Create a key pair and a client config in a minute. Paste your server's public key and endpoint, pick an AllowedIPs mode, and get wg0.conf, a QR code for the app, and a [Peer] snippet for the server. Keys are generated in the browser and never sent anywhere.
Press Generate, paste the server's public key and endpoint, enter the client address the server assigned (for example 10.0.0.2/32). Download wg0.conf or scan the QR code with the WireGuard app. Add the [Peer] snippet on the server. What every line means is in how to set up WireGuard.
Keys are created by the TweetNaCl library inside your browser and are not sent to any server. The client's private key must stay with you; the server only needs the public one.
Check whether the network blocks UDP with the UDP block test. If it does, you need a TCP protocol such as VLESS.
404 VPN provides ready WireGuard and VLESS configurations for every device and router, with DNS inside the tunnel and a kill switch.
How to connect 404 VPN →