WireGuard config generator
Generates real Curve25519 keypairs and complete peer sets — a single client, a site-to-site pair, a hub with spokes, a full mesh, or a multi-hop chain.
One device connecting to an existing server
0.0.0.0/0 routes all traffic through the tunnel
Seconds; keeps NAT mappings alive
Almost there
Enter your server endpoint and its public key (run `wg show wg0 public-key` on the server).
Every PrivateKey below is a credential
Give each peer only its own config file. Anyone holding a private key can join your network as that peer.
Generated locally, stored nowhere
Keys and passwords come from your browser's crypto RNG. Nothing you type or generate is sent to a server, written to storage, or recoverable by anyone once you close this tab.