Open the OpenVPN Connect app, then tap the three horizontal lines in the top left, then tap Settings.
Scroll down and enable the Seamless Tunnel option.
Tap the Advanced Settings at the bottom, and the Confirm button.
Change Security Level to Preferred (Recommended).
Enable the Enforce TLS 1.3 option.
Disable the DNS Fallback option.
Some people have reported different results with the "Layer 2 reachability" setting (which is enabled by default).
If you're having issues when switching between WiFi and cellular networks, try disabling that setting.
On some WiFi networks, you might need to set the MTU to 1400, at least for the UDP configs.
To do this on the config generator page, in the box at the bottom, add:
mssfix 1400
Once you've downloaded a config, tap the blue download arrow icon at the bottom left in Safari, then tap Downloads, then tap on the config you just downloaded.
Tap on the blue square icon at the bottom left of that screen, then tap on OpenVPN, which should import that config into OpenVPN Connect.
Tap "Add", then switch to the cryptostorm token delivery page. Copy the token, then switch back to OpenvPN.
Paste your token into the Username field, enable the Save password option, then type in any text for the password.
After you tap the Generate button, scroll down a bit and tap All configs to expand that section.
Be sure to enable the killswitch option. In our tests, traffic wouldn't flow without it.
Tap DOWNLOAD CONFIGS to save configs.zip, then install WireGuard from the App Store, then open it.
On the main WireGuard app screen, tap Add a tunnel, then Create from file or archive, then select the configs.zip you just downloaded.
VPN profiles for all the servers should now be imported into your WireGuard.
Toggle the switch on for whichever server you want to connect to.