How to use the WireGuard Config Generator
- Enter the server’s public address (IP or domain), the UDP port and the VPN subnet — the defaults work for most setups.
- Choose whether clients send all traffic through the VPN (privacy on public Wi-Fi) or only traffic to your private network (split tunnel).
- List your devices with + Add device. Each one gets its own keys, address, config file and QR code.
- Copy
wg0.confto the server and start it; import the client configs in the WireGuard app — on phones, just scan the QR code.
How the configs fit together
Every WireGuard peer has a key pair. The server’s wg0.conf holds its own private key and one [Peer] block per device with that device’s public key and VPN address. Each client config holds the client’s private key, the server’s public key and Endpoint, and AllowedIPs — the networks to send through the tunnel: 0.0.0.0/0, ::/0 for everything, or just the VPN subnet for a split tunnel.
| Setting | What it does |
|---|---|
PostUp / PostDown | NAT (masquerade) rules so clients can reach the internet through the server |
PersistentKeepalive = 25 | Keeps the connection open through home routers and mobile networks |
PresharedKey | An extra symmetric key per peer, which also protects against future quantum attacks on the key exchange |
DNS | Resolver the client uses while connected, so DNS doesn’t leak outside the tunnel |
Are the keys safe?
Keys are generated on your device with the X25519 algorithm (checked against the RFC 7748 test vectors) and a cryptographic random number generator. Nothing is sent to our server. Still treat the private keys like passwords: don’t paste configs in chats and delete downloaded files you no longer need.
Also searched as: wireguard configuration generator, wireguard key generator, wg0.conf generator, wireguard qr code, wireguard client config, wireguard server setup, wireguard vpn setup.
Tools that pair well with the WireGuard Config Generator
- Subnet Calculator — Enter an IP with a prefix (10.0.0.0/22) or a subnet mask (192.168.1.10 255.255.255.0) to get the network, broadcast, usable hosts and binary breakdown — and split it into subnets.
- SSH Key Generator — Create an SSH key pair for GitHub, GitLab, servers or CI deploy keys — Ed25519 by default, in standard OpenSSH format, without installing anything.
- systemd Service Generator — Run your app as a proper Linux service that starts on boot and restarts when it crashes.
- What Is My IP — Your public IP address and everything your browser reveals to the websites you visit — user agent, screen, language, timezone and request headers.