On this page
Get your own profile
Use the protected application-file download in your service when it is available. Otherwise use the documented secure SSH download route. A profile contains a private key: do not publish it, send it to AI chat, or reuse it across unrelated devices.
Import and verify
Import the profile into the official WireGuard client on your trusted device. Confirm the endpoint is your VPS and its configured UDP port is reachable. Inspect the latest handshake and traffic counters when troubleshooting.
Understand the routes
The initial profile may route only the private VPN subnet. Full internet routing also requires a deliberate server forwarding, NAT, DNS, and firewall configuration. Do not replace AllowedIPs blindly or assume the first profile provides an internet exit.
Lost device
Revoke that peer's access and create a distinct profile through an authorized management process. Keep other devices' private keys separate.