How to use WireGuard on Linux

Reading
4 mins
Category
Linux

WireGuard® is a fast, lightweight, and secure VPN protocol. 

Learn more about WireGuard

Our GUI app for Linux offers both OpenVPN and WireGuard VPN protocols along with a built-in kill switch.

WireGuard is available on app version v4.4.4 and later.

How to connect with WireGuard on Linux

1. Open the Proton VPN app, open the dropdown menu and select Settings.

2. In Settings window, scroll down to Connection section and select WireGuard in the Protocol selection.
This setting will be applied from the next connection.

How to manually configure Wireguard

It’s also possible to manually configure WireGuard on Linux using third-party clients. In this guide, we’ll show you how to configure WireGuard on any Linux distribution using the official WireGuard(new window) CLI tool for Linux, and on Debian and Ubuntu-based systems using NetworkManager.

An advantage of manually configuring WireGuard on Linux is that our WireGuard config files support port forwarding. 

How to manually configure WireGuard on Linux

1. Install(new window) the official WireGuard VPN CLI tool for your distribution. 

2. Sign in to account.protonvpn.com, go to DownloadsWireGuard configuration, and download a WireGuard configuration file. Note that WireGuard can be picky about the length of .conf names, so please ensure the the downloaded .conf file name is under 15 characters (you may need to rename the default suggested name to achieve this).

Learn how to download a WireGuard configuration file from Proton VPN 

3. Move the downloaded .conf configuration file to the /etc/wireguard/ directory.

4. In a terminal window, enter:

sudo wg-quick up [the name of the configuration file, excluding the .conf suffix]

For example, if your configuration file is named swiss1-CH-5.conf, enter:

sudo wg-quick up swiss1-CH-5 

Your privacy is now protected by Proton VPN! To verify that the connection is running, enter:

sudo wg

You can also visit ip.me(new window) to confirm that everything is working correctly.

To end the VPN session, enter:

sudo wg-quick down [the name of the configuration file, excluding the .conf suffix]

For example:

sudo wg-quick down swiss1-CH-5 

How to use WireGuard with NetworkManager on Ubuntu 

This guide was created on Ubuntu 20.04 LTS, but should work on most Debian and Ubuntu-based distros.

1. Open a terminal window from your Home directory and install WireGuard using the following command:

sudo apt install wireguard git dh-autoreconf libglib2.0-dev intltool build-essential libgtk-3-dev libnma-dev libsecret-1-dev network-manager-dev resolvconf

2. Sign in to account.protonvpn.com, go to DownloadsWireGuard configuration, and download a WireGuard configuration file.

Learn how to download a WireGuard configuration file from Proton VPN 

3. Clone the NetworkManager plugin from GitHub, compile, and install it using the following commands:

git clone https://github.com/max-moser/network-manager-wireguard
cd network-manager-wireguard
./autogen.sh --without-libnm-glib
./configure --without-libnm-glib --prefix=/usr --sysconfdir=/etc --libdir=/usr/lib/x86_64-linux-gnu --libexecdir=/usr/lib/NetworkManager --localstatedir=/var
make   
sudo make install

4. Open NetworkManagerVPN+.

Add a new VPN connection in NetworkManager

5. If the WireGuard option is not available, restart your computer and try again. If it is, select Import from file… 

Select Import from file...

6. Locate the .conf configuration file you downloaded in step 2 using your file manager and click Add.

Add the downloaded WireGuard config file

7. Configuration is now complete. In NetworkManager, simply toggle the VPN switch next to the WireGuard connection you just created to on.

Connect to ProtonVPN using WireGuuard

You are now connected to ProtonVPN using the WireGuard protocol. Visit ip.me(new window) to confirm that the VPN connection is working correctly.

Visit ip.me to confirm that the VPN connection is working correctly