This guide explains how to set up and use a WireGuard VPN to securely access internal services.

WireGuard is a fast and modern VPN protocol that allows you to connect to a private network and access resources as if you were on-site.

Request VPN Access

To get started, you’ll need a VPN configuration for your device.

  • Contact your administrator or use your organization’s internal request system to obtain access.

  • Once approved, you will receive a configuration file or QR code.

This configuration contains everything needed to securely connect to the VPN.

Add the VPN Configuration to Your Device

On mobile (iOS/Android):

  • Open the WireGuard app.

  • Use the “Scan from QR code” option.

  • Scan the QR code provided in Matrix.

On Mobile (iOS / Android)

  1. Install the official WireGuard app from your app store.

  2. Open the app.

  3. Tap Add Tunnel → Scan from QR code.

  4. Scan the QR code provided by your administrator.

On Linux:

  • Install the required tool:
sudo apt install wireguard zbar-tools

  • Save the QR code as an image file (e.g., wireguard.png).

  • Extract and install the configuration:

zbarimg --raw wireguard.png | sudo tee /etc/wireguard/vpn.conf > /dev/null

Connect to the VPN

sudo wg-quick up vpn

Disconnect

sudo wg-quick down vpn

Notes and Best Practices

  • Keep your VPN configuration secure and do not share it.

  • If your device is lost or compromised, contact your administrator immediately to revoke access.

  • Only connect to the VPN when needed, especially on untrusted networks.

Conclusion

Once configured, WireGuard provides a secure and efficient way to access internal resources from anywhere. After the initial setup, connecting and disconnecting is quick and straightforward.