gets there, in order, and sends again anything that goes missing. It does more checking, so it’s slower, but it gets through firewalls that block UDP.
OpenVPN UDP and OpenVPN TCP both use AES-256 encryption in the CopVPN apps. Switching between them changes how your data travels, not how it’s encrypted. OpenVPN is a long-established, open-source protocol, and its code is public for anyone to review.
In the apps
OpenVPN UDP and OpenVPN TCP are separate choices in the protocol picker, in the latest CopVPN apps. There’s no separate OpenVPN client to set up: download CopVPN for your device and choose either one in Settings.
| App | Where to find it | Good to know |
|---|---|---|
| Windows | Settings › Connection › Protocol | Choose OpenVPN UDP or OpenVPN TCP. The protocol chip under the connect button on the Home screen opens the same picker. Needs a plan. |
| Mac | Settings › Connection › Protocol | Choose OpenVPN UDP or OpenVPN TCP in the CopVPN app from the Mac App Store. Needs a plan. |
| Linux | Settings › Connection › Protocol | The same steps as Windows, in the .deb for Ubuntu and Debian. Needs a plan. |
| iPhone and iPad | Settings › Protocol | Choose OpenVPN UDP or OpenVPN TCP on the “Select Protocol” screen. Works without a plan. |
| Android | Settings › Protocol | Choose OpenVPN UDP or OpenVPN TCP on the “Protocols” screen, on phones and tablets. Works without a plan. |
| Android TV | Settings › Protocol | The same picker as the phone app. Needs a plan. |
| Browser extension | Not available | The Chrome, Edge and Firefox extensions use “Secure Proxy” and protect the browser only. |
UDP is the lighter of the two. OpenVPN TCP’s own description starts with “Slower,” because TCP checks that every piece of data arrives. Use UDP when your network allows it, and TCP when a firewall blocks UDP.
When a hotel, office or school firewall blocks UDP. A firewall like that stops WireGuard and OpenVPN UDP, while OpenVPN TCP “gets through firewalls that block UDP.” If it still won’t connect, the network may be looking for VPN traffic, and AmneziaWG or Stealth is the next step.
OpenVPN in the CopVPN apps uses AES-256 encryption, for both UDP and TCP. It’s a long-established, open-source protocol, and its code is public for anyone to review. On our side, we follow a no-logs policy.
They’re two separate protocols. WireGuard is newer, uses its own built-in cryptography and is described as “Fastest. Best for everyday use where VPNs aren’t blocked.” OpenVPN uses AES-256 encryption and comes in two forms, UDP and TCP.
No. OpenVPN UDP and TCP are built into the CopVPN apps, so there’s nothing else to install and nothing to import. Pick one in Settings and connect.
Yes, on iPhone, iPad and Android. Without a plan, those apps connect to the free locations, and you can choose OpenVPN UDP, OpenVPN TCP or any other protocol. The Windows, Mac, Linux and Android TV apps need a plan to connect at all.
Keep reading
Plans
Both are in the latest CopVPN apps, with AES-256 encryption. Plans run from 1 month to 5 years.
30-day money-back guarantee (except crypto and manual payments)We follow a no-logs policy