GUIDE NETWORK

WIREGUARD_VPN

Complete WireGuard VPN setup guide. Anonymous, fast, and lightweight. For Windows, Linux, macOS, mobile.

BEGINNER FRIENDLY CROSS-PLATFORM KILL SWITCH INCLUDED

WHAT IS WIREGUARD?

WireGuard is a modern VPN protocol that's extremely lightweight and fast. Unlike OpenVPN, it uses kernel-level networking for performance comparable to direct connections.

~4000

Lines of Code

1000+

Faster than OpenVPN

Easy

Config Setup

Free

Open Source

IMPORTANT: READ THIS FIRST

Before setting up any VPN, understand that you're trusting your VPN provider with all your traffic. Use reputable providers like Mullvad, hide.me, or ProtonVPN.

For this guide, we recommend: Mullvad VPN (paid, cash by mail possible) or hide.me (free tier available)

STEP 1: CHOOSE A VPN PROVIDER

You need a VPN provider with WireGuard support. Here are the best options:

MULLVAD (RECOMMENDED)

• No email required

• Cash payments accepted

• Sweden jurisdiction

• €5/month, no trial needed

mullvad.net →

HIDE.ME

• Generous free tier

• Malaysia jurisdiction

• 10 Gbit/s servers

• Port forwarding included

hide.me →

SELF-HOSTED

• Maximum privacy

• You control everything

• Requires VPS (€5-10/month)

• More complex setup

STEP 2: WINDOWS SETUP

2.1 Install WireGuard

A.
Download WireGuard from wireguard.com/install

B.
Run the installer (Windows Store version recommended or MSI)

C.
If asked, create a firewall exception for WireGuard

2.2 Import VPN Configuration

After subscribing to a VPN provider, you'll get config files or credentials:

Option A: Import from File (.conf or .zip)

Click "Import Tunnel(s) from File" and select your provider's config.

Option B: Manual Configuration

Click "Add Tunnel" → "Add Empty Tunnel"

Name: "Mullvad Sweden" (or your provider)

Public Key: Get from your VPN dashboard

Endpoint: Get from your VPN dashboard (e.g., 185.xxx.xxx.xxx:51820)

Allowed IPs: 0.0.0.0/0 (all traffic through VPN)

DNS: Your provider's DNS (Mullvad: 194.242.2.2)

2.3 Activate & Test

A.
Click "Activate" on your new tunnel

B.
Verify connection: The switch should toggle to "On"

C.
Test at ipleak.net or mullvad.net/check

CRITICAL: ENABLE KILL SWITCH

A kill switch blocks all internet if your VPN disconnects. Without this, your real IP leaks instantly.

WireGuard Kill Switch: Edit Tunnel → Blocking → Block all traffic when tunnel is disconnected

OS Kill Switch (Windows): Windows Settings → Network & Internet → Advanced network settings → Network reset → Turn on automatically toggle

Enable BOTH for maximum protection

STEP 3: LINUX SETUP (Debian/Ubuntu)

3.1 Install WireGuard

sudo apt update && sudo apt install wireguard

For Arch: sudo pacman -S wireguard-tools

3.2 Generate Keys

wg genkey | tee privatekey | wg pubkey > publickey

3.3 Create Config

[Interface] PrivateKey = YOUR_PRIVATE_KEY_HERE Address = 10.0.0.2/24 DNS = 10.0.0.1 [Peer] PublicKey = PROVIDER_PUBLIC_KEY Endpoint = PROVIDER_ENDPOINT:51820 AllowedIPs = 0.0.0.0/0 PersistentKeepalive = 25

Get these values from your VPN provider dashboard.

3.4 Start Connection

sudo wg-quick up wg0

To stop: sudo wg-quick down wg0

STEP 4: MACOS SETUP

1.
Download WireGuard from the App Store or brew install --cask wireguard

2.
Import your config from provider or add manually

3.
Enable "Block all traffic when tunnel is disconnected" in Settings

STEP 5: MOBILE SETUP

ANDROID

Download WireGuard from Play Store

Import config from QR code (scan from desktop)

Or create tunnel manually with credentials

Enable "Always-on VPN" for system-wide

iOS (iPhone)

Download WireGuard from App Store

Create manual tunnel or import config

Add to Home Screen for quick toggle

Note: iOS has some VPN limitations

STEP 6: DNS LEAK PROTECTION

Even with VPN active, your DNS requests can leak. Use your VPN provider's DNS servers:

MULLVAD DNS

194.242.2.2

194.242.2.2

HIDE.ME DNS

185.222.222.222

185.222.222.222

VERIFY YOUR CONNECTION

Test your VPN connection at these sites:

mullvad.net/check browserleaks.com ipleak.net

TROUBLESHOOTING

Connection Fails

• Check firewall/antivirus isn't blocking

• Try different port (51820 is default)

• Verify public key matches exactly

• Check server status at provider

Slow Speeds

• Try different server location

• Switch from UDP to TCP (in advanced settings)

• Check your base internet speed

• Disable other VPNs/proxies

PRO TIPS

• Split Tunneling: Only route gaming/privacy-sensitive traffic through VPN, leave rest direct

• Multi-hop: Chain VPN servers for extra privacy (slower)

• Port forwarding: Some providers offer this (useful for self-hosting)

• Always-on VPN: Enable on mobile for continuous protection

WireGuard Official → Mullvad VPN → hide.me →