WireGuard quick start

The WireGuard module in the BeAdmin panel runs your own VPN on the server based on the modern WireGuard protocol: a compact codebase, current cryptography (Curve25519, ChaCha20, Poly1305), and fast connections even on mobile networks. Each user gets a key pair and a ready‑to‑use .conf configuration file — the server side, including the network interface and keys, is set up by the panel itself.

The WireGuard protocol is recognizable to DPI filters — where the ISP actively blocks VPNs, Amnezia or Xray are a better fit.

This article walks through the minimum scenario: install the module, create the first user, and connect a client device.

ℹ️ Note

Your own VPN server pays off compared with commercial services: bandwidth is not split between hundreds of clients, and the number of users in the BeAdmin WireGuard module is not capped even on the free licence.

⚠️ ISP restrictions

Traffic encryption makes a VPN a reliable way to protect a connection, but in some countries and regions internet providers actively interfere with VPN protocols. Because of this, full availability of the service cannot be guaranteed — regardless of the connection type. If one protocol does not work for you, try another VPN module available in the panel. If none of them work on your network, contact support and we will issue a refund for the license.

You'll need a server with BeAdmin — our partners ship a ready‑to‑use VPS the moment you order.

Proven over 15 years in hosting. Your VPS with BeAdmin is ready to go out of the box.

• Germany
• Netherlands
• Sweden
• Switzerland
• Spain
• USA

Select server

European reliability made simple. Launch BeAdmin with your VPS in just one click.

• Germany
• Netherlands
• Sweden
• Estonia
• Romania
• Switzerland
• Spain
• United Kingdom
• USA

Sign up

Installing the module

In the side menu open VPN → WireGuard and click Install — the module installs with a single button and is ready to use right after. By default the server listens on UDP port 51820 — the standard WireGuard port.

When installation finishes, the panel takes you straight to the Users page — the module's main screen. Installation usually takes a few minutes; you can follow the progress via the Log button on the install card.

After installation

The page header exposes the core module actions — start, stop, and restart. The three-dot menu groups the rest: Logs, update check and run, reinstall, and uninstall.

To get started, create the first user.

Creating the first user

A WireGuard user is a separate account with its own key pair and .conf configuration file. We recommend creating a separate user per device that will connect: that way you can revoke access for a single device without touching the others.

1. On the Users page click Create user.
2. Fill in the fields:
   • Username — a short identifier of 2 to 32 characters: Latin letters, digits, and hyphens. You can leave the field empty — the panel will generate a name for you. The name must be unique.
   • Email — optional. Useful if SMTP is configured in the panel and you want to email the user their configuration; the address is not needed for the connection itself.
   • Comment — an optional label up to 64 characters: for example, "Anna's iPhone" or "work laptop". Helps you navigate the list.
   • User language — the language of the configuration email. Default — English.
3. By default the user is created enabled — turn off the Enabled toggle in the dialog footer if you want to create it disabled.
4. Click Create.

The user appears in the list. The server generates a key pair and assembles the .conf configuration file — you can grab it right away.

ℹ️ Default DNS and keepalive

When a user is created, the panel sets DNS to 1.1.1.1 from Cloudflare and the persistent keepalive interval to 25 seconds. You can change both values in the edit dialog — details in WireGuard. Managing users.

Connecting a client device

For the connection, you need the official WireGuard app. It's available for:

• Android,
• iOS,
• Windows, macOS, and Linux.

Install the app on the device that will route its traffic through the VPN.

1. In the users list click a row — an expanded panel with a QR code and action buttons appears.
2. In the expanded row you have:
   • QR code — for importing into the mobile app.
   • Download .conf — downloads the configuration file. The file name matches the user name.
   • Email — sends the same file to the user's address (if SMTP is configured in the panel and the address is set).
   • QR code button — downloads the QR code as an image. Useful for forwarding to someone else or keeping for later.
3. Import the configuration into the app:
   • On a smartphone, in the WireGuard app pick Add tunnel → Create from QR code and scan the QR right from the panel screen. Or import the downloaded .conf file.
   • On a computer, in the WireGuard app pick Import tunnels from file and point it at the downloaded .conf. On Linux, the same configuration can be brought up with wg-quick up <path to file>.
4. Activate the tunnel in the app. On iOS, confirm the system prompt to install the VPN profile.

To confirm the VPN is working, open any IP‑check page in your browser, for example myip.com. If everything is set up right, it will show your server's country.

Emailing the configuration

If SMTP is configured in the panel, the .conf file can be emailed to the user — handy when the device isn't at hand.

In the expanded user row click Email. The file is sent to the address provided when the user was created.

ℹ️ If SMTP isn't configured

The email button stays inactive and the expanded row shows a note with a link to the settings. Details — in How to set up an SMTP relay for sending email. Downloading the .conf file and the QR code work either way.

What's next

• WireGuard. Managing users — adding users, editing, emailing the configuration, revoking access.
• WireGuard. Managing the module — starting and stopping the service, updating, and uninstalling the module.