diff --git a/mobile/src/main/AndroidManifest.xml b/mobile/src/main/AndroidManifest.xml
index 4ecff4995b..4f61094046 100644
--- a/mobile/src/main/AndroidManifest.xml
+++ b/mobile/src/main/AndroidManifest.xml
@@ -27,6 +27,7 @@
             android:icon="@mipmap/ic_launcher"
             android:backupAgent=".ShadowsocksBackupAgent"
             android:label="@string/app_name"
+            android:networkSecurityConfig="@xml/network_security_config"
             android:banner="@drawable/ic_start_connected">
 
         <meta-data android:name="com.google.android.gms.version"
diff --git a/mobile/src/main/res/xml/network_security_config.xml b/mobile/src/main/res/xml/network_security_config.xml
new file mode 100644
index 0000000000..c9828fa43c
--- /dev/null
+++ b/mobile/src/main/res/xml/network_security_config.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="false"/>
+</network-security-config>