A WireGuard and AmneziaWG client for desktop.
- macOS (Planned)
- Windows
- Linux
- Support for WireGuard and AmneziaWG tunnel configurations
- Independent lockdown mode (kill switch)
- Lockdown and previous tunnel restoration on boot
- Tunnel runs as a system service (daemon) independent of the application GUI
- Encrypted storage of tunnel configs with system keychain integration
- Tunnel import, export, editing, live statistics, and sorting
Note: Only Windows 11 and 10 patch
10.0.19041.0and greater are supported.
- Download the
.msixfile from latest release. - Launch the installer by double-clicking on the download.
- Proceed through the installation prompts (will require relaunching the installer as administrator).
Note: Only
systemd-based Linux systems are currently supported. Also, the firewall must usenftablesoriptableswith the nft backend (iptables-nft).
This is the easiest method and gives you automatic updates for the app and daemon through your normal system package manager.
- Download the
.debfile from the latest release. - From the directory where you downloaded the file:
Install
sudo apt install ./wgtunnel*.debFor Arch, the app is available on the AUR.
You can install it using an AUR helper such as yay:
yay -S wgtunnel-binFor users on immutable distros, NixOS, or who prefer zero repository footprint.
- Download the
tar.gzfile from the latest release. - From the directory where you downloaded the file:
Note: In future versions, these scripts will be bundled with the tarball.
Install
# Download and extract the tarball, download install script, and execute
tar -xzf wgtunnel-*.tar.gz && \
cd wgtunnel-*/ && \
curl -LO https://raw.githubusercontent.com/wgtunnel/desktop/master/scripts/linux/install.sh && \
chmod +x install.sh && \
./install.shUninstall (Optional)
curl -LO https://raw.githubusercontent.com/wgtunnel/desktop/master/scripts/linux/uninstall.sh && \
chmod +x uninstall.sh && \
./uninstall.shOn Windows, switching the active network interface (like switching Ethernet → Wi-Fi or Wi-Fi → Ethernet) while a tunnel is active may cause the connection to drop.
Workaround: Restart the tunnel after changing network interfaces.