Set up a personal WireGuard VPN on a VPS

Why run your own VPN

A commercial VPN is a promise that a company you can't audit isn't logging you. Your own WireGuard server is a smaller, verifiable promise: one box, rented by you, with an IP that only you use. It's ideal for securing coffee-shop Wi-Fi, reaching your own servers privately, or giving yourself a stable IP for allowlists.

What it is not: anonymity. The server is registered to your account — if you need to be untraceable, this is the wrong tool, and we'd rather say so than sell it to you.

Step 1 — One click at server creation

Choose the WireGuard VPN template when creating a server. Review CPU and traffic needs for your devices; the VPS is billed monthly.

First boot installs Docker and starts wg-easy — WireGuard plus a web admin UI. VPN traffic runs on UDP 51820, the admin UI on TCP 51821.

Step 2 — Claim the admin UI immediately

Open http://<server-ip>:51821. The first visit is a setup wizard where you create the admin account — do it right away, because until then the wizard is open to anyone who finds the port. The same note is waiting for you on the server in /root/wireguard-info.txt.

Step 3 — Add devices by QR code

In the web UI, add a client per device. Phones scan the QR code with the official WireGuard app (iOS/Android); laptops import the downloaded config file into the desktop client. Flip the toggle in the app and your traffic exits from your server's IP — check with any "what is my IP" page.

Operating notes

/opt/wg-easy · docker logs wg-easy

• Choose shared or dedicated vCPU to match your workload. A VPS gives you root access; application performance depends on resources and configuration.
• Pair it with Uptime Kuma on the same box if you want to watch your other services from inside the VPN.