FREE · NETWORK & IT INFRASTRUCTURE
WireGuard Config Generator.
Generate WireGuard server and client configurations with keys created in your browser, IPv4/IPv6 addressing, full or split tunnel and QR codes.
Leave empty to keep the client’s own DNS.
25 s keeps NAT mappings open; 0 disables it.
Preparing…
How to use WireGuard Config Generator
Enter the endpoint, tunnel networks, DNS and routing, add clients, then copy, download or scan each configuration. Clear a key to generate a new one.
How it works
Private keys are random 32-byte values clamped as RFC 7748 requires; public keys are computed with X25519. Each client gets the next address in the tunnel network, listed as AllowedIPs on the server.
Example
A server at vpn.example.com:51820 with laptop and phone clients gets wg0.conf, two client files with pre-shared keys and QR codes for the mobile app.
Questions about WireGuard Config Generator
Is WireGuard Config Generator free, and do I need an account?
Yes. This tool is free to use in your browser without an account. Processing takes place on your device.
What are the limits and what should I check?
Keys use the browser’s secure random generator and X25519; they are never sent or stored by PasteZap, so save the files yourself. Server NAT rules use iptables. Everything is calculated in your browser; nothing is sent or probed on the network. Review the result before using it in your work.
Is my input sent to a server?
Your input is processed in your browser and is not uploaded by this tool. Files and pasted text are cleared when the page is refreshed. Normal website requests are still required to load the page and its libraries. Read the privacy explanation.