WireGuard Windows setup [Summary]

To use WireGuard on Windows you may either install the WireGuard VPN client or a third-party VPN app (also known as VPN software) that uses the WireGuard protocol.

• Prerequisites:
  • Access to a WireGuard config file provided by the server admin or to a VPN service that implements the WireGuard protocol.
• Option 1: Download and configure the WireGuard VPN client for Windows.
  • Step 1: Install the official WireGuard app.
  • Step 2: Import the configuration info or create a new tunnel from scratch.
  • Step 3: Enable the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to the WireGuard protocol. Download the Windows app, select the WireGuard protocol (if needed), and connect.

If your goal is to set up a VPN connection on Windows, you may also take a look at our article on how to set up a VPN on Windows. `You will find out how to choose your Windows VPN provider wisely.

Why is WireGuard great for Windows

WireGuard is a new VPN protocol created by Jason A. Donenfeld that is considered an excellent replacement for OpenVPN. Even though it was initially developed for Linux, WireGuard works excellent on Windows as well as on other operating systems (macOS, iOS, Android).

WireGuard is a great choice for Windows users as:

• It is free and open-source.
• It uses state-of-the-art encryption and cryptography.
• WireGuard is remarkably fast and faster than OpenVPN.
• The WireGuard Windows client app is stable and easy to use.

WireGuard works great on all types of devices, including those with limited computing power. It uses fewer resources and, thus, offers great performance.

To sum up, the WireGuard protocol is a great choice for Windows, and you should consider it as your main tool for encrypting your data.

How to install WireGuard on Windows

You may use WireGuard on Windows either by installing the WireGuard Windows client app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Windows

Firstly you need the connection credentials of a WireGuard server. You may obtain them from a VPN provider (e.g., OVPN, Mullvad) or the VPN server administrator (you may also set up your own server).

Most of the time, you will get a configuration file that contains all the necessary info (server address, private/public keys, DNS addresses, allowed IP addresses, etc.) that looks similar to this one:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Windows 10 proceed as follows:

1. Open the WireGuard official website.
2. Download the Windows Installer.
3. Start the WireGuard Windows app.
4. You have two options:
   • Create a new tunnel (Add Tunnel from the bottom-left corner of the window app) – enter a name for the tunnel, the public key, and the other connection properties.
   • Import tunnel(s) from file – in case you have received a WireGuard conf file from your VPN provider or the VPN administrator you may import it and get all the tunnel properties at once.
5. Next, turn on the VPN connection by clicking the Activate button.
6. If the connection credentials are correct, you will see the connection succesful message on the bottom-right of the screen.
7. To disconnect, open the WireGuard app and click the Deactivate button.

Blocked untunneled traffic (kill switch)

If you edit an existing connection you will notice the Block untunneled traffic option. It is a Kill Switch mechanism that adds Windows Firewall rules to block traffic that tries to bypass the VPN connection. This option can be enabled if the configuration has exactly one Peer section and AllowedIPs is set to a catch-all address.

Install a Windows VPN app that offers access to WireGuard

If you are interested only in the benefits exposed by WireGuard (fast connections, great download/upload speed) and you don’t want to know more about the technical implementation, you may use a VPN app provided by a WireGuard VPN service.

The first step is to find such a VPN service. We recommend one of the following: NordVPN, Surfshark, Hide.me, PrivateInternetAccess, but there are many more.

Next, download the Windows app from the provider’s website and install it. Further, enable the WireGuard protocol (for most of the apps WireGuard is not yet the default protocol), and connect to the VPN. You are all set up with WireGuard on Windows!

WireGuard on Windows FAQs

Summary

WireGuard is a secure and fast VPN protocol, and it works great on Windows, as well as on Android, on iOS, on Mac, or Linux. Installing a VPN app that supports WireGuard is the fastest way to get started. However, you may use the official WireGuard VPN client app and set the connection manually.

Have you found our article on how to use WireGuard on Windows useful? If so, subscribe to our newsletter! We will let you know when we publish new WireGuard-related articles, and you will make a Transylvanian baby-bat happy.

This article helps you set up an OpenVPN split tunnel on your device and get the most of your VPN experience by selecting the data that goes through the VPN tunnel.

I briefly explain what VPN split tunneling is, why you may need it, and how to set up an OpenVPN split tunnel.

OpenVPN split tunnel [Summary]

Depending on the type of OpenVPN VPN server you want to connect to (OpenVPN Access Server or OpenVPN Community Edition server), you have the following options:

• Connect to an OpenVPN Access Server:
  • Set up the split tunnel from the OpenVPN Access Server admin interface.
• Connect to an OpenVPN Community Edition server:
  • Option 1: Modify the OpenVPN config file.
  • Option 2: Use a VPN client app with split tunneling on OpenVPN.

What is VPN split tunneling, and why you may need it with OpenVPN?

VPN split tunneling is an advanced but useful feature provided by several VPN apps/VPN software and technologies. It controls the VPN traffic; more precisely, it directs some of the traffic through the VPN’s encrypted tunnel and some traffic to the standard, unencrypted channel through the ISP to the Internet.

It is a very convenient way to use a VPN for specific activities (e.g., unblock streaming channels or download torrents securely) and let other apps access local resources with your regular IP address.

A well set up VPN split tunnel provides a perfectly balanced approach for better security and great speed while using VPN only for specific apps or websites.

OpenVPN is (probably) the most commonly used protocol by the VPN services available on the market, even though WireGuard looks like a serious challenger. Thus, it is useful to know and understand how you can set up split tunneling on OpenVPN.

Solutions for setting up an OpenVPN split tunnel

You may connect to two types of servers with the OpenVPN protocol: the OpenVPN Access Server (the commercial one) and the OpenVPN Community Edition server (the free server used by most of the VPN providers). And, of course, the approaches to implementing the split tunnel depend on the type of server.

Split tunneling with the OpenVPN Access Server

OpenVPN Access Server is the commercial version of the OpenVPN server, designed and optimized for businesses.

If you are using the OpenVPN Access Server, then you may set up a split tunnel easily from the administration dashboard:

• Log in to the Admin Web UI.
• Navigate to Configuration > VPN Settings > Routing.
• Turn Should client Internet traffic be routed through the VPN? to No. From now on, the traffic intended for your private networks will cross the VPN. Other traffic will bypass the VPN.
• Additionally, you may specify subnets in the input field: Specify the private subnets to which all clients should be given access (one per line).

For more details regarding split tunneling on the OpenVPN Access Server, take a look here.

OpenVPN manual modifying config files

When you connect to an OpenVPN Community Edition server and access the OpenVPN config files, you may modify them and implement the split tunnel as you please. This is the case when you set up your own OpenVPN server or when you are subscribed to a VPN service that allows you to download the config files and use the OpenVPN client app to connect (e.g., NordVPN or OVPN).

To instruct OpenVPN use the VPN tunnel only for specific websites, here is what you have to do:

1. First, find the IP of the site you want to access via VPN. You may use the nslookup command or load an IP locator website (e.g., XMyIP.com), enter the URL of the website and get the IP address.
2. Open and edit the OpenVPN conf file (.ovpn). Any text editor will do.
3. Add the following commands:
   route-nopull
route [IP address of the website] 255.255.255.255
4. Save changes and restart the OpenVPN connection.
5. To remove the split tunnel, delete the two rows, and restart the OpenVPN connection.

The result is that only the traffic to the selected website(s) will use the OpenVPN encrypted tunnel, and the rest of the traffic will remain unencrypted.

You may need to additionally configure VPN DNS Servers to stop DNS leaks, as described here, at step 6.

This works on operating systems like Windows, macOS, or Linux (Fedora, CentOS, Ubuntu, etc.), and even on routers (here it is how to set up a VPN on a router).

VPN apps with split tunneling on OpenVPN

Several VPN apps that use the OpenVPN protocol can also split the data traffic depending on the user’s needs. The setup is usually quite simple, and it consists of selecting the apps that you want to use the VPN tunnel (or, reversely, the apps that you don’t want to use the encrypted Internet connection) and turning the split option on.

Great VPNs that offer OpenVPN split tunneling are Hide.me, ExpressVPN, PrivateInternetAccess, NordVPN (on Windows and Android), and Surfshark (on Windows and Android).

For example, for enabling the OpenVPN split tunnel on Hide.me apps you have to:

1. Open the Hide.me app (in this case, the macOS app).
2. Make sure you use the OpenVPN protocol: Menu > VPN Protocol > OpenVPN.
3. Next, open the Split Tunnel tab from the left menu.
4. Select one of the two options:
   • Do not allow selected apps to use the VPN (inverse split tunneling)
   • Only allow selected apps to use the VPN
5. The split tunnel will be turned on once the VPN connection is initialized.

How to test the OpenVPN split tunnel

My recommendation is to test your split-tunnel setup, no matter the solution you have chosen. For example, do not assume that a split-tunneling feature exposed by a VPN app works just because the feature is available. Many factors may influence the proper functioning of the app. For example, some users have reported that the ExpressVPN app does not properly establish a VPN split tunnel on Mac.

It would be best if you did not assume that your split-tunnel works perfectly as soon as you have finalized the setup. Many aspects may not go as planned.

My recommendation is to do the followings:

1. With no VPN enabled, load, for example, xmyip.com (IP: 67.227.194.148). Notice your public IP address.
2. Set the VPN split for xmyip (either within the OpenVPN config file, or by adding your favorite browser to the split tunnel list, as explained above).
3. Enable the VPN connection.
4. Re-load xmyip. Observe that your public IP address is no longer shown and the IP of the VPN server replaced it.
5. If the test was successful, you may proceed with the website or websites you want to access through the VPN.

OpenVPN split tunnel FAQs

Summary

OpenVPN is probably the most used VPN protocol and a prevalent option for all VPN usage scenarios. VPN split tunneling, which brings significant benefits, can be easily set up with OpenVPN either by adding commands in the config files or by enabling the option from the VPN apps’ settings.

This is the end of our tutorial on how to get set up VPN split tunneling on OpenVPN. Subscribe to our newsletter to get notified when we publish new articles. Additionally, you will make a Transylvanian baby-bat happy.

Using WireGuard on Android gets easier each day. There are several options to set up the new VPN protocol on your Android devices and plenty of VPN software that fully integrate WireGuard. In a matter of minutes and with a few clicks, you may start using WireGuard.

WireGuard Android setup [Summary]

There are two options to get started with WireGuard on Android. My advice is to take a look at both of them and then decide which way to go.

• Option 1: Download and configure the WireGuard VPN app for Android.
  • Step 1: Install the official WireGuard client app.
  • Step 2: Import the configuration or create a new tunnel.
  • Step 3: Activate the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to WireGuard. Download the Android app, enable the WireGuard protocol (if needed), and connect.

As your goal is to use WireGuard on Android devices, I suggest you also read our article on using a VPN on Android. `You will find out how VPN works on Android, what are the advantages of using a VPN, and what VPN services we recommend.

The WireGuard protocol and why it is a great choice for Android

WireGuard (a registered trademark of Jason A. Donenfeld) is a new VPN protocol that is praised for its simplicity and speed. Initially developed for Linux, it is now available for all major operating systems (Linux, Windows, macOS, iOS, Android).

WireGuard stands out with several important features:

• It is open-source and, consequently, free.
• WireGuard is really fast. Our tests show that WireGuard is faster than OpenVPN.
• It uses high-level encryption.
• The project codebase is about 4,000 lines, much less than other similar VPN protocols (OpenVPN, IPSec, etc.).
• It is integrated into the Linux kernel.

WireGuard is well suited for mobile devices, generally speaking for devices with less computing power. It was designed to use fewer resources, and thus, as a consequence, it saves battery life. Additionally, WireGuard offers great roaming support, and it accommodates hassle-free switch from WiFi to mobile data.

To conclude, the WireGuard protocol is a great choice for Android, and you should consider using it as your main protocol for encrypting your data.

How to install WireGuard on Android

You may use WireGuard on Android either by installing the WireGuard VPN app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Android

Before starting the WireGuard setup, make sure you have access to the VPN server’s authentication credentials. You may set up your own WireGuard server, get access from a network administrator, or from a VPN provider.

The WireGuard server connection data can be:

• contained in a configuration file that contains all necessary info (server IP, private/public keys, various settings);
• encoded in a QR code generated based on a config file (it can be generated using the qrencode library);
• the server name or IP address, and the other connection properties.

The WireGuard config file contains all the information necessary for setting up the encrypted connection:

• PrivateKey – the private key of the user;
• Address – the internal IPs (IPv4 and/or IPv6);
• DNS – the DNS address(es) or IP(s) (IPv4 and/or IPv6);
• PublicKey – the public key of the server;
• AllowedIPs – list of addresses that get routed to the peer;
• Endpoint – the name or the IP address of the WireGuard VPN server and the communication port.

Here it is how a WireGuard config looks like:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Android proceed as follows:

1. Open Google Play Store and search for WireGuard.
2. Download and open the app.
3. Next, tap on the “+” sign.
4. Select the way you want to get started with the WireGuard setup.
5. Import from file or archive – You may import a WireGuard configuration file provided by a VPN service or administrator. You may get the config file by email or by downloading it from a server. Simply find the file on your Android device and import the WireGuard connection settings.
6. Scan from QR code – Import the configuration information stored into a QR code:
   • Open the page that contains the WireGuard QR code on your computer. You may get one from several VPN providers (e.g., OVPN), or you may generate it yourself (as mentioned above).
   • Point your device to the QR code on the computer screen.
   • Choose a name for the new WireGuard connection.
   • The WireGuard client app will read and import the config data.
7. Create from scratch – If you know the necessary connection info, you may manually create the connection. Fill in the required info for initiating the connection.
8. You are now ready to activate the WireGuard connection. Tap the toggle button next to the name of the connection. You will see a warning message. Click OK.
9. You will see the connection status on the top of the screen.
10. To disconnect, open the WireGuard app and turn off the connection or go to Settings > Connections > More connection settings > VPN and tap on the active VPN connection. You will need to confirm that you want to Disconnect.

Install an Android VPN app that offers access to WireGuard

This is the simplest approach if you are interested in getting started quickly. There is no configuration needed as VPN client apps automatically set up the VPN tunnel.

1. Find a WireGuard VPN provider and subscribe to the service. We recommend the followings VPNs for Android:
   • NordVPN
   • Surfshark
   • Hide.me
   • OVPN
2. Download the VPN provider’s app from the Google Play Store.
3. Enable the WireGuard protocol.
4. Connect to VPN with WireGuard.

WireGuard on Android FAQs

Is WireGuard better the OpenVPN on Android?

Both protocols provide excellent security and performance. Several tests show that WireGuard might be faster than OpenVPN. However, there is still not enough data to draw any conclusions regarding the better protocol for Android devices.

Is the WireGuard client app for Android free?

Yes, the WireGuard official client application is free to use. However, you need a WireGuard VPN server to connect to, which may be provided by a paid service.

Summary

WireGuard is a great VPN protocol, and it works smoothly on Android as well as on iOS and on Windows. You may either install a VPN app from a top VPN provider that implements WireGuard or proceed to set up the official WireGuard client app, a more manual approach.

This is the end of our tutorial on how to get started with WireGuard on Android. Did you like it? If so, subscribe to our newsletter! We will let you know when we publish new articles, and you will make a Transylvanian baby-bat happy.

This short tutorial helps you set up a PPTP VPN connection on your Linux machine. It is well-known that PPTP is not a secure protocol. However, there are still options to set up PPTP on Linux. But, if you can, you should switch to an alternative VPN protocol.

PPTP VPN setup on Linux [Summary]

Setting up PPTP on Linux is easy and several options are available:

• Option 1: Use the Network Manager (GUI) to set up PPTP on Linux manually.
• Option 2: Use the command line (CLI) for more control on the PPTP setup.
• Option 3: Install a VPN client app for Linux.

Additionally, you may consider a more general solution to set PPTP on your router and connect all your devices in need of using the encrypted tunnel (including your Linux machines) to the router.

What is PPTP and when to use it on Linux?

The Microsoft Point-to-Point Tunneling Protocol (PPTP) is outdated and insecure. However, it may still be useful for hiding your IP address and changing your location when no sensitive data is involved, such as unblocking streaming channels or accessing gaming servers.

PPTP became popular due to its speed and simplicity. However, due to security vulnerabilities exposed by various parties, PPTP is no longer seen as suitable for securing VPN tunnels.

PPTP can no longer be set up on iOS; on Mac, you need to use some workarounds, but you may still use PPTP on Windows, to create PPTP tunnels on Android, and, of course, on Linux. Again, make sure you use PPTP only when you are comfortable with a weakly secured VPN tunnel.

How to set up PPTP VPN on Linux

There are several options to set PPTP on Linux, from the simplest by installing a VPN (Virtual Private Network) app to the more complicated by using the command line. Here are the available options.

Use the Network Manager (GUI)

Setting up a PPTP connection using the graphical interface is similar for various Linux distributions, and it is a simple way to proceed. I am going to exemplify the setup on Ubuntu GNU/Linux (v20):

1. Open the Settings app.
2. Click on the Network connections panel from the left menu.
3. Click the “+” (Add) button next to VPN.
4. From the Add VPN window, choose Point-to-Point Tunneling Protocol (PPTP).
5. Fill in the connection Name (whatever you want), the server IP or hostname (Gateway), the username, and the password of your VPN account (optional).
6. Click on the Advanced button and check Use Point-to-Point encryption (MPPE).
7. Click OK, and then Save.
8. Switch ON the PPTP connection you have just set up.
9. Once you are connected to the VPN, you will see a lock icon on the network icon from the top-right on the screen. You may also connect/disconnect from the network menu.

Use the command line (CLI)

Most Linux distributions install the PPTP client by default. However, if not present, you may install it as follows:

• On Debian/Ubuntu, by using the apt-get command (pptp-linux is the command-line PPTP client and network-manager-pptp is the GUI management tool):

$ sudo apt-get install pptp-linux network-manager-pptp

• On Fedora/CentOS, by running the yum command (check the PPTP client docs for other distros):

# rpm -Uvh http://pptpclient.sourceforge.net/yum/stable/fc6/pptp-release-current.noarch.rpm
# yum --enablerepo=pptp-stable install pptpconfig

Next, you need to edit or create the configuration files:

• The CHAP secrets file (/etc/ppp/chap-secrets) for authenticating the user to the VPN channel.
• The VPN connection config file (/etc/ppp/peers/vpnname) to add connection-related info such as the VPN server name, encryption settings, etc.

Suppose that you want to connect to a PPTP server with the following connection data (you will need to fill in your own data):

• PPTP VPN server name: pptp-us1.vladtalks.tech
• PPTP username: anonymousbat
• PPTP password: whoiam

Proceed with the following steps:

• Edit the CHAP secrets file:

# sudo vi /etc/ppp/chap-secrets

The syntax for the authentication info using CHAP is:

DOMAIN\\username      PPTP      vpnpassword     *

Thus, you need to enter something similar to:

anonymousbat      PPTP      whoiam     *

Save and close the chap-secrets file.

• Create a file that contains the tunnel configuration data (where pptp-us1 is the name you will use to connect to the VPN):

# vi /etc/ppp/peers/pptp-us1

• Append the config file with the following commands and options:

pty "pptp pptp-us1.vladtalks.tech --nolaunchpppd"
name anonymousbat
remotename PPTP
require-mppe-128
file /etc/ppp/options.pptp
ipparam pptp-us1

Note that you need to replace the VPN server name (pptp-us1.vladtalks.tech), VPN username (anonymousbat), connection file name (pptp-us1) with your own data.

• Finally, you need to route all the traffic through the VPN interface. An entry must be added to the routing table.

Create the following file:

# vi /etc/ppp/ip-up.d/vpn-traffic

And, add the code:

#!/bin/bash
route add -net 10.0.0.0/8 dev ppp0

Save and close. Make the file vpn-traffic executable:

chmod +x /etc/ppp/ip-up.d/vpn-traffic

• Now, you are ready to connect to the encrypted tunnel:

pppd call pptp-us1

• To disable the VPN stop the pppd process:

killall pppd

You may create a separate configuration file for every VPN server you want to connect to and initiate the PPTP connection as needed.

Install a Linux VPN client app

If you are looking for a VPN client on Linux similar to the easy-to-use and friendly VPN apps available on Windows or macOS, you will be disappointed.

Major VPN providers have retired their PPTP clients for all operating systems. For example, Hide.me had a PPTP client app for Linux but discontinued it at the end of 2019.

Thus, theoretically, you may still find VPN services that offer VPN client apps for Linux with the PPTP protocol. But I strongly recommend that you don’t use them. Instead, set up a manual connection (as explained above, if you really have to) or switch to a more secure protocol (check the alternatives listed below).

PPTP VPN alternatives on Linux

PPTP is not the protocol that you want to use to secure your VPN connections. Other VPN protocols are safer and more reliable, and you should use them on Linux:

• WireGuard, the new VPN protocol, is included in the Linux kernel, and you may set it up easily.
• OpenVPN works great on Linux.
• L2TP/IPSec can be set up similarly to PPTP.

Summary

You may still set PPTP up on Linux. Even though it is seen as a legacy VPN protocol, there are still options to use PPTP from the command line or using the Network manager graphical interface.

Would you like to know more about VPN? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

This short tutorial helps you set up PPTP VPN on Android devices. It also explains why PPTP is not the best protocol to use, how to set PPTP up on your Android device, and what alternatives you need to consider.

PPTP VPN setup on Android [Summary]

Setting up PPTP on Android is easy and several options are available:

• Option 1: Manually set up a PPTP VPN connection on your Android device:
  • From the Settings app select Connections. Next, tap More connection settings.
  • Tap on VPN.
  • Tap on the three-dot button from the left of VPN. Next, tap Add VPN profile.
  • Enter a name for the connection and fill in the server name or IP address.
  • Type in the authentication username and password.
  • Tap Save account information. Select the newly created VPN profile in the VPN list.
  • To connect tap the key icon and, then, Connect.

• Option 2: Use a VPN Android app that can create a PPTP VPN tunnel.
• Option 3: Set up PPTP on your router and connect your Android devices to the router.

Are you looking for more options to connect to a VPN from Android? Start by reading how to use a VPN on Android.

What is PPTP, and why it is not safe to use it on Android

The Point-to-Point Tunneling Protocol (PPTP) is one of the most commonly used protocols for establishing VPN connections.

As it is fast and easy to set up, the PPTP VPN protocol helps applications that require fast processing, and it is effective on devices with limited processing power (including older Android phones).

However, due to security concerns, PPTP is no longer considered safe. Consequently, Apple removed PPTP from macOS and iOS. Nonetheless, PPTP can still be set up on Android devices, as well as on Windows and Linux machines.

How to set up a PPTP connection on Android

PPTP is quite easy to set up on Android phones and tablets. Here are the available options.

Manually set up a PPTP VPN connection

Android offers built-in VPN components for creating encrypted tunnels using various protocols: PPTP, L2TP/IPsec, and IKEv2.

The manual PPTP setup on Android 10 consists of the following steps:

1. Open the Settings app.
2. Select Connections. Next, tap More connection settings.
3. Tap on VPN. Alternatively, you may search for “VPN” in the Settings app.
4. Tap on the three-dot button from the left of VPN. Next, tap Add VPN profile (Add VPN network for older Android versions).
5. Fill in the name field for the VPN connection, let the type set to PPTP, fill in the VPN server name or IP address, and let the PPP encryption (MPPE) option checked.
6. (Optional) For DNS, forwarding, and proxy settings select Show advanced options.
7. Type in the authentication credentials, i.e., the username and password.
8. Tap Save account information. You will see the newly created VPN profile in the VPN list.
   
9. To connect tap the key icon and, then, tap Connect.

To turn the VPN off, swipe down the top menu and tap the VPN activated section. Next, tap the Disconnect button.

Use an Android VPN application from a VPN provider

Google Play is full of VPN software. However, only a few still expose the PPTP protocol. Such VPN client apps automatically configure PPTP VPN tunnels with one click. Additionally, they allow you to switch between protocols and VPN locations easily.

Unfortunately, we are not able to recommend any Android app using PPTP, but if you know any that you trust please let us know in the comments below the article.

Important! Stay away from free VPN apps. Even though they may offer an easy way to set up a PPTP connection, they are not trustworthy.

Set up PPTP on your router

If you connect to the Internet with a router, you have a convenient way to use the PPTP protocol. By setting up a VPN on your router, you may connect multiple Android devices to the VPN tunnel.

Many routers have options to create PPTP connections, and here are the steps to be followed:

1. Access the router admin area.
2. Look for the VPN settings page and PPTP options.
3. Set the PPTP parameters (server address, username, password) and save the settings.
4. Connect the Android device to the router and test the VPN connection.

PPTP VPN alternatives on Android

As explained above, PPTP is not a secure VPN protocol. Thus, don’t use it unless you have no choice! Other VPN protocols are safer and more reliable for Android devices:

• OpenVPN works great on Android, and it should be your first option.
• WireGuard, the new VPN protocol, can be used by installing the WireGuard client app for Android or by installing a native app from a WireGuard VPN provider.
• L2TP/IPSec and IKEv2 are also built-in so that you may proceed with the manual setup similar to the one presented above. L2TP VPN is very similar to set up with PPTP.

Summary

The simplest way to use PPTP VPN on Android is to proceed with the manual setup. Additionally, you use a VPN app that offers access to PPTP, or you may set PPTP on your router.

Android OS is still supporting the PPTP protocol, but I strongly recommend considering an alternative VPN protocol.

We regularly update our articles. Would you like to get notified when we do? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

This short tutorial shows how to set up an L2TP VPN connection on your Mac. It also explains the available L2TP authentication options, how to manually set L2TP VPN on Mac, and what alternatives you may consider.

L2TP VPN setup on macOS [Summary]

Setting up L2TP on Mac is easy and the following options are available:

• Option 1: Manually set up the L2TP connection on your Mac:
  • Open System Preferences > Network window.
  • Add a new connection by clicking on the “+” button.
  • Select the VPN as the Interface and L2TP over IPSec as the VPN Type.
  • Type in the connection or service name and click on the Create button.
  • Enter the VPN server address to the Server Address textbox and the VPN user name to the Account Name field.
  • Further, click the Authentication Settings button.
  • Select the authentication method for both the user and the machine, usually Shared Secret for machine authentication and Password for user authentication.
  • Click the Connect button.
• Option 2: Set up the L2TP connection using a third-party VPN client.
• Option 3: Use a VPN app that can create an L2TP VPN tunnel.
• Option 4: Set up L2TP on your router and connect your Mac to the router.

Are you looking for more options to connect to a VPN on macOS? Here is how to use a VPN on Mac.

What is L2TP? What is L2TP over IPSec?

L2TP (Layer 2 Tunneling Protocol) is a VPN protocol derived from PPTP (Point-to-Point Tunneling Protocol) that does not offer any encryption by itself. That is why L2TP is usually paired with IPSec, an encryption protocol, to secure the data passing the VPN tunnel.

L2TP/IPSec uses a process called double encapsulation: firstly it establishes a PPP connection, and, secondly, it uses IPSec for encryption.

IPSec with AES encryption is considered secure, despite rumors that the NSA deliberately weakened the protocol.

macOS provides native support for the L2TP/IPSec protocol (called L2TP over IPSec), and you may set it up manually from the Network settings.

L2TP over IPSec authentication options

The L2TP over IPSec implementation available in macOS supports multiple authentication mechanisms.

As the L2TP/IPSec consists of two parts, each of them has its own authentication:

• Machine Authentication (for IPSec) has two methods:
  • Shared secret (Preshared Keys) – a series of alphanumeric characters that need to match those set up on the VPN server.
  • Certificate (X.509 machine certificates), stored on both the VPN client and the server, supported on Mac OS X 10.4 and above.
• User Authentication (for L2TP), after the Machine Authentication has been successful, with the following options:
  • Password – provided by the administrator of the VPN server. It is the simplest authentication method, but the least secure.
  • RSA SecurID – RSA SecurIDs are physical devices (a.k.a, tokens) provided to VPN users, that generate random series of numbers that are used for authentication.
  • Certificate – Security certificates installed on the VPN user’s device are used to establish a secure connection to the VPN server.
  • Kerberos – It is a highly secure authentication method as it transfers the user’s password only once when the user logs into a computer on a network.
  • CryptoCard – CryptoCards are physical token generators similar to RSA SecurIDs. However, they can be used for other functions additionally to VPN authentication.

How to set up L2TP VPN on Mac

You may start to configure L2TP on Mac by manually setting up the connection, by installing a VPN client app, or using a native app from a VPN provider.

Manually set up an L2TP VPN connection

macOS allows you to create a new VPN connection with L2TP by setting up the built-in VPN module. The setup consists of the following steps:

1. Click on the Apple icon in the top left corner of your screen.
2. Open System Preferences and click on the Network icon.
3. Click on the “+” button from the left side of the window.
4. For the Interface, select VPN.
   
5. Further, choose L2TP over IPSec as the VPN Type.
6. Enter the connection name and click on the Create button.
7. Start the VPN configuration: enter the VPN server address (name or IP) to the Server Address textbox and the VPN user name to the Account Name field. Keep the checkbox Show VPN status in the menu bar checked.
8. Next, click the Authentication Settings … button.
9. Select the authentication method for both the user and the machine (explained above). You have to enter the pre-shared key for machine authentication and fill in the password field for user authentication most of the time.
10. Optionally, you may change the DNS server settings by clicking the Advanced button.
11. Finally, click the Apply button and then Connect.

To disable the VPN on Mac, open the VPN connection properties (System Preferences > Network > VPN connection name) and click on the Disconnect button.

Use a Mac VPN client

Another option at hand is to install a Mac VPN client that is able to create VPN tunnels for various VPN protocols, L2TP/IPSec included.

The following commercial Mac VPN client apps are available:

• Shimo (€49 permanent license) supports L2TP, OpenVPN, SSL, AnyConnect, SSH. L2TP can be set up easily:
  • Click the “+” button to create a new connection.
  • Choose PPTP/L2TP as the VPN account type and click the Create button.
  • Enter the VPN address (Remote Host), the username, and password. Click the Create button.
  • Double-click the connection row to open the settings.
  • Go to the Advanced tab and change the protocol to L2TP.
  • Get back to Basic and choose the authentication methods.
  • Click the Save button, and you may initiate the connection.
• VPNTracker is a fantastic VPN client for Mac, but it is quite expensive ($99/year). It allows you to set up L2TP connections on the latest macOS versions easily.

Use native VPN client apps

Most of the top VPN providers offer access to the OpenVPN and WireGuard protocols as they are considered the most secure and reliable. However, there is still VPN software that you may use to connect with L2TP from Mac:

• VPN.ac – The VPN.ac Mac app exposes various flavors of OpenVPN (128-bit, 256-bit, ECC, XOR), but it can also create L2TP/IPSec VPN tunnels.
• StrongVPN offers access to L2TP as a good balance between speed and privacy.
  
• PureVPN – to get started with this VPN service, subscribe to the 7-day trial for $0.99, install the Mac app, open the App Settings tab, and select the L2TP protocol.

Set up L2TP on your router

When you need to connect several devices to the VPN, a very convenient option is to set up the VPN on your router. Further, by connecting a Mac or a Windows laptop to the router, you start accessing the Internet encrypted and securely.

To set up L2TP on a router (if the router is able to create L2TP connections) you need to:

1. Log in to the router admin area.
2. Search for the VPN settings page and choose L2TP.
3. Set the L2TP parameters (server IP or name, username, password) and authentication settings.
4. Connect your Mac to the router and test the VPN connection.

L2TP VPN alternatives on Mac

L2TP is a good VPN protocol, but you may consider using others that are safer, faster, and more reliable:

• OpenVPN is regarded as the de facto VPN standard protocol. It is open-source, secure, and fast. You may either use Tunnelblick or Viscosity to set up OpenVPN on Mac.
• WireGuard, the new kid on the block, is lite, and it seems to be even faster than OpenVPN.

L2TP VPN on Mac FAQs

Summary

As a viable alternative to PPTP, the L2TP/IPSec protocol provides secure and reliable VPN access. However, it is slower than PPTP.

The major advantage of L2TP/IPSec is that you may still set it up on all major operating systems (Mac, Windows, iOS, Android, Linux).

All recent versions of macOS (Big Sur, Catalina, Mojave included) support L2TP. Thus, you may proceed with the manual setup seamlessly. Additionally, you may initiate an L2TP connection using a third-party VPN client app or a VPN native app. The broader approach is to set up L2TP on your router and connect to the router all devices you need to use the VPN tunnel.

Would you like to learn about VPNs? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

This short tutorial helps you set up PPTP VPN on Windows 10 devices. It also explains why PPTP is no longer considered a safe VPN protocol, how to set PPTP up on your Windows machine, and what alternatives you should consider.

PPTP VPN setup on Windows 10 [Summary]

Setting up PPTP on Windows 10 is not a difficult task and several options are available:

• Option 1: Manually set up a PPTP VPN connection on your Windows 10 device:
  1. Open the VPN Settings (type VPN in the search box and click VPN Settings).
  2. Click on the “+” button to Add a VPN connection.
  3. Select the Windows (built-in) as the VPN provider, set the connection name, and fill in the VPN server IP or address.
  4. Select the VPN protocol as PPTP.
  5. Fill in the User name and Password for the PPTP connection.
  6. Save and connect.

• Option 2: Use a VPN app that is able to manage a PPTP VPN tunnel.
• Option 3: Set up PPTP on your router and connect your Windows device to the VPN router.

Are you looking for more options to connect to a VPN from Windows OS? Start by reading how to use a VPN on Windows.

What is PPTP? Pros and cons.

PPTP (Point-to-Point Tunneling Protocol) was developed by a Microsoft initiative, and it was included in all Windows versions starting with Windows 95. Thus, it has become one of the most commonly used protocols for establishing VPN connections.

PPTP is easy to set up and very fast. For that reason, the PPTP VPN protocol is helpful on devices with limited processing power, or for applications that require fast processing, like audio/video streaming apps.

However, PPTP is not considered safe as several security vulnerabilities have been identified (related to the PPP authentication and the design of the MPPE protocol).

Consequently, Apple has removed PPTP from macOS 10.12 and above. Nevertheless, PPTP can still be used on Windows, and PPTP is still an option for Android or on Linux.

How to set up a PPTP connection on Windows 10

PPTP is still available on Windows (all versions, including Windows 7, Windows 8, and Windows 10) and it is quite easy to set up. Here are the available options.

Manually set up a PPTP VPN connection

Windows exposes built-in VPN components that allow you to easily connect to VPN servers using the following communication protocols: PPTP, L2TP/IPsec, SSTP, and IKEv2.

For Windows 10, the manual PPTP setup consists of the following steps:

1. Enter “VPN” in the search box and click on the VPN Settings.
2. Click on the “+” button to Add a VPN connection.
3. Choose the Windows (built-in) as the VPN provider.
4. Set a connection name and fill in the server name or address (you need to know before you start setting the manual connection).
5. Select PPTP as the VPN type or the VPN protocol.
6. Fill in the User name and Password for the PPTP connection.
7. Click the Save button.

To establish the PPTP connection to the VPN server:

• Option 1: from VPN Settings, click on the VPN connection name, and then on the Connect button.
  
• Option 2: from the taskbar, select the Network icon. Next, select the VPN profile you want to use and click the Connect button. When connected, the VPN profile name will display Connected.
   

To disconnect, click on the Network icon from the taskbar, find the VPN connection, and click the Disconnect button.

Use a Windows VPN application from a VPN provider

VPN providers offer access to Windows VPN clients (VPN software) that automatically configure VPN tunnels with one click. Thus, you are able to easily switch between protocols, servers, and VPN locations.

But, due to security concerns, most VPNs have partially or completely abandoned the PPTP protocol.

We were able to identify two good VPN services that may still help you get a PPTP VPN on Windows 10: PureVPN and HideIPVPN.

To get started, subscribe to the VPN service (PureVPN offers a 7-day trial for $0.99), install the Windows app, open the settings tab, and select the PPTP protocol.

Set up PPTP on your router

Do you need to connect multiple devices to the VPN using the PPTP protocol? You may set up the PPTP connection on your router and you are done.

To set up PPTP on a router you need to:

1. Log in to the router admin area.
2. Open the VPN settings page and look for PPTP (many routers still have PPTP available).
3. Set the PPTP parameters (server IP or name, username, password) and save.
4. Connect the Windows devices to the router and test the VPN connection.

PPTP VPN alternatives on Windows 10

Don’t use PPTP unless you have no choice! Other VPN protocols that are available on Windows 10 are safer and more reliable:

• L2TP/IPSec, IKEv2, SSTP are also built-in so that you may proceed with the manual setup similar to the one presented above.
• OpenVPN is a well-known protocol that passed numerous security audits.
• WireGuard, the new VPN protocol, is fast, secure, and more and more VPN providers are adopting it. Take a look at our tutorial on how to use WireGuard on Windows.

PPTP VPN on Windows 10 FAQs

Summary

Unlike macOS, Windows is still supporting the PPTP protocol, even though it is considered insecure.

The most straightforward approach to use PPTP VPN on Windows 10 is to set up a VPN connection manually. Additionally, you may set PPTP on your router or use a VPN client app that is able to create PPTP connections.

Would you like to be notified when we publish more articles on PPTP and other protocols? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

This short tutorial explains how to set up and use VPN split tunneling on Mac. It also explains why to use split tunneling on macOS, presents the available options, and lists VPN client apps that offer access to this feature.

How to set up split tunneling on macOS [Summary]

Setting up VPN split tunneling on Mac may be either very simple (if you install an app capable of turning split tunneling on and off), or a little bit complicated as it requires some command-line skills, and patience.

• Option 1: Use a VPN client app that implements split tunneling.
  • Step 1: Open the VPN app.
  • Step 2: Define split tunneling rules.
  • Step 3: Turn on the VPN connection.
• Option 2: Use the command line to define split tunneling rules.
  • Step 1: Find the IP address of the website you want to access the VPN tunnel.
  • Step 2: Run the route command.
  • Step 3: Check the setup.
• Option 3: Modify an OpenVPN configuration file and use the route command.

As your goal is to set up an advanced VPN connection on macOS (Mac OS X), I suggest that you first read our article on how to install a VPN on Mac. `You will learn what the available VPN options on macOS are.

Why use split tunneling on Mac?

Simply put, split tunneling allows you to control VPN traffic. Thus, you may let specific applications connect to the Internet using the VPN tunnel while allowing other apps to directly access the Internet.

Split tunneling is very convenient on Apple Mac (as well as on other operating systems, Windows, Android, Linux, iOS) for unblocking streaming channels or downloading torrents securely. You may obtain the perfect balance between security/privacy/anonymity and speed, and use VPN only for precise apps or websites.

If you are interested solely in unblocking geo-restricted websites, an alternative to split tunneling is to set up Smart DNS on your Mac.

How to set up VPN split tunneling on Mac

Depending on the way you installed the VPN on your Mac you have the following options.

Option 1: Use VPN software that implements split tunneling

Several (not many) VPN services implement VPN split tunneling in their apps. Thus, if you subscribe to such a service, the only thing that you have to do is to establish the rules (which apps use the VPN and which are not) and turn the VPN on.

Split tunneling on Mac with ExpressVPN, PIA, or Hide.me

We have identified several VPN providers that offer split tunneling within their macOS apps (tested on macOS Catalina, not yet on Big Sur): ExpressVPN, PrivateInternetAccess (thank you, Jorge), and Hide.me.

The user interfaces of the ExpressVPN and Hide.me apps are similar and allows you to choose between three types of behavior: (1) use the VPN tunnel for all apps, (2) exclude apps from using the VPN, and (3) choose apps that will use the VPN exclusively.

The PrivateInternetAccess app is somehow similar with the difference that you need to define a rule for every selected app.

Important: If you use Safari as your day-to-day browser, you may want to avoid ExpressVPN. There is no way to add/remove Safari to the split tunneling rules in the ExpressVPN Mac app.

To set up split tunneling using ExpressVPN, you need to:

1. Install the ExpressVPN macOS app.
2. Next, open the settings menu and click on Preferences.
3. In the General tab, check the Split tunneling option.
4. Click on the Settings button.
5. Choose the split type:
   
   • All apps use the VPN.
   • Do not allow selected apps to use the VPN – inverse split tunneling.
   • Only allow selected apps to use the VPN.
6. If you choose Do not allow selected apps to use the VPN or Only allow selected apps to use the VPN, select the apps (e.g., Chrome, Safari, a torrent client app).
7. Test the split tunnel VPN:
   • If you have selected Safari with Only allow selected apps to use the VPN, turn ON ExpressVPN, open Safari, and load an IP locator website. You should see the IP address of the VPN server.
   • If you have selected Safari with Do not allow selected apps to use the VPN, turn ON ExpressVPN, open Safari, and load an IP locator website. You should see your public IP address. If you open another browser, you should see the VPN server’s IP address you are connected to.

Important! You need to turn ON the ExpressVPN app to activate the split tunneling.

Split tunneling on Mac with Shimo

Shimo is a VPN client application for Mac that can be easily set up for split tunneling. Shimo supports various VPN protocols: OpenVPN, IPSec, PPTP (not on macOS Catalina and later), SSL, AnyConnect, SSH.

To use Shimo you need to have access to a VPN server (from a VPN provider, from a network administrator, or set up by you). After setting up the VPN connection you may proceed with splitting the tunnel:

1. Click on the Shimo icon from the menu bar.
2. Click Preferences…
3. Choose the VPN connection to configure and double click on it.
4. Go to the Advanced tab.
5. Disable Send all traffic over VPN.
6. Add route(s) to Network Traffic Control by clicking the + button. The Target network is the IP address of the remote network that you want to access (e.g. 67.227.194.148). You may define it also as a network range, by appending /XX (e.g., 67.227.194.0/24).
7. Select VPN as the Gateway.
8. Set mode to Overwrite (do not use transmitted routes from VPN gateway).
9. Click Save.

Option 2: Use the command line to define split tunneling rules

For manually created VPN connections with the L2TP protocol (L2TP over IPSec), you may set up a manual split tunneling mechanism to direct the Internet traffic to a certain target (IP) through the VPN.

This is useful when you want to use the VPN tunnel only for loading a particular website or a specific web resource. You will need the IP address (or IP range) of the target/destination website. A simple way to find it is to use the nslookup command or to load a site like this one and enter the domain name or URL.

For the next steps, you will need superuser administrative privileges, an existing L2TP connection, and the destination subnet (target IP address):

1. Go to System Preferences > Network.
2. In the left panel, click on the VPN connection and click on the Advanced button.
   
3. Next, click on the Options tab.
4. Disable the Send all traffic over VPN connection option.
5. Click OK and, next, Apply.
6. Connect to the VPN.
7. Once connected, open the Terminal app (Launchpad > type Terminal).
8. Type ifconfig and hit Enter. Identify the network interface used by the L2TP connection (most probably it is ppp0).
9. Log in as root to be able to run the necessary command. Type sudo su into the terminal and authenticate with your Mac password.
10. Enter the following command, replacing [DESTINATION] with the subnet you want to be routed through the VPN, and [VPN INTERFACE] with the interface listed in the previous step (probably ppp0).

    route add -net [DESTINATION] -interface [VPN INTERFACE]

    You may add the “-p” if you want your route to remain active after reboot (persistent).

11. Load the desired website. It is now accessed through the VPN tunnel.
12. To remove the split tunneling rule, turn off the VPN, and type the following command:route delete [DESTINATION]

To better understand how this works, you may first test with a IP locator website:

1. Load, for example, xmyip.com. Notice your IP address.
2. Find the IP address of the server where xmyip is located. It is 67.227.194.148.
3. Turn on the VPN and follow the steps described above.
4. Enter the following command:
   route add -net 67.227.194.148 -interface ppp0
5. Re-load xmyip. You should notice that your IP address is no longer shown. It is replaced by the IP of the VPN server.
6. Don’t forget to remove the route after the test:
   route delete 67.227.194.148

If you prefer you may use a script that allows you to easily manage one or more VPN connections with split tunneling.

Option 3: Modify an OpenVPN configuration file

You may use OpenVPN on Mac and modify the config files to split the traffic data. More precisely you may instruct OpenVPN to use the VPN tunnel only for specific websites:

1. Find the IP of the website you want to access via VPN (either use a website for this or the nslookup command).
2. Edit the OpenVPN (or Tunnelblick) config file.
3. Add the following commands:
   route-nopull
route [IP address of the website] 255.255.255.255
4. Save changes.
5. Restart the OpenVPN connection.
6. To remove the split tunnel, delete the two rows, and restart the OpenVPN connection.

How to test split tunneling on Mac

It is always advisable to test your split tunneling setup. My recommendation is to firstly use a IP locator website, set the split, load the IP locator website, and check the IP address:

1. With no VPN connection, load, for example, xmyip.com (IP: 67.227.194.148). Notice your public IP address.
2. Set the VPN split for xmyip.
3. Re-load xmyip. Observe that your IP address is no longer shown and it was replaced by the IP of the VPN server.
4. If the test was successful, you may proceed with the website or websites you want to access through the VPN.

Summary

You have learned how to set up split tunneling on Mac and get your VPN internet connection to the next level of efficiency. However, make sure you know the current setup; otherwise, you may leak your IP address.

Would you like to be notified when we publish new Mac VPN tips? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

Looking to use WireGuard on iOS? You may get started easily by installing the WireGuard iOS client or using VPN software from a service that offers access to the WireGuard protocol.

WireGuard iOS setup [Summary]

Using WireGuard on iOS devices is simple as it consists of installing an app, and, in the case of the WireGuard client app, it needs to set up the VPN connection parameters. Here are the available options:

• Option 1: Install and use the WireGuard VPN client for iOS.
  • Step 1: Install the WireGuard app.
  • Step 2: Import the configuration or create a new tunnel.
  • Step 3: Connect to (activate) the WireGuard tunnel.
• Option 2: Get a VPN client from a VPN provider that offers access to WireGuard.
  • Find and subscribe to the VPN service.
  • Download the VPN client.
  • Enable the WireGuard protocol.
  • Connect to VPN.

As your goal is to install WireGuard on iOS devices, I suggest that you also read our bat-iful article on how to use a VPN on iOS. `You will find out what are the available options and what VPN providers we recommend for your iPhone or iPad.

What is WireGuard and what are its advantages?

WireGuard is a new VPN protocol that is regarded as the future of VPN due to its simplicity and speed. It can be installed easily on Linux, Windows, macOS, Android, iOS.

WireGuard has some important benefits:

• It is free and open-source.
• The project code is kept to the minimum, and simplicity is one of the main objectives.
• The protocol uses high-level encryption and works on UDP.
• WireGuard is (really) fast, faster than the OpenVPN protocol.

You may read more details on WireGuard here.

How to install WireGuard on iOS

Unlike IPSec or IKEv2, WireGuard is not integrated into the iOS operating system. Thus, you may use WireGuard on iPhone or iPad either by installing the WireGuard VPN client or using a native app from a VPN provider.

Install and use the WireGuard VPN client for iOS

Before starting the WireGuard setup, make sure you have access to VPN server data. You may install your own WireGuard server, get access from a VPN provider or a network administrator.

WireGuard server data is necessary for initiating the connection and it can be:

• a configuration file that contains all necessary info;
• a QR code generated based on a config file;
• WireGuard server name or IP address and VPN connection info for initiating the tunnel.

Here are the steps you need to perform:

1. Open App Store and search for WireGuard.
2. Download and open the app
3. Next, tap on the “+” sign on the top-right of the screen.
4. Select the way you want to get started with the WireGuard setup.
5. Create from file or archive – You may import a config file that contains the necessary connection parameters. The config file can get to your Apple device by email, by downloading it from a server, using AirDrop from your Mac. If you receive the WireGuard config file by email:
   • Tap on the attached file.
     
   • Next, tap on the More button.
   • Select Copy to Wireguard. The WireGuard iOS app will import the config, and you will be able to activate it.
6. Create from QR code – Import the configuration info stored in a QR code:
   • Open the WireGuard QR code on your computer. You may get one from several VPN providers (e.g., OVPN or AzireVPN), or you may generate it yourself (as explained below).
   • Point your device to the QR code.
   • Enter a name for the new WireGuard connection.
   • The app will read and import the config file.
7. Create from scratch – Fill in the required info for initiating the connection. To add the server location data, tap the Add peer button. Additionally, you may switch on the on-demand activation (Cellular/Wi-Fi).
8. You are now ready to activate the connection. Tap the toggle button to initiate the secure VPN tunnel. You will see the connection status on the top of the screen.
   

Get a VPN client from a VPN provider that offers access to WireGuard

In this case, no configuration is needed as VPN client apps automatically set up the necessary parameters:

1. Find and subscribe to the WireGuard VPN provider.
2. Download the VPN client.
3. Enable the WireGuard protocol.
4. Connect to VPN.

Various VPN providers have already implemented WireGuard in their iOS apps. Here are several VPN services that I have tested myself and that seem to work smoothly:

• NordVPN
• Surfshark
• PrivateInternetAccess
• CyberGhost VPN

How to see the WireGuard VPN configurations set up on iOS

The VPN configurations (manually created or installed by VPN apps) are visible in Settings > VPN. The WireGuard configurations are marked with the WireGuard label. Of course, you may see the available WireGuard tunnels by opening the WireGuard app.

WireGuard on iOS FAQs

Is the WireGuard iOS app stable?

Yes, it is. The app was released on App Store on Dec 19, 2018. Since then, several releases have been published to increase the app’s overall stability and fix bugs.

What is a WireGuard config file?

The WireGuard configuration file contains all the necessary information for setting up the encrypted tunnel:

• PrivateKey – the private key of the user;
• Address – the internal IPs (IPv4 and/or IPv6);
• DNS – the DNS address(es) or IP(s) (IPv4 and/or IPv6);
• PublicKey – the public key of the peer/server;
• AllowedIPs – list of addresses that will get routed to the peer;
• Endpoint – the name or the IP address of the WireGuard VPN server and the communication port.

Here is an example:

[Interface]
PrivateKey = OBzLVh3H52Nbs7mJjl/HbHdXd33K9WhoIOU5yDP2lG8=
Address = 10.0.9.112/19, 2a0e:1c80:4:2000::971/64
DNS = 91.231.153.2, 2001:67c:15ec:1337::2
ListenPort = 41194

[Peer]
PublicKey = vtoErnbB93khY7KZl4qKfByMvGfiwHIQt/IKgTgZaEM=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = 45.15.19.34:51820

How to generate the QR code for a WireGuard config file?

Starting from an existing WireGuard config file, you may generate a QR code that can be imported by the WireGuard app.

To generate the QR code install (if you don’t have it already) the qrencode library and the following command:

$ qrencode -t ansiutf8 -r filename.conf

Further, you may open the WireGuard iOS app, select the Create from QR code option, and point the device camera to the QR code. The app will read the QR code and create the WireGuard connection.

Summary

WireGuard is a fantastic new VPN protocol, and it works smoothly on iOS (as well as on Android, or on Windows). The setup consists of installing the WireGuard iOS app or a VPN app with built-in capabilities of connecting to WireGuard servers.

Did you like our WireGuard guide for iOS? Would you like to learn more about WireGuard and other VPN protocols? Subscribe to our newsletter! You will make a Transylvanian baby-bat happy.

This short tutorial explains how to delete VPN on Mac and leave no trace behind it. It also explains what files are created during the installation of a VPN, how to see the VPN configuration files installed on your Mac, and how to uninstall NordVPN, one of the most popular VPN services.

How to remove VPN from Mac [Summary]

Deleting a VPN app or connection from your Mac is not difficult. However, when uninstalling VPN software, make sure you remove all files.

• Case 1: You have installed a VPN client application.
  • Step 1: Delete the VPN app.
  • Step 2: Delete preferences files.
  • Step 3: Delete records from the keychain.
• Case 2: You have manually created a VPN connection.
  • Click on the Apple icon in the upper left corner of your screen.
  • Go to System Preferences > Network.
  • Select the VPN connection you want to delete from the left panel.
  • Click the “-” button from the bottom of the panel.

As your goal is to remove the VPN from macOS, I suppose you already know how to install one. Nevertheless, I suggest that you read our bat-iful article on how to use a VPN on Mac. `You will find out what are the available options and what VPN providers we recommend for Mac OS X.

What does a VPN app install on your Mac

When you install a VPN (Virtual Private Network) application on your Mac, several files are copied and created on your computer.

Firstly, the application files are stored in the Applications folder, in a directory with the app’s name (e.g., ExpressVPN.app). Tip: you may right-click on the directory name and choose Show Package Content to see all the app files.

Secondly, VPN apps may store some files in the Library folders. Most of the time, installation files are copied in the global Library folder (/Library), and preferences files are created in the Library folder associated with your user name (/ Users/[your username]/Library.

By moving the app into the Trash, only the files from Applications are removed, while some associated files may remain orphan on your computer. Thus, you may need to delete them manually.

How to see the VPN configurations set up on macOS

The VPN configurations (manually created or installed by VPN Mac apps) are visible in the Network window: System Preferences > Network. The VPN profiles are marked with the icon, and they are listed in the left panel.

How to delete VPN on Mac

Depending on the way you installed the VPN on your Mac computer you have the following options.

Case 1: You have installed a VPN client application

Most VPN providers offer access to their services by installing VPN client apps on your Mac, some available in the App Store, others on their websites.

Step 1. In this case, the first step is to uninstall the application:

1. Quit the application if it is open.
2. Open the Applications folder and search for the VPN app.
3. Right-click in the VPN app name and select Move to Bin.

Step 2. Delete preferences files and other app files.

1. Open a Finder window.
2. Perform a search on the name of the app (e.g., “expressvpn”). Make sure the search on This Mac in order to find all related files.
3. Right-click on folders and files associated with the VPN app (usually they start with “com.” and they are followed by the name of the app) and select Move to Bin.
   
4. Right-click on the Bin (on the right side of the Dock) and select Empty Bin.

Step 3. Delete records from the keychain.

1. Open the Keychain Access app (search for keychain in Launchpad).
2. Perform a search on the name of the app (e.g., “CyberGhost”).
3. Select all items, right-click, and select Delete.

Case 2: You have manually created a VPN connection

A VPN connection can also be created by setting the connection preferences (VPN protocol, VPN server name, authentication credentials) manually from the Network window.

In this case, to remove the VPN from your Mac, you need to alter the VPN settings and delete VPN profiles:

1. Click on the Apple icon in the upper left corner of your screen.
2. Go to System Preferences > Network.
3. Select the VPN connection you want to remove from the left panel.
4. Click the “-” button from the bottom of the panel.
5. Repeat steps 3 & 4 for other VPN configuration profiles.

How to completely uninstall NordVPN on Mac

NordVPN is one of the most popular VPN providers worldwide, with great apps for all popular operating systems (macOS, Microsoft Windows, Android, iOS, Linux). Thus, it is useful to explain how to delete the NordVPN app from Mac and its tracks.

Before you begin, make sure you disable the VPN and quit the NordVPN application.

On Mac, there is no uninstaller for the NordVPN app. Firstly, open Finder, go to the Applications folder, and look for the NordVPN IKE app. Right-click on it and select Move to Bin.

Confirm that you want to delete the NordVPN app.

You may now proceed with the removal of other files stored by the NordVPN app on your Mac:

• go to [your HD] > Users > [your username] > Library > Application Scripts, select all folders that start with “com.nordvpn.osx-apple”, right-click and move them to Bin.
• go to [your HD] > Users > [your username] > Library > Containers, select all folders that start with “com.nordvpn.osx-apple”, right-click and move them to Bin.

Further, right click on the Bin (on the right side of the Dock) and select Empty Trash.

The final step is to remove the records from the keychain. Open the Keychain Access app (type keychain in Launchpad) and search for “nordvpn”.

Select all records, right-click and Delete.

You have now completely removed NordVPN from your Mac.

Summary

You have learned how to delete VPN on Mac. You may either remove the VPN app (don’t forget to delete the preferences files and additional libraries) or erase the VPN profiles.

Would you like to learn more VPN tips? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.