diff --git a/tunnel/build.gradle.kts b/tunnel/build.gradle.kts
index 6e07eb5c..079e2529 100644
--- a/tunnel/build.gradle.kts
+++ b/tunnel/build.gradle.kts
@@ -18,7 +18,7 @@ android {
     }
     namespace = "${pkg}.tunnel"
     defaultConfig {
-        minSdk = 21
+        minSdk = 23
     }
     externalNativeBuild {
         cmake {
diff --git a/ui/build.gradle.kts b/ui/build.gradle.kts
index f64c9a8e..12f6f2de 100644
--- a/ui/build.gradle.kts
+++ b/ui/build.gradle.kts
@@ -21,7 +21,7 @@ android {
     namespace = pkg
     defaultConfig {
         applicationId = pkg
-        minSdk = 21
+        minSdk = 23
         targetSdk = 36
         versionCode = providers.gradleProperty("wireguardVersionCode").get().toInt()
         versionName = providers.gradleProperty("wireguardVersionName").get()
diff --git a/ui/src/main/AndroidManifest.xml b/ui/src/main/AndroidManifest.xml
index 86c989b3..d2ed5515 100644
--- a/ui/src/main/AndroidManifest.xml
+++ b/ui/src/main/AndroidManifest.xml
@@ -40,7 +40,8 @@
 
     <application
         android:name=".Application"
-        android:allowBackup="false"
+        android:allowBackup="true"
+        android:fullBackupContent="@xml/backup"
         android:banner="@mipmap/banner"
         android:enableOnBackInvokedCallback="true"
         android:icon="@mipmap/ic_launcher"
diff --git a/ui/src/main/res/xml/backup.xml b/ui/src/main/res/xml/backup.xml
new file mode 100644
index 00000000..fa1dcb1d
--- /dev/null
+++ b/ui/src/main/res/xml/backup.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<full-backup-content>
+    <include domain="sharedpref" path="." requireFlags="clientSideEncryption" />
+    <include domain="database" path="." requireFlags="clientSideEncryption" />
+    <include domain="file" path="." requireFlags="clientSideEncryption" />
+</full-backup-content>
\ No newline at end of file