One config. Every device at home.
Sign in with your 16-digit account number, pick a WireGuard server, and get a plain .conf your router can import. The endpoint is already set to the server’s IP.
- The router uses one of your 5 device slots and covers everything connected to it.
- Your session lives in this tab only. Close or refresh it and you’re signed out.
- 1Sign inAccount verified
- 2ServerPick a WireGuard server
- 3DeviceRegister the router
- 4ConfigImport on the router
Choose a WireGuard server
Only plain WireGuard servers are listed. Obfuscated (DPI) servers need extra parameters most routers can’t set.
Create a device for your router
We register a new device on your account, then download its config for the server you picked.
- Server
- -
- Host
- -
- Port
- -
- Device ID
- created when you start
- Register the routerAdds this router to your account
- Wait for the server to add your keyNew devices can take a few seconds to sync
- Download the configGets the config for the server you picked
- Set the endpoint to the server IPSo the router needs no DNS to connect
Your router config is ready
Plain WireGuard, endpoint set to the server IP.
Scan with the WireGuard app on a phone. Anyone who sees this code can use the config.
- Install luci-proto-wireguard under System › Software and reboot if asked.
- Go to Network › Interfaces › Add new interface, choose protocol WireGuard VPN.
- Click Load configuration… and paste the config, or drop the
.conffile. - On the peer, keep Route Allowed IPs on. Put the interface in the wan firewall zone, then Save & Apply.
- Open the admin panel and go to VPN › VPN Client (older firmware: WireGuard Client).
- Add a WireGuard provider or configuration, then upload the .conf or paste its contents.
- Switch the profile on. The status turns green once the handshake completes.
- WireGuard client needs Asuswrt 388.x or newer (or Asuswrt-Merlin).
- Go to VPN › VPN Fusion (or VPN Client) and add a profile with type WireGuard.
- Use Import config file and pick the downloaded
.conf, then Apply and activate it.
For pfSense, OPNsense, MikroTik and others: create a WireGuard interface with these values, then route your LAN through it.
Why an IP endpoint? Many routers bring the tunnel up before DNS works, and some can’t resolve hostnames for WireGuard at all. An IP removes that dependency.