Config builder

Make a WireGuard client config for a device, right here. The keypair is generated in your browser — the private key never leaves it — and the .conf is assembled from your own server's details. This tool sends nothing anywhere; it all runs locally.

1

Make a keypair

WireGuard uses a Curve25519 keypair. This runs entirely offline in your browser.

2

Your server's details

From the machine running wg-setup.sh — it prints the public key and endpoint when it finishes (or run sudo wg show).

3

Your config file

Import this into the WireGuard app on this device. Keep it private — it contains your key. 


            

              
              
              How to import →
            


            
Add this device on the server

            

              Paste this [Peer] block into your server's
              /etc/wireguard/wg0.conf and run
              sudo systemctl restart wg-quick@wg0 — or add it live with
              the wg set line below (no restart, no dropped peers).
            

            

            

              
            

            

            

              
            

          

        

      


      

        New to this? The setup guide walks the whole
        thing, and the code page has the scripts that do
        steps 2–3 for you on the server. Never share your private key or the full
        .conf with anyone — not even us.