1 3 3 7 4 2 0 6 6 6 1 3 3 7 4 2 0 6 9 6 6 6 1 3 3 7 4 2 0 6 6 6 4 2 0 1 3 3 7 6 9 6 6 6 4 2 0 1 3 3 7 6 9 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6 4 2 0 6 9 6 6 6 1 3 3 7 4 2 0 6 9 6 6 6 1 3 3 7 4 2 0 6 9 1 3 3 7 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6 6 9 4 2 0 1 3 3 7 6 6 6 6 9 4 2 0 1 3 3 7 6 6 6 4 2 0 1 3 3 7 6 6 6 6 9 4 2 0 1 3 3 7 6 6 6 6 9 4 2 0 6 9 1 3 3 7 4 2 0 6 6 6 6 9 1 3 3 7 4 2 0 6 6 6 6 9 1 3 3 7 6 6 6 6 9 4 2 0 1 3 3 7 6 6 6 6 9 4 2 0 1 3 3 7 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6 4 2 0 6 9 1 3 3 7 6 6 6
Logo SCHEISSSEWASSER.XYZ
GUIDE NETWORK

WIREGUARD_VPN

Complete WireGuard VPN setup guide. Anonymous, fast, and lightweight. For Windows, Linux, macOS, mobile.

BEGINNER FRIENDLY CROSS-PLATFORM KILL SWITCH INCLUDED
Wireguard Setup

WHAT IS WIREGUARD?

WireGuard is a modern VPN protocol that's extremely lightweight and fast. Unlike OpenVPN, it uses kernel-level networking for performance comparable to direct connections.

~4000
Lines of Code
1000+
Faster than OpenVPN
Easy
Config Setup
Free
Open Source

IMPORTANT: READ THIS FIRST

Before setting up any VPN, understand that you're trusting your VPN provider with all your traffic. Use reputable providers like Mullvad, hide.me, or ProtonVPN.

For this guide, we recommend: Mullvad VPN (paid, cash by mail possible) or hide.me (free tier available)

STEP 1: CHOOSE A VPN PROVIDER

You need a VPN provider with WireGuard support. Here are the best options:

MULLVAD (RECOMMENDED)

  • • No email required
  • • Cash payments accepted
  • • Sweden jurisdiction
  • • €5/month, no trial needed
mullvad.net →

HIDE.ME

  • • Generous free tier
  • • Malaysia jurisdiction
  • • 10 Gbit/s servers
  • • Port forwarding included
hide.me →

SELF-HOSTED

  • • Maximum privacy
  • • You control everything
  • • Requires VPS (€5-10/month)
  • • More complex setup

STEP 2: WINDOWS SETUP

2.1 Install WireGuard

  1. A.
    Download WireGuard from wireguard.com/install
  2. B.
    Run the installer (Windows Store version recommended or MSI)
  3. C.
    If asked, create a firewall exception for WireGuard

2.2 Import VPN Configuration

After subscribing to a VPN provider, you'll get config files or credentials:

Option A: Import from File (.conf or .zip)

Click "Import Tunnel(s) from File" and select your provider's config.

Option B: Manual Configuration

  • Click "Add Tunnel" → "Add Empty Tunnel"
  • Name: "Mullvad Sweden" (or your provider)
  • Public Key: Get from your VPN dashboard
  • Endpoint: Get from your VPN dashboard (e.g., 185.xxx.xxx.xxx:51820)
  • Allowed IPs: 0.0.0.0/0 (all traffic through VPN)
  • DNS: Your provider's DNS (Mullvad: 194.242.2.2)

2.3 Activate & Test

  1. A.
    Click "Activate" on your new tunnel
  2. B.
    Verify connection: The switch should toggle to "On"
  3. C.
    Test at ipleak.net or mullvad.net/check

CRITICAL: ENABLE KILL SWITCH

A kill switch blocks all internet if your VPN disconnects. Without this, your real IP leaks instantly.

  1. WireGuard Kill Switch: Edit Tunnel → Blocking → Block all traffic when tunnel is disconnected
  2. OS Kill Switch (Windows): Windows Settings → Network & Internet → Advanced network settings → Network reset → Turn on automatically toggle
  3. Enable BOTH for maximum protection

STEP 3: LINUX SETUP (Debian/Ubuntu)

3.1 Install WireGuard

sudo apt update && sudo apt install wireguard

For Arch: sudo pacman -S wireguard-tools

3.2 Generate Keys

wg genkey | tee privatekey | wg pubkey > publickey

3.3 Create Config

[Interface]
PrivateKey = YOUR_PRIVATE_KEY_HERE
Address = 10.0.0.2/24
DNS = 10.0.0.1

[Peer]
PublicKey = PROVIDER_PUBLIC_KEY
Endpoint = PROVIDER_ENDPOINT:51820
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25

Get these values from your VPN provider dashboard.

3.4 Start Connection

sudo wg-quick up wg0

To stop: sudo wg-quick down wg0

STEP 4: MACOS SETUP

  1. 1.
    Download WireGuard from the App Store or brew install --cask wireguard
  2. 2.
    Import your config from provider or add manually
  3. 3.
    Enable "Block all traffic when tunnel is disconnected" in Settings

STEP 5: MOBILE SETUP

ANDROID

  • Download WireGuard from Play Store
  • Import config from QR code (scan from desktop)
  • Or create tunnel manually with credentials
  • Enable "Always-on VPN" for system-wide

iOS (iPhone)

  • Download WireGuard from App Store
  • Create manual tunnel or import config
  • Add to Home Screen for quick toggle
  • Note: iOS has some VPN limitations

STEP 6: DNS LEAK PROTECTION

Even with VPN active, your DNS requests can leak. Use your VPN provider's DNS servers:

MULLVAD DNS

194.242.2.2

194.242.2.2

HIDE.ME DNS

185.222.222.222

185.222.222.222

VERIFY YOUR CONNECTION

Test your VPN connection at these sites:

mullvad.net/check browserleaks.com ipleak.net

TROUBLESHOOTING

Connection Fails

  • • Check firewall/antivirus isn't blocking
  • • Try different port (51820 is default)
  • • Verify public key matches exactly
  • • Check server status at provider

Slow Speeds

  • • Try different server location
  • • Switch from UDP to TCP (in advanced settings)
  • • Check your base internet speed
  • • Disable other VPNs/proxies

PRO TIPS

  • • Split Tunneling: Only route gaming/privacy-sensitive traffic through VPN, leave rest direct
  • • Multi-hop: Chain VPN servers for extra privacy (slower)
  • • Port forwarding: Some providers offer this (useful for self-hosting)
  • • Always-on VPN: Enable on mobile for continuous protection
WireGuard Official → Mullvad VPN → hide.me →

>> FAQ / TROUBLESHOOTING

❓ Which commercial VPN is best for privacy?

Three stand out: Mullvad (anonymous signup with cash, no email needed), ProtonVPN (Swiss, audited, Secure Core), and IVPN (transparent, no telemetry). Avoid "no log" VPNs that don't publish third-party audits (NordVPN, ExpressVPN, Surfshark have had multiple scandals).

❓ Can I use one subscription on multiple devices?

Yes. All major providers allow 5-10 simultaneous connections per account. Mullvad gives 5, Proton gives 10 (paid), IVPN gives 7. Some providers count router connections as 1 device that protects all your other devices.

❓ VPN is slowing my internet — what now?

Try: (1) switch to a closer server — distance = latency; (2) use WireGuard instead of OpenVPN (3-5× faster); (3) try different ports (443 or 53 often bypass throttling); (4) try a different provider. Expect 10-30% speed loss on WireGuard, much more on OpenVPN.

❓ Does the kill switch actually work?

Most providers have it, but quality varies. Always test it: enable kill switch, then disconnect the VPN manually. Your internet should die completely. If it doesn't, switch providers. Application-level kill switches (in the VPN client) are more reliable than OS-level (firewall) ones.

❓ How do I know if I have a DNS leak?

Visit dnsleaktest.com while connected. Click "Extended test" — the servers listed should all be your VPN provider, not your ISP. If your ISP appears, the VPN is leaking DNS — enable "DNS leak protection" in settings or configure DNS manually on the adapter.

❓ Can I use a VPN for streaming (Netflix, etc.)?

Most VPNs actively work to unblock Netflix/Disney+, but streaming services also actively block VPN IPs. It's a cat-and-mouse game. Mullvad and Proton are usually most reliable for streaming. NordVPN/ExpressVPN often work but at higher cost and worse privacy.

❓ Do I need a VPN at home if I "trust" my ISP?

It's about threat model, not trust. Your ISP: logs DNS queries (often required by law), hands them to authorities on request, sells aggregated data. A VPN moves that trust to the VPN provider — pick one with verified no-log audits. For many people, Tor for sensitive browsing + VPN for everything else is a better balance than always-on VPN.

❌ NEED HELP?

VPN providers all have support teams, but community knowledge is often faster.

Privacy Guides: VPN r/VPN