In this article, you will learn how to set up a manual WireGuard® connection on your Android device.You will need an Android device, the WireGuard® app, credentials (a key pair), a server configuration file (a location to which you would like to connect), and an active Surfshark subscription. You can find the available plans on Surfshark's pricing page.
Here are the steps we will go through:
- Get your key pair
- I have a key pair
- I don't have a key pair
- Choose a server
- Download WireGuard® and connect to the VPN
- Ensure the connection is successful
Get your key pair
There are two ways we can go from here. You might have generated a key pair, and you'll be able to use it. Or, we will have to generate one.
If you have a key pair already, continue the tutorial as usual. If you do not, you should move on to the I don’t have a key pair section.
NOTE: You must generate the key pair before doing anything else. Otherwise, the connection won't be successful.
I have a key pair
- Go to Surfshark's login page and log in. Then, click Products > VPN.
- In theVPNsection, tap Manual setup, select Desktop or mobile, andWireGuard.
- In the next window, tap onI have a key pair.
- Enter a name for your key pair and tap Next.
- Enter your public key and hitSave.
I don't have a key pair
- Go to Surfshark's login page and log in. Then, click Products > VPN.
- In theVPNsection, tap Manual setup, select Desktop or mobile, andWireGuard.
- Then, tap on I don't have a key pair, enter a name of your choice, and tap Next. Proceed to the next screen by pressingGenerate a new key pair.
NOTE: Copy and store the generated key pairs on your device. You won't be able to check them here again.
Choose a server
Once you have your key pair, you can proceed by pressing on theLocationstab. Once there, tap thedownload icon of the server to download the configuration file.The configuration file should end up in the Downloadsfolder of your Android device by default.
Download WireGuard® and connect to the VPN
- Open up theGoogle Play Store and search forWireGuard®.Proceed to download and install the application.
- Once the app is installed, open it and press + at the bottom right. Proceed by tappingImport from file or archive.
- Select the configuration file you downloaded earlier. Once you locate it, tap on it to import it.
- Toggle the switch to activate the connection.
Ensure the connection is successful
We always recommend checking if Surfshark VPN is working after setting it up for the first time. You can easily do it by performing Surfshark IP leak test and a DNS leak test. For your convenience, both are available on our website.
You may also be interested in:
- How to make sure if Surfshark VPN is working
- How to connect from countries with internet restrictions
- How to set up Surfshark VPN on Android
Was this article helpful?
Thank you for your feedback!
FAQs
WireGuard Setup Instructions
Install the WireGuard app for Android. Sign in to your account on our website and go to Settings -> WireGuard Configs. Select the VPN server you want to connect to. In the field below, you will get the Wireguard configuration and the QR code for the selected server.
How to manually configure WireGuard on Android? ›
Download WireGuard® and connect to the VPN
- Open up the Google Play Store and search for WireGuard®. Proceed to download and install the application.
- Once the app is installed, open it and press + at the bottom right. ...
- Select the configuration file you downloaded earlier. ...
- Toggle the switch to activate the connection.
Connect to the VPN
- In the WireGuard application, click on Import tunnel(s) from file.
- Now select the Surfshark configuration file you downloaded earlier, and hit Open.
- You can rename this uploaded connection to your liking. ...
- Lastly, to connect to the VPN, click Activate, and to disconnect from the VPN, click Deactivate.
WireGuard Setup Instructions
Install the WireGuard app for Android. Sign in to your account on our website and go to Settings -> WireGuard Configs. Select the VPN server you want to connect to. In the field below, you will get the Wireguard configuration and the QR code for the selected server.
How do I set up WireGuard easy? ›
- Step 1: Expose Wireguard VPN Server to the Internet. Your Public IP Address. ...
- Step 2: Setup Wireguard VPN Server. Install the wireguard software and dependencies. ...
- Step 3: Setup client connections. ...
- Step 4: Setup clients. ...
- Step 5: Test Connection.
- Open your device's Settings app.
- Tap Network & internet. VPN. If you can't find it, search for "VPN." If you still can't find it, get help from your device manufacturer.
- Tap the VPN you want.
- Enter your username and password.
- Tap Connect. If you use a VPN app, the app opens.
Open up your web browser and paste in your server's IP address and port and hit 'Enter'. This will now take you to the login page. Simply input your username and password into the corresponding fields and click on the 'Sign In' button.
How to configure WireGuard? ›
Setting up a WireGuard VPN requires the following:
- A VPS (Virtual Private Server) or a server with a public IP address.
- Access to the server's command line (typically via SSH).
- WireGuard software installed on both the server and your local machine (client).
- Basic knowledge of networking and command-line tools.
When it comes to internet and VPN connection speeds, WireGuard is the go-to choice. It was specifically designed to offer higher speed performance and be lighter than OpenVPN. To put that into perspective, WireGuard only uses 4,000 lines of code, whereas OpenVPN uses around 70,000.
What is the port number for WireGuard? ›
What ports do you use for WireGuard? UDP ports 53, 80, 443, 1194, 2049, 2050, 30587, 41893, 48574, 58237.
Technically every WireGuard tunnel is a peer to peer connection, but there are three main ways a WireGuard tunnel can be configured depending on whether or not a peer endpoint is known or defined: Site-to-Site (peer endpoint filled in on both sides) Remote Access “Server” (endpoint only filled in on remote peers)
What is the difference between IPsec and WireGuard in Android? ›
WireGuard vs IPSec/IKEv2
WireGuard is faster than IKEv2/IPsec, offers stronger encryption, and uses a far smaller codebase. For most users, WireGuard will always be a better option. IKEv2/IPsec might be your preferred option if you want to run legacy encryption methods.
What is the difference between WireGuard OpenVPN and IKEv2? ›
IKEv2 is easier to block than OpenVPN due to its reliance on fixed protocols and ports. OpenVPN can be easily configured to run on any port using either UDP or TCP thereby easily bypassing restrictive firewalls. WireGuard® uses the UDP protocol and can be configured to use any port.
How to setup WireGuard mobile? ›
Android Phone
- Download the WireGuard APP in Google Play.
- Open the WireGuard APP, tap on the "+" icon at the bottom right corner.
- Import the WireGuard configuration either by scanning the server's QR code or importing the server's configuration file, then type a tunnel name, click on "Save."
We recommend obtaining a static IP address from your ISP, or configuring a Dynamic DNS to avoid these interruptions."
How to check WireGuard connection? ›
To check if WireGuard Server is working properly
The simpliest way is to use a cell phone with WireGuard official client app installed, turn off its Wi-Fi connection, and only connect to Internet via 3G/4G/5G.
How do I get the WireGuard config file? ›
To get the config, first select the Location you want to connect to. Then choose a Port (use 443 if you're unsure). Now select New Key Pair (or use an existing key pair if you have them). And finally, press Download Config to get the WireGuard configuration file.
How do I generate keys in WireGuard Android? ›
Generate a configuration file
- In a browser window on your Android device, open our WireGuard configuration generator.
- If you're not already logged in to our website, you will be prompted to do so.
- Tap Generate key. ...
- Select your desired exit location.
- Tap the Download button, and save it to your device.
How to setup VPN on Android using IKEv2?
- Open PlayStore on your Android device and install “strongSwan” app. You can use this link to directly download.
- After installation, open the app and click on “Add VPN Profile” to configure IKEv2. ...
- Fill in the following details: ...
- Click on the new profile created to connect.
Now it's time to create the WireGuard tunnel.
- Navigate to VPN > WireGuard > Tunnels.
- Click Add Tunnel.
- Fill in the options using the information determined earlier: Enable: Checked. Description: Remote Access. Listen Port: 51820. Interface Keys: Click Generate to create a new set of keys. Interface Addresses: ...
- Click Save.
