WireGuard setup for Linux

Choose a VPN protocol

Before you begin

You need an active Cloud1VPN server configured for WireGuard. Open My Servers and retrieve a .conf tunnel file or QR code before importing it into your client.

Get your WireGuard configuration

Linux setup

Connect with WireGuard

Use the official WireGuard client with the tunnel configuration generated for your Cloud1VPN server.

  1. Install WireGuard

    Install WireGuard with your distribution package manager. The official installation page lists commands for major distributions.

    Open the official WireGuard installation page

  2. Download your tunnel configuration

    Open My Servers, choose the WireGuard server, and download its personal .conf file or display its QR code. Treat either format as a private credential.

  3. Import the tunnel

    Save the .conf file securely, import it with NetworkManager, or place it in the WireGuard configuration directory and bring it up with wg-quick.

  4. Connect

    Activate the imported tunnel and approve any Linux request to create or enable the VPN connection.

  5. Verify your connection

    Confirm WireGuard shows a recent handshake, then check that your public IP matches the Cloud1VPN server.

    Open What's My IP?

Installation & Configuration FAQs

Linux WireGuard setup

Which WireGuard client should I use?

Use the official WireGuard app for Linux when one is available. It supports the Cloud1VPN configuration format directly and receives client updates from the WireGuard project. Use a built-in or package-managed client only where this guide specifically recommends it.

Where do I download my WireGuard profile?

In My Servers, open the Cloud1VPN server you want to use and download its current WireGuard .conf file. Each download belongs to that server, so retrieve a new file after a server rebuild, relocation, or profile replacement.

How do I import the downloaded profile?

Use the WireGuard tools or the supported network manager shown in this guide, and import the downloaded .conf file into that one connection manager. Keep the file exactly as downloaded; do not open, edit, or re-save it in a text editor before importing.

Should I use the .conf file or the QR code?

They contain the same private tunnel configuration. Use the file for file import and the QR code for a mobile device you are setting up from a separate trusted screen. Never share either format or store it in a shared photo album.

How do I configure the tunnel after import?

Use the profile settings supplied by Cloud1VPN without changing the endpoint, keys, DNS, or allowed IP ranges. Give the imported tunnel a recognizable name if the client permits it, then enable that tunnel as your only active VPN connection.

Can I reuse an older WireGuard profile?

Keep it only while the associated server and credentials are current. When Cloud1VPN gives you a replacement profile, remove the previous tunnel from the client and import the new download instead of editing individual fields by hand.

How do I confirm that setup worked?

Turn on the imported tunnel, wait for the client to show it is active, then open What's My IP?. A full-tunnel Cloud1VPN profile should show your Cloud1VPN server address.

Still Need Help?

Visit our Knowledge Base for troubleshooting guides. Premium members can also sign in to submit a support ticket.