Global Mode
Keep as many wg-quick client configs as you need in the signed profile and choose the right tunnel on your device.
Your WireGuard control center
One profile.
Every connection.
Nothing is stored on the server. Your profile, WireGuard configs, keys, and icons stay on your device or inside your private signed link. Bring any provider and manage routing without accounts or server-side profiles.
No server-side dataSigned private linksNo provider lock-in
Device access
Edit with device code
Paste the 15-minute code returned to your app to open its corresponding profile. The code is validated in memory and is not saved or consumed.
New private link
Create a stateless profile
Create an empty signed profile, then add unlimited WireGuard configs and App Mode services from its private management link.
The server only signs and verifies tokens. It keeps no profile, VPN config, key, icon, pairing record, or revision history. Bookmark the resulting private link.
Built for flexible routing
Control without lock-in.
Simple tools for full-device tunnels and focused service rules, carried entirely by your signed profile.
App Mode
Define services with exact domains, IP addresses, CIDR ranges, preset icons, or browser-resized custom icons.
Nothing stored server-side
Every request is decoded and verified independently. No database, storage directory, pairing record, or revision history exists.
Any WireGuard provider
Use full client configs from the provider or server you already trust. Signed links prevent tampering; keep them private because they are not encryption.
Your data stays with you.
Nothing is stored on the server. Everything stays on your device or travels inside your private signed link. Anyone with a management or feed link can read its embedded contents, so share only through a trusted channel.