Disclosure: VPNFin is reader-supported. If you buy a VPN through links on this page, we may earn a commission at no extra cost to you. This never affects our ratings — here’s our full disclosure.
IKEv2 Surfshark connections work in the apps and through manual setups. Surfshark’s support describes manual IKEv2 on Windows, iOS, Android, Linux and routers, using service credentials from the account, and its Android app can connect over IKEv2 without a separate client. One limit matters on iPhone: Surfshark’s unsafe site blocking works only over WireGuard, not IKEv2.
This guide covers when IKEv2 makes sense, the manual steps, and which features need a different protocol.
When IKEv2 Makes Sense
IKEv2’s MOBIKE extension keeps a session alive when a device switches between Wi-Fi and mobile data, as our IKEv2 vs WireGuard page explains. That suits phones on the move and built-in VPN clients on work computers where installing apps is not allowed.
For speed on a stable connection, Surfshark’s own advice favours WireGuard on Windows and macOS, as our Surfshark WireGuard guide explains.
Switching to IKEv2 in the App
Open Settings, then VPN settings, then Protocol, and choose IKEv2. The app keeps its kill switch and other features. On Android, Surfshark’s support also describes a Protocol button in the manual connection screen that switches between OpenVPN UDP, TCP and IKEv2.
IKEv2 Surfshark Manual Setup
Surfshark’s support gives the steps. Log in on the website and open VPN, Manual Setup, Desktop or mobile, then IKEv2. On the Credentials tab, note the service username and password; Surfshark stresses these are not your email and password.
Pick a server from the location list and enter its details in your device’s IKEv2 settings, along with the service credentials. Built-in IKEv2 clients exist on Windows, macOS, iOS and ChromeOS, so no extra software is needed.
Manual IKEv2 on Android
Surfshark’s Android support describes a manual route inside its app. On the login screen, tap Manual connection, enter the service credentials and the server’s host name, and use the Protocol button to choose IKEv2. No separate client is required.
Features That Need WireGuard
Surfshark’s iOS support says its unsafe site blocking works with the VPN only over WireGuard, not IKEv2 or OpenVPN. If you rely on that protection on an iPhone, stay on WireGuard. Our Surfshark iPhone guide covers the setting.
Camouflage Mode, Surfshark’s obfuscation, works with OpenVPN, Gizmodo notes. On restrictive networks, IKEv2 is not the answer; OpenVPN is, as our Surfshark OpenVPN guide explains.
IKEv2, WireGuard or OpenVPN?
Start on WireGuard for speed. Switch to IKEv2 on phones that drop as they move between networks. Use OpenVPN on networks that block VPNs, where Camouflage helps. Surfshark’s speed advice for phones also suggests trying OpenVPN UDP first, so test on your own networks. Our Surfshark speed guide lists the order.
IKEv2 on iPhone in Practice
On iPhone, Surfshark’s Bypasser works only for websites, its iOS support notes, and unsafe site blocking needs WireGuard. If you switch to IKEv2 for a trip, remember to switch back at home to regain site blocking. The kill switch keeps working on either protocol inside the app.
Other Providers’ IKEv2
IKEv2 is common across providers, but the details differ. NordVPN keeps it for manual setups only, as our NordVPN IKEv2 guide explains. CyberGhost offers it in its apps without a manual guide, as our CyberGhost IKEv2 guide shows. Surfshark covers both routes.
Speed Expectations
IKEv2 was slower than WireGuard in the 2026 gigabit test Tech Insider reported, though usually fast enough for browsing and HD streaming. Measure your own speed with and without the VPN on the same server before deciding.
Fixing Manual IKEv2 Connections
Most manual failures come from credentials or server details. Use the service username and password, not your email. Copy the server address exactly from Surfshark’s list, and generate fresh credentials if the old ones stopped working. Then reconnect and check the IP before trusting the connection.
A Quick Rule for IKEv2 Surfshark Use
Choose IKEv2 on a phone that keeps dropping while you move, or on a work computer limited to built-in clients. Stay on WireGuard everywhere else, and switch to OpenVPN when a network blocks VPN traffic.
What a Manual Setup Gives Up
A built-in IKEv2 connection lacks the Surfshark app’s kill switch, CleanWeb and Bypasser. If the tunnel drops, traffic falls back to your normal connection, as our kill switch guide explains. Use the app wherever it runs.
What Surfshark Costs
On 25 September 2026, the Starter 2-year plan cost $67.23 for the first 27 months. Renewal sits at about $79 a year, according to Security.org and VPNOverview. Our Surfshark price breakdown covers the plans, and our Surfshark refund guide explains the 30-day window.
| Provider | Renewal price | Per month | Tier |
|---|---|---|---|
| NordVPN | $139.08/yr | ~$11.59 | Basic |
| Surfshark | ~$79/yr | ~$6.58 | Starter |
| ExpressVPN | $99.95/yr | ~$8.33 | Basic |
| CyberGhost | $56.94/yr | ~$4.75 | 2-year |
| PureVPN | $47.95/yr | ~$4.00 | Standard, 2-year (1-year renews $57.95) |
| IPVanish | $89.99/yr | ~$7.50 | Essential |
| Windscribe | ~$69/yr | ~$5.75 | Pro |
| Proton VPN | ~$83.88/yr | ~$6.99 | VPN Plus |
| Mullvad | ~$65/yr | ~$5.40 | flat, no tiers |
| Norton VPN | $79.99/yr | ~$6.67 | Standard |
| Hotspot Shield | ~$95.99/yr | ~$8.00 | Premium annual |
| Astrill | $300 every 2 yrs | ~$12.50 | 2-year, same at renewal |
Testing the Connection
After connecting, check your IP with our VPN test page. If IKEv2 connections drop, our Surfshark disconnection guide covers more fixes. Surfshark belongs to Nord Security, which also owns NordVPN.
How We Research
This page draws on Surfshark’s support articles on manual connections, its Android manual connection and iOS unsafe site blocking, its speed advice, Gizmodo’s China guide and pricing from Surfshark, Security.org and VPNOverview. We cross-checked these sources against each other, and where they conflict or something can’t be verified, we say so in the text rather than guessing. We checked time-sensitive figures, including prices in US dollars, on 6 October 2026. Surfshark’s renewal table did not load, so renewal figures come from Security.org and VPNOverview. The main source we relied on is Surfshark’s manual connection guide. Our full approach lives on the About Us page.
IKEv2 Surfshark FAQ
Yes, in its apps and through manual setups with service credentials.
Service credentials from the Credentials tab, not your email and password.
No. Surfshark says it works only over WireGuard.
No. Gizmodo notes Camouflage works with OpenVPN.
On phones that switch networks often, or on computers that must use a built-in client.
The Verdict
IKEv2 Surfshark connections suit phones on the move and built-in clients. Use WireGuard for speed and iPhone site blocking, OpenVPN for restrictive networks, and the app wherever it runs.