WireGuard: when to install it, and when not to
A small, modern VPN protocol with a fixed set of cryptographic choices and a codebase small enough to review. It is the right level of abstraction when…
The short version
WireGuard: A modern VPN protocol in a few thousand lines of code, now built into the Linux kernel. Use it to reach your own home network or office securely. It is a tunnel, not a privacy service.
| Licence / price | Free · Open source |
|---|---|
| Platforms | Windows, macOS, Linux, Android, iOS |
| Category | Privacy & Security — 10 programs |
| Official download | https://www.wireguard.com/install/ ↗ |
What it is for
A small, modern VPN protocol with a fixed set of cryptographic choices and a codebase small enough to review. It is the right level of abstraction when you want to understand exactly which machines can talk to each other and you are comfortable editing a text config.
When to pick something else
You manage every peer's keys and addresses yourself, and a stable internal address means the server has to keep a mapping to the real one. If you want devices to find each other through NAT without that bookkeeping, Tailscale is the practical answer instead.
What independent reviewers found
We do not run lab tests or benchmarks. These summaries are written in our own words, with the publisher named and the original linked. Our citation policy explains what we will and will not reproduce.
Tom's Guide — 2025
What the source says. Tom's Guide's explainer contrasts WireGuard's small codebase with older protocols, notes a third-party audit in 2020, and flags the privacy implications of its stable address assignment.
What we take from it. Well-designed transport and anonymity are different properties. Ask a provider how it handles address records instead of assuming the protocol settled it.
Is the new WireGuard protocol secure? ↗ (Tom's Guide · 2025 · Explainer with independent reporting)
WireGuard project — Ongoing
What the source says. The project publishes the protocol description, installation guidance and a whitepaper as primary documentation.
What we take from it. We link here for how it works and keep third-party writing for opinions about where it fits. That split keeps a how from turning into a claim.
WireGuard project documentation ↗ (WireGuard project · Ongoing · Publisher documentation)
How it compares in Privacy & Security
These are the alternatives we would consider for the same job. The notes are the same ones used on the main list, so there is no separate ranking hiding on this page.
| Program | Licence / price | Platforms | Why it is on the list |
|---|---|---|---|
| Tailscale Publisher's site ↗ | Free + paid tiers | Windows, macOS, Linux, Android, iOS | Builds a private network between your own devices in about two minutes, with no ports to forward and no firewall rules to write. The free tier covers personal use. Use it to reach your home server from anywhere as if you were sitting next to it. |
| Proton VPN Publisher's site ↗ | Free + paid tiers | Windows, macOS, Linux, Android, iOS | The only reputable VPN with a genuinely usable free tier (unlimited data, no ads, no logs). Pay for it only if you need speed, more countries or streaming. A VPN hides your traffic from the local network, not from the sites you log into. |
| Mullvad VPN Publisher's site ↗ | Paid · €5/month flat | Windows, macOS, Linux, Android, iOS | One flat price, no account email required, accepts cash, and has been raided by police without anything being found. The privacy purist's choice. No streaming unblocking, no affiliate programme, no marketing. |
Practical notes
- Write down which public key belongs to which device before you have more than three peers.
- Decide what happens when a laptop is lost: removing its key is the whole revocation mechanism.
- Read the project's own documentation for protocol details; third-party explainers are for opinions about fit.
Questions people ask
Is WireGuard a VPN service?
No. It is a protocol. A provider or a tool such as Tailscale builds a service or a mesh on top of it.
Where it appears in our guides
See the full Privacy & Security explainer for the other 9 programs in this category.
How to read this page. How to read this page. Platform, licence and publisher details come from our directory data. Where an independent review, audit or survey is mentioned, it is summarised in our own words with the source named and linked; our /sources page sets out that policy. The recommendation, the trade-offs and every 'skip it if' line are our editorial judgement. We do not run benchmarks, publish measured performance figures or host installers, and every download link goes to the publisher's own site. If a detail is out of date, our About page explains how to tell us.