How to set up WireGuard with BeAdmin

WireGuard is a modern, high-performance VPN protocol known for its simplicity, speed, and strong cryptography. It creates encrypted tunnels between devices using state-of-the-art cryptographic primitives (Curve25519, ChaCha20, Poly1305). In the BeAdmin control panel, WireGuard is fully integrated — key generation, peer management, and configuration distribution are handled automatically.

With BeAdmin, you choose the country and tariff plan for your server, manage users yourself, and stay independent from third-party VPN providers.

ℹ️ Info

The WireGuard module in BeAdmin is free — there is no limit on the number of users. You can create as many connections as you need at no extra cost.

If you don't have a server yet, you can order one from our partners. Both virtual and dedicated servers are available with a pre-installed BeAdmin panel.

Proven over 15 years in hosting. Your VPS with BeAdmin is ready to go out of the box.

• Germany
• Netherlands
• Sweden
• Switzerland
• Spain
• USA

Select server

European reliability made simple. Launch BeAdmin with your VPS in just one click.

• Germany
• Netherlands
• Sweden
• Estonia
• Romania
• Switzerland
• Spain
• United Kingdom
• USA

Sign up

If you already have a server with BeAdmin installed, follow the steps below.

Step 1. Install WireGuard

Go to the WireGuard section and click Install.

The panel will automatically download and configure all required dependencies, generate server keys, and set up the network interface. Once the installation is complete, the user management page will open.

Step 2. Create a user

Open the Users section and click Create user. In the window that opens, fill in the following fields:

• Username — a short identifier (2–32 characters, letters, numbers, and hyphens). If left empty, it will be generated automatically.
• Email — optional. If provided, the VPN configuration can be sent to this address.
• Comment — optional note (up to 64 characters).

Click Create. The user will appear in the list and be ready to connect. By default, the device's own DNS is used and Persistent Keepalive is set to 25 seconds — this keeps the connection alive behind NAT (e.g. when connected via Wi-Fi in a cafe or hotel).

💡 Tip

If you want to specify a custom DNS server (e.g. 1.1.1.1 to prevent DNS leaks) or disable Persistent Keepalive, open the user's edit dialog after creation and set the desired values.

Step 3. Connect a device to WireGuard

To connect, use the official WireGuard app — it is available for Android, iOS, Windows, macOS, and Linux.

If the application is not yet installed on the device (smartphone, computer, or tablet), download and install it first.

To get the connection configuration, go to the Users section, click Settings (the gear icon) next to the desired user. The following options will be available:

• scanning a QR code directly from the screen;
• downloading the .conf configuration file;
• sending the configuration file via e-mail.

ℹ️ Info

To send configuration via e-mail, you need to set up a mail server or an SMTP relay. Links to setup guides are available in the Resources section.

Open the WireGuard app on the device and add a new tunnel:

• On a smartphone: tap Add Tunnel → Create from QR code and scan the QR code shown in the panel. Alternatively, import the downloaded .conf file.
• On a computer: click Import tunnel(s) from file and select the downloaded .conf file.

Next, activate the tunnel in the app. On iOS, the system may ask permission to add a VPN profile — confirm it.

To make sure the VPN is working, open any IP check service in your browser, for example https://www.myip.com/. If everything is configured correctly, you will see the country of your VPN server.

Enabling and disabling users

You can temporarily disable a user by toggling the switch next to their name in the user list. When a user is disabled, they are removed from the server configuration and can no longer connect. Changes take effect immediately — no service restart is required.

When a user is re-enabled, a new key pair is generated. This means the previous configuration becomes invalid — you will need to download the new .conf file (or scan a new QR code) and re-import it on the client device.

Resources

• How to set up a mail server in BeAdmin
• How to configure SMTP relay for sending emails
• Official WireGuard app:
  • WireGuard (Android, iOS, Windows, macOS, Linux)