WireGuard ® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache.

Users of kernels < 5.6 may also choose wireguard-lts or wireguard-dkms + linux-headers, depending on which kernel is used. OpenSUSE/SLE [tools – v1.0.20250521]

Calling wg with no arguments defaults to calling wg show on all WireGuard interfaces. Consult the man page of wg(8) for more information. Much of the routine bring-up and tear-down dance of wg(8) and …

If an additional layer of symmetric-key crypto is required (for, say, post-quantum resistance), WireGuard also supports an optional pre-shared key that is mixed into the public key cryptography.

WireGuard Installer This utility simply downloads, verifies, and executes one of the below MSIs: wireguard-installer.exe WireGuard MSIs wireguard-amd64-0.5.3.msi wireguard-arm64-0.5.3.msi …

WireGuard, in contrast, starts from the basis of flawed layering violations and then attempts to rectify the issues arising from this conflation using practical engineering solutions and cryptographic techniques …

WireGuard is divided into several sub-projects and repositories. The following is a list of official and supported WireGuard projects, along with their status and maintainer.

While WireGuard has initially been developed for the Linux kernel, for maximum performance, it may run in userspace using a separate implementation. Currently wireguard-go is quite functional, and …

The best bet for post-quantum security is to run a truly post-quantum handshake on top of WireGuard, and then insert that key into WireGuard's pre-shared key slot.

WireGuard requires Linux ≥3.10, with the following configuration options, which are likely already configured in your kernel, especially if you're installing via distribution packages.