Checking connection...

Using WireGuard on iOS

WIREGUARD

Last updated: 12 December 2019


This guide for iOS (iPhone) users explains how to connect to Mullvad’s WireGuard® servers by using the official WireGuard app.

This option is not compatible with any other method of connecting to Mullvad. Use only one method at a time.

Download WireGuard app

Download and install the WireGuard app from the App Store.

Please use Safari in the following instructions as some users have reported that other browsers do not work.

Generate and import configuration file

  1. In a browser window on your iOS device, navigate to our WireGuard configuration generator.
  2. Enter your Mullvad account number in the Account number field.
  3. Click on Generate a new key pair. (Generate a separate key pair for each device that you use.)
  4. From the Server drop-down menu, select All (other options currently don't work).
  5. Click on Download and wait 5–10 seconds for the file to begin downloading.
  6. When prompted, select OK to open the .zip file in the WireGuard app.
  7. Click on Allow when WireGuard asks to add VPN configurations.
  8. You may need to enter your device's passcode in order to confirm.

Connect and disconnect

  1. Open the WireGuard app.
  2. Click on the button next to the WireGuard server you wish to use in order to connect or disconnect.
  3. You're all set! You can visit am.i.mullvad.net to check your connection.

Using multiple devices?

If you're running WireGuard on multiple devices, generate a separate key pair for each device. You will otherwise likely run into connectivity issues.

Is it working?

While on your device, visit am.i.mullvad.net to get a quick overview of your Mullvad-WireGuard connection status. In addition, it's a good time to check if your browser is leaking information and therefore jeopardizing your privacy.

Want to access your local network when connected with WireGuard?

  1. Click on the server profile
  2. Click on the edit icon
  3. Click on the "Exclude private IPs"
  4. Add 10.64.0.0/10 to the Allowed IPs field.
  5. Click on the Save icon
  6. Disable and then Enable the server profile that you edited

 

External resources

"WireGuard" is a registered trademark of Jason A. Donenfeld.