We earn commissions when you shop through the links below.
Make your own private VPN — without the confusing setup
Independent tool — not an official WireGuard product.
This free tool creates the WireGuard files for you (server + phone/laptop). Everything runs in your browser — we never see your private keys. Then you put the server file on a small cloud computer (VPS) and connect from your devices.
Simple path (3 steps)
- Get a small VPS — a cheap cloud server (~$5/month). Use the buttons below if you need one.
- Fill the form — put your VPS public IP, leave the other defaults if you are new, then click Generate.
- Install — paste the server file on the VPS; scan the QR (or import the client file) on your phone.
New to this? Read the beginner guide first (5 minutes).
1) Generate your files
You only need the VPS public IP for now. The other fields have safe defaults for beginners.
2) Need a VPS? (cloud mini‑server)
Need a cheap VPS with a static public IP for this WireGuard server? A 1 GB plan is enough. Referral links help keep this tool free.
After you create the VPS, copy its public IP into the field above, then Generate.
3) Your files
Server file → goes on the VPS only.
Client files / QR → go on your phone or laptop (WireGuard app).
Never post private keys publicly. If you did, click Generate again.
Next step: the server file needs a VPS
Your device files point to your server IP. That address must be a machine with a public IP that stays online — home internet usually cannot do this because of CGNAT and changing IPs.
A 1 GB plan (~$5/month) handles a household. New accounts often get free starting credit.
Already have a server? Skip this and continue below.
Install on the VPS (Linux)
On Ubuntu/Debian, these commands are a typical next step. Replace the server file content with yours. Your network card name might be eth0 or ens3 — check with ip a.
- Create the VPS and note its public IP.
- Install WireGuard, then put the server config in
/etc/wireguard/wg0.conf. - Start it:
systemctl enable --now wg-quick@wg0 - Allow UDP port 51820 in the firewall / security group.
- On your phone: install the WireGuard app → scan the QR for that device.
What is WireGuard (in plain words)?
- A private tunnel between your devices and your server — like a secure pipe.
- You control it — not a big VPN brand; you run the server file on your VPS.
- This site only helps with the paperwork — the config files — privately in your browser.
Guides (SEO & learning)
- WireGuard config generator
- WireGuard QR generator for phones
- WireGuard for beginners
- Self-hosted VPN with WireGuard
- Best cheap VPS for WireGuard
- WireGuard on Vultr
- WireGuard on DigitalOcean
- WireGuard behind CGNAT (VPS relay)
- WireGuard Docker Compose guide
- WireGuard site-to-site setup
- Split tunnel vs full tunnel
- Full beginner guide
FAQ
- Is it free? Yes — the generator is free.
- Are my keys uploaded? No. Generation stays in your browser.
- Do I need a VPS? Yes, for a personal always-on VPN endpoint.
- Can beginners use this? Yes — start with defaults and the beginner guide.