Hosted WireGuard configuration manager

Every server, every peer, one dashboard.

Stop juggling wg0.conf files by hand. Add a server, add peers, and get the server config, each client .conf and its QR code. IP addresses are allocated for you, keys are generated server-side with X25519 and stored encrypted. Rotate a peer in one click.

Start free: 1 server, 3 peers Pro is 9 EUR/month

# laptop.conf, downloaded from the dashboard

[Interface]

PrivateKey = (stored encrypted, decrypted only when you download)

Address = 10.8.0.2/24

DNS = 1.1.1.1

[Peer]

PublicKey = server public key

PresharedKey = per-peer PSK

Endpoint = vpn.example.com:51820

AllowedIPs = 0.0.0.0/0, ::/0

PersistentKeepalive = 25

No more IP collisions

Each server owns a subnet. New peers get the next free address automatically, and the server config is regenerated with every peer listed.

QR code for phones

Scan from the WireGuard app on iOS or Android. No file transfer, no typing keys on a phone keyboard.

Rotate, revoke, re-issue

Lost a laptop? Delete the peer, download the server config again, reload the interface. Done in under a minute.

How it works

Create a server: a name, its public hostname or IP, the UDP port (51820 by default) and a tunnel subnet.
Add peers: laptop, phone, office router. Choose full tunnel or split tunnel per peer.
Download wg0.conf for the server and one .conf (or QR code) per peer.
On the server: wg-quick up wg0. On each device: import the file or scan the code.

Need a server first? A small VPS with a public IPv4 is enough. The free self-hosted VPN cost calculator on VPNSmith compares the usual options.

What we store, and what we do not

Private keys and preshared keys are encrypted at rest with AES-256-GCM and only decrypted to render your config files. We never see your tunnel traffic: this service generates text files, it is not a VPN provider and nothing goes through our servers. You can delete a server or your account at any time, which erases all its keys.