About WireGuard
WireGuard is a free and open source VPN that aims to be fast, simple and secure. It was first released for the Linux kernel and now runs on many platforms.
What it does
Each peer has a key pair, and you connect by exchanging public keys, much like exchanging SSH keys. WireGuard uses established cryptographic building blocks such as Curve25519, ChaCha20 and Poly1305. The design keeps the code small, which the project says makes it easier for reviewers to audit.
Key features
- Simple setup by exchanging public keys
- Uses modern cryptography such as ChaCha20 and Curve25519
- Roams between IP addresses without reconnecting
- Small codebase that is easy to audit
- Works on Linux, Windows, macOS, BSD, iOS and Android
Who it's for
WireGuard suits system administrators, developers and privacy-minded users who want a VPN they can configure by hand. People who want a ready-made consumer app may prefer a packaged VPN service built on the protocol.
Pricing and good to know
WireGuard is free and open source. The project describes itself as still under heavy development, so check the release notes before relying on a new feature. The site has a donate link, a quick start guide and a whitepaper that explains the design.
Highlights
- Simple setup by exchanging public keys
- Uses modern cryptography such as ChaCha20 and Curve25519
- Roams between IP addresses without reconnecting
- Small codebase that is easy to audit
- Works on Linux, Windows, macOS, BSD, iOS and Android
