- Install an app. WireGuard for normal networks, or Happ / AmneziaVPN if your country filters VPNs.
- Open your cabinet and copy the subscription link, or keep the QR on screen.
- Add the tunnel. In WireGuard tap + → Create from QR code and scan. In Happ tap + → Add from clipboard.
- Allow the VPN profile when iOS asks - this is the system permission every VPN needs.
- Toggle it on and reload the leak check: the IP should now be the server's.
On iOS, turn on On-Demand in the tunnel settings so the connection comes back by itself after a reboot or a network switch.
- Install WireGuard, or Happ / AmneziaVPN for filtered networks.
- Copy the subscription link from your cabinet.
- Import it: WireGuard → + → Scan from QR code; Happ → + → From clipboard.
- Accept the VPN request from Android.
- Connect, then confirm on the leak check.
Enable Always-on VPN and Block connections without VPN in Android network settings - that's a kill switch at the system level.
- Install the WireGuard client for Windows (or AmneziaVPN on filtered networks).
- Download the .conf from your cabinet.
- Add the tunnel: Add Tunnel → Import from file, then pick the file.
- Activate and check the status turns green.
- Verify on the leak check.
WireGuard for Windows routes everything through the tunnel when AllowedIPs is 0.0.0.0/0, ::/0 - our configs already are, which also closes IPv6 leaks.
- Install WireGuard from the App Store, or AmneziaVPN.
- Download the .conf from your cabinet, or copy the subscription link.
- Import: Import tunnel(s) from file, or add from the clipboard.
- Allow the configuration in System Settings when prompted.
- Connect and confirm on the leak check.
Tick On-Demand so macOS reconnects automatically on wake and on new Wi-Fi networks.
- Check the firmware. WireGuard is built into OpenWrt, OPNsense, GL.iNet and recent AsusWRT.
- Open the VPN / WireGuard section and create a client tunnel.
- Paste the config from your .conf file - interface keys, then the peer block.
- Set DNS to the address in the config so lookups stay inside the tunnel.
- Apply, then check any device on that network with the leak check.
A router tunnel covers everything on the network - TVs, consoles, anything without a VPN app. It counts as one device against your plan.
Which app should I use?
WireGuard
The official client. Fastest and simplest - use it wherever VPNs aren't filtered.
AmneziaVPN / Happ
Speak AmneziaWG, which disguises the traffic. Use these where plain VPN protocols get blocked.
Streisand / v2rayTun
Multi-protocol clients. Handy if you juggle several providers on one device.
No key yet?
Generate one now - no email, no signup form.
Get my VPN →