Tick On-Demand so macOS reconnects automatically on wake and on new Wi-Fi networks.
Check the firmware. WireGuard is built into OpenWrt, OPNsense, GL.iNet and recent AsusWRT.
Open the VPN / WireGuard section and create a client tunnel.
Paste the config from your .conf file - interface keys, then the peer block.
Set DNS to the address in the config so lookups stay inside the tunnel.
Apply, then check any device on that network with the leak check.
A router tunnel covers everything on the network - TVs, consoles, anything without a VPN app. It counts as one device against your plan.
Which app should I use?
WireGuard
The official client. Fastest and simplest - use it wherever VPNs aren't filtered.
AmneziaVPN / Happ
Speak AmneziaWG, which disguises the traffic. Use these where plain VPN protocols get blocked.
Streisand / v2rayTun
Multi-protocol clients. Handy if you juggle several providers on one device.
Getting the AmneziaWG profile
Your key carries two profiles and one price. The subscription link is the default; the AmneziaWG config is the fallback for networks that filter it. Open your cabinet, go to Config, switch to AmneziaWG and download the file - then import it into the AmneziaWG or AmneziaVPN app, or scan the QR code beside it.
The config is issued once. Its private key is generated on the node and we keep no copy, so it cannot be shown a second time - save the file. If it is lost, issue a new one from the same screen; the old one stops working immediately.