WireGuard Manual setup for macOS 10.14+

To use WireGuard on macOS, we recommend downloading IVPN's macOS client, which supports the protocol. Please follow the steps below if you would prefer to use the official WireGuard for macOS app instead:
  1. Download and install the latest version of WireGuard from the App Store.

  2. Launch the WireGuard application, click the + button in the bottom left > Add empty tunnel....

  3. Give the new tunnel a Name with alphanumeric characters only (no spaces or punctuation) and add the following text below the PrivateKey entry in the new tunnel window.

    Address = 
    DNS = 
    PublicKey = 
    Endpoint = 
    AllowedIPs =, ::/0
    Warning: Keep the PrivateKey a closely guarded secret, do not share it with anyone, and do not post it on the Internet.
  4. If you would like your computer to automatically connect to the WireGuard server as soon as either (or both) Ethernet or Wi-Fi network adapter becomes active, check the relevant ‘On-Demand’ checkboxes.

  5. Copy the Public key and go to the Client Area on the IVPN website to add the generated public key to the Key Management area. Make note of the IP addresses we assign to your public key. Beside the Address line in the new tunnel window, put a space after the '=' sign, enter the IPv4 and IPv6 IP addresses we have assigned separated with a comma and ending with /32 & /128 respectively.

  6. Beside PublicKey in the [Peer] section, put a space after the '=' sign, and enter an IVPN WireGuard server public key (available on the Server Status page).

  7. Beside Endpoint in the [Peer] section, put a space after the '=' sign, enter an IVPN WireGuard server hostname:port. The hostname of the servers can be found on the Server Status page. You can use any of the following Port numbers - 2049, 2050, 53, 30587, 41893, 48574, 58237.

    Note: You are welcome to use whichever server you prefer. The Endpoint and PublicKey in the example above are specific to our server in Switzerland.
  8. Save the VPN profile, then click Allow on the '“WireGuard” Would Like to Add VPN Configurations' prompt.

  9. Click the Activate button to establish the connection.

  10. Check https://www.dnsleaktest.com to verify the IP address your traffic is coming from (and that there are no leaks).

  11. Click Deactivate to end the connection.

Spotted a mistake or have an idea on how to improve this page?
Suggest an edit on GitHub.