WireGuard for beginners
WireGuard is a modern VPN protocol. In practice it means: your phone opens an encrypted tunnel to a small server you control.
You need three pieces
- A cheap VPS (cloud mini-server) with a public IP
- A server config file on that VPS
- A client config (or QR) on each device
WireGuard Kit helps with pieces 2 and 3. For piece 1, providers like Vultr or DigitalOcean work well.
Safe defaults
- Port
51820 - Subnet
10.66.66.0/24 - DNS
1.1.1.1 - Full tunnel enabled if you want all traffic private
Full walkthrough: Beginner guide.