Advanced Options

What is WireGuard? Why it’s the best VPN choice today

WireGuard is a next-generation, ultra-fast and lightweight VPN protocol designed with security, simplicity, and performance in mind. It uses modern cryptographic standards like ChaCha20, Curve25519, and BLAKE2, offering significantly better efficiency and security than traditional VPNs like OpenVPN or IPsec.

Thanks to its minimal codebase (under 4,000 lines), WireGuard drastically reduces the potential for bugs and security vulnerabilities. It delivers auditable, high-performance VPN tunnels that work across all major platforms including Linux, Windows, macOS, Android, iOS, and routers.

This tool helps you generate secure WireGuard config files instantly online, with nothing stored on our side. Perfect for developers, sysadmins, and privacy-conscious users.

WireGuard Installation & Quick Start Guide (Linux, Windows, macOS, Mobile)

Quickly set up a secure and high-performance VPN with WireGuard. Follow these steps to install and start your server – then connect your clients with ease using generated configuration files or QR codes.

🔧 Install WireGuard on Linux (Debian/Ubuntu)

sudo apt update
sudo apt install wireguard

📄 Create your Server Config File

sudo nano /etc/wireguard/wg0.conf

Paste the generated server config from this page into wg0.conf.

🚀 Start WireGuard

sudo wg-quick up wg0

🔁 Enable WireGuard on Boot

sudo systemctl enable wg-quick@wg0

📱 Connect Client via QR Code

Open the official WireGuard app on your mobile device, scan the generated QR code for the client, and click “Connect”.

⬇️ Download WireGuard for All Platforms

🚨We do not store your keys

Keys, QR codes and config files are created on our server for each request and sent to you over HTTPS. Nothing is saved: there is no database, no account and no log of your keys.

What is a WireGuard config file?

A WireGuard config file, often called wg0.conf, describes one end of a VPN tunnel. The [Interface] section holds the device's own settings: its PrivateKey, tunnel Address, ListenPort, DNS and MTU. Each [Peer] section describes a remote device by its PublicKey and says which IP ranges (AllowedIPs) go through the tunnel. It can also contain an Endpoint, a PersistentKeepalive and a PresharedKey.

How to create a WireGuard config file

  1. Enter the server address (Endpoint) and port that your clients will connect to.
  2. Choose the VPN tunnel network and how many clients you need.
  3. Optional: switch on a preshared key for an extra layer of protection, or NAT (masquerade) rules if the server should route traffic for the clients.
  4. Generate, then download server.conf, each client file, or everything as wireguard-configs.zip. Phones can scan the QR code instead.

How to use the generated files

  • Linux server: copy server.conf to /etc/wireguard/wg0.conf, start it with sudo wg-quick up wg0 and open the UDP port in your firewall. To start it at boot: sudo systemctl enable wg-quick@wg0.
  • Windows and macOS: open the WireGuard app, choose Import tunnel(s) from file and select the client file.
  • Android and iOS: in the WireGuard app choose Add tunnel, then Create from QR code.

The settings explained

Endpoint and port
The public address and UDP port of your server. The default port is 51820.
VPN tunnel network
The private network inside the tunnel. The server takes the first address, the clients get the following ones.
AllowedIPs
0.0.0.0/0 sends all traffic through the VPN (full tunnel). A narrower range, such as the tunnel network, sends only that traffic (split tunnel).
DNS
The DNS server that clients use while the tunnel is up.
MTU
The largest packet size inside the tunnel. 1420 suits most connections; lower it if large transfers stall.
PersistentKeepalive
Sends a small packet at a fixed interval, in seconds. Useful for clients behind NAT; 25 to 30 seconds is common.

Privacy and security

Keys and config files are created on our server for each request and returned to you over HTTPS. The tool has no database, writes no files and needs no account, so nothing is kept after the response. Treat the generated files like passwords: they contain private keys. If you want to be certain that a key has never left your device, create it there with wg genkey | wg pubkey and only use this tool for the surrounding configuration.

Frequently asked questions

How do I download a WireGuard config file?

Fill in the form above and click generate. You can then download server.conf, the config file of each client, or all of them at once as wireguard-configs.zip.

Is this WireGuard config generator free?

Yes. It is free to use, needs no account and has no usage limit.

Does the tool store my keys?

No. The keys are created for each request, returned to you over HTTPS and not stored: the tool has no database and writes no files. The keys do pass through our server while they are generated. For the highest level of security, create the keys on the device that will use them with wg genkey and wg pubkey.

How do I add a WireGuard config to my phone?

Open the WireGuard app on Android or iOS, choose Add tunnel, then Create from QR code, and scan the QR code shown next to the client config.

What is the difference between server.conf and the client files?

server.conf holds the server's own settings and one peer entry for every client. Each client file holds that client's own settings and one peer entry that points to the server.

Can I use this for a company VPN?

The generated files work for any WireGuard setup. For company use you also need key management, firewall rules and monitoring. FEHMER TECH, the company behind this tool, designs and runs WireGuard VPN access for teams in Austria, Germany and Switzerland.