This Windows guide explains how to connect to Mullvad’s WireGuard® servers.
Choose one of the two following options. Do not use them simultaneously.
Option 1: use the Mullvad app
If you’re using the Mullvad VPN app, follow our guide on how to turn on WireGuard in the app.
Option 2: use the WireGuard app
Download the WireGuard app
Download the official WireGuard app for Windows (available in 32- and 64-bit versions) from the WireGuard website and run the installation.
Generate and import configuration file
- In a browser, navigate to our WireGuard configuration generator.
Log in by entering your Mullvad account number.
Under Platform, select Windows.
Click on Generate key. (Generate a separate key pair for each device that you use.)
Select a county / city / server.
(Optional) Select the DNS content blockers that you want to use.
Click Download file to save the file. You may need to wait a few seconds for the file to begin downloading.
Open the WireGuard app.
Click Add Tunnel, select the downloaded file, then click Open.
Connect and disconnect
- Open the WireGuard app.
- Select a Server in the list to the left
- Press "Activate" to connect, and "Deactivate" to disconnect
- You're all set! You can visit our Connection check to check your connection.
Using multiple devices?
If you're running WireGuard on multiple devices, generate a separate key pair for each device. You will otherwise likely run into connectivity issues.
Is it working?
While on your device, visit our Connection check to get a quick overview of your Mullvad-WireGuard connection status. In addition, it's a good time to check if your browser is leaking information and therefore jeopardizing your privacy.
Local network sharing
To unblock the local network in the WireGuard app for Windows you can click on the Edit button and turn off Block untunneled traffic (kill-switch). However it is not recommended to keep it off permanently as it can open up for possible IP or DNS leaks. Test your connection with our Connection check.
External resources
"WireGuard" is a registered trademark of Jason A. Donenfeld.
FAQs
Download the WireGuard app
Download the official WireGuard app for Windows (available in 32- and 64-bit versions) from the WireGuard website and run the installation.
Why not to use WireGuard? ›
Unreliable Monotonic Counter. WireGuard uses the system time as a reliable monotonic counter. If this jumps forward, a user might DoS their own keys, by making it impossible to later have a value larger, or an adversary controlling system time could store a handshake initiation for use later.
Does Windows Firewall block WireGuard? ›
If you set up WireGuard on a machine running Microsoft Windows, you should be able to access remote servers from that machine through WireGuard, without making any changes to that machine's firewall.
Is WireGuard easy to use? ›
WireGuard has been designed with ease-of-implementation and simplicity in mind. It is meant to be easily implemented in very few lines of code, and easily auditable for security vulnerabilities.
Which is better Windows VPN or WireGuard? ›
WireGuard is consistently faster than OpenVPN in our tests
On average, WireGuard was about 3.2 times faster than OpenVPN across all the locations we tested. WireGuard's performance advantage over OpenVPN is greater with nearby (low latency) servers in comparison to long-distance (high latency) server locations.
Which is more secure, WireGuard or OpenVPN? ›
The biggest notable differences between WireGuard and OpenVPN are speed and security. While WireGuard is generally faster, OpenVPN provides heavier security. The differences between these two protocols are also their defining features. We've taken a closer look at each so you can really understand how they work.
Can WireGuard be detected? ›
Can WireGuard be detected? Like all VPNs, WireGuard can potentially be detected by traffic analysis.
Can WireGuard be hacked? ›
VPN services can be hacked, but it's exceptionally challenging. WireGuard protocol combined with AES or ChaCha encryption is almost impossible to decrypt using the most common hacking technique — brute force attacks.
Does WireGuard hide your IP? ›
When you connect to our VPN server via WireGuard, your device can only see the IP address 10.2. 0.2, and the website you visit can only see the public IP address of our VPN server. Your true IP address remains secure and private, just as it would with OpenVPN.
Can WireGuard run over TCP? ›
WireGuard uses only UDP, due to the potential disadvantages of TCP-over-TCP. Tunneling TCP over a TCP-based connection is known as "TCP-over-TCP", and doing so can induce a dramatic loss in transmission performance due to the TCP meltdown problem. Its default server port is UDP 51820.
WireGuard's security hinges on the strength of its cryptographic algorithms. The protocols and algorithms employed by WireGuard, such as Curve25519, ChaCha20, Poly1305, and BLAKE2s, are widely regarded as secure and resistant to known attacks.
What port is WireGuard safe? ›
What is the best port to run WireGuard on? ›
What ports do you use for WireGuard? UDP ports 53, 80, 443, 1194, 2049, 2050, 30587, 41893, 48574, 58237.
Is WireGuard worth it? ›
Is WireGuard secure? WireGuard is considered by many to be one of the safest, most secure VPN protocol options available today. Simplified design using less code equals fewer bugs and security vulnerabilities, while WireGuard's faster state-of-the-art cryptography employs superior default security settings.
Which is better SSH or WireGuard tunnel? ›
WireGuard is cryptographically superior to SSH, attaches at a network layer without fussy interactions with a Unix shell (that then also needs to be accounted for in a security model), has higher performance, is practically bulletproof in terms of keeping connections alive, and gets you direct access to whatever ...
Does Windows 11 support WireGuard? ›
How to Configure WireGuard in Windows 11. WireGuard is rapidly becoming an industry standard among VPNs. It's new, uses strong cryptography, and promises better speed than other protocols.
Does the Windows built-in VPN work? ›
If you don't need a dedicated VPN for web browsing, gaming, and torrenting, Windows 10's free built-in VPN can do all the basics. If you have specific needs or need more features, it's best to download a paid or free third-party VPN.
What VPN works on Windows? ›
ExpressVPN is the best VPN for Windows overall with its fast speeds, effective unblocking of streaming services and unmatched transparency. Additionally, ExpressVPN boasts user-friendly apps, an extensive server network and cutting-edge security features.
How do I run a VPN on Windows? ›
Connect to a VPN quickly from your taskbar:
- On your taskbar, select the Network, Volume, Battery icon > VPN.
- From the list of VPN connection names, select the one you want, and then select Connect.
- If prompted, enter your username and password or other sign in info.
