Downloads

Get wg0 on your device

Native apps for macOS, Windows, and Android. Shell connectors for Linux and macOS. Docker standard and Docker-compat for always-on hosts.

🖥

macOS

Native SwiftUI app. Login, see your profiles and devices, enroll, connect/disconnect the tunnel, and take over from a legacy shell connector. Requires macOS 14+.

Download .dmg Unsigned — right-click → Open on first launch to bypass Gatekeeper.
Or install the shell connector instead.

📱

Android

Managed Android app. Scan the enrollment QR from the dashboard, connect the tunnel directly in-app, see peer status, use VPN mode, and report optional device telemetry. Requires Android 10+.

Download .apk Sideload required. Enable "Install unknown apps" in settings.
Or provision a manual peer with the stock WireGuard app.

🐧

Linux

Shell connector script. One-line install via curl. Handles enrollment, systemd service, heartbeat loop, and drift recovery. Works on Debian, Ubuntu, Fedora, Arch, Alpine.

Download connector.sh Or: curl -sSf https://wg0.io/connector.sh | sudo bash -s -- enroll <TOKEN> https://connect.wg0.io

🍎

macOS (shell)

Shell connector for macOS. Same capabilities as the Linux connector but with launchd instead of systemd. Works on Apple Silicon and Intel. Requires Homebrew for wireguard-tools.

Download connector-macos.sh The native app (above) can take over from a shell connector.

🪟

Windows (native app)

Recommended. Self-contained Windows client bundle — unzip, run wg0.exe as Administrator, sign in or paste an enrollment token, and connect. Nothing else to install: the zip ships with a bundled userspace WireGuard runtime (wireguard-go.exe + wintun.dll), so you don't need the separate WireGuard for Windows installer. Handles multi-network attach + detach, shared networks, device-level identity, and heartbeat in a single local service.

Download Windows app bundle Extract the zip first. Multi-network support is enabled from the app — no command line needed.

⌨️

Windows (PowerShell)

Minimal PowerShell fallback for hosts where installing the native app isn't practical (CI runners, locked-down servers, quick one-offs). Single-network only today; for multi-network or shared-network, use the native app above.

Download connector-windows.ps1 Run as Administrator: .\\connector-windows.ps1 enroll <TOKEN> https://connect.wg0.io

🐳

Docker (standard)

Standard Docker build for Debian, Ubuntu, modern NAS boxes, and normal container hosts with kernel WireGuard support. Great for always-on hosts and lab machines.

Download Dockerfile Pair it with connector-docker-entrypoint.sh.
docker build -t wg0-connector:latest .

🧰

Docker-compat

Compatibility Docker build for CentOS/RHEL-style hosts, older kernels, or environments where kernel WireGuard support is missing or unreliable. Uses the compat runtime path we already battle-tested.

Download compat Dockerfile Pair it with connector-docker-compat-entrypoint.sh.
Use this when the standard Docker build cannot rely on the host kernel module.

📷

iOS / Android (QR)

No app to install. Generate a QR code from the dashboard, scan it with the stock WireGuard app on your phone, and you're connected in 30 seconds.

Open dashboard Works with any device that has the WireGuard app.

First time? Start by creating a free account at login.wg0.io/register, create a network, then click + Add Device to get the enrollment token you'll need for any of the connectors above. The macOS app, Android app, and Windows app bundle all guide you through enrollment inside the app instead of making you build the tunnel by hand.

Start free in under a minute

3 networks, 10 devices, no credit card. Upgrade when you need more.

Start free now See pricing