FlashPanel

WireGuard VPN ​

WireGuard is free, open-source VPN (virtual private network) software that is lighter and faster than familiar options such as OpenVPN or IPsec. With WireGuard installed on your server, you can:

  • Encrypt your connection on public Wi-Fi.
  • Browse the Internet using the server's IP address.
  • Reach services that are only open on the server's internal network.

Install WireGuard ​

  1. Open the server's Applications page and choose the Not Installed tab.
  2. Find WireGuard and click the Install button (download icon).
  3. In the install dialog, review the following fields:
    • Port: the UDP port WireGuard listens on (default 23854).
    • DNS 1, DNS 2: the DNS servers devices use while connected to the VPN.
    • Allowed IPs: the IP ranges routed through the VPN (separated by commas, tabs, or Enter).
  4. Click Install.

TIP

If your VPS provider has its own firewall, open the UDP port you chose in step 3 so devices can connect.

Connect to WireGuard VPN ​

After installation, open VPN > WireGuard in the server menu. This page lists the clients (each client is a device allowed to connect) and has the WireGuard service management buttons at the top right.

Create a WireGuard client ​

  1. Click the Create Client button.
  2. Enter a Name for the client (for example the device name) and click Create Client.

The new client appears in the list. At the end of each row there are buttons:

  • View Config (document icon): view the client's configuration file.
  • Download (download arrow): download the client's .conf configuration file.
  • Delete (trash icon): delete the client. Devices using this configuration can no longer connect.

TIP

Create a separate client for each device. If a device is lost, you only need to delete its client.

Install the WireGuard app ​

Download the WireGuard app for your device (Windows, macOS, Linux, Android, iOS) from the WireGuard installation page.

Import the WireGuard client configuration ​

  1. Open the WireGuard app.
  2. On a computer: click Import tunnel(s) from file and choose the downloaded .conf file. On a phone: tap the + button, choose to import from a file (Import from file or archive), and choose the .conf file.
  3. Confirm if the app asks for permission to add a VPN configuration.
  4. Click Activate (or turn on the switch on a phone) to connect.

To check, visit a website that shows your IP address. With the default Allowed IPs (0.0.0.0/0, ::/0), all traffic goes through the VPN, so the IP shown is the server's IP.