Set up your own WireGuard VPN on a VPS

Running your own VPN means no logs but yours, no shared IP reputation, and full control. WireGuard makes it fast and simple. You'll need any small VPS (1 vCPU / 1 GB is plenty).

1. Install WireGuard

On Ubuntu or Debian: apt update && apt install -y wireguard. WireGuard ships in modern kernels, so there's nothing to compile.

2. Generate keys

wg genkey | tee privatekey | wg pubkey > publickey creates your server key pair. Do the same on each client device.

3. Configure the interface

Create /etc/wireguard/wg0.conf with your server private key, an address such as 10.8.0.1/24, and a [Peer] block per client using each client's public key. Enable IP forwarding and add a NAT rule so traffic reaches the internet.

4. Start it and connect

wg-quick up wg0 and systemctl enable wg-quick@wg0 bring it up on boot. Import the client config (a QR code works well on mobile) and you're routing through your own private server.

Because you paid for the VPS in crypto and signed up without KYC, the whole VPN chain stays private end to end.