Checking connection...

Using WireGuard on iOS

WIREGUARD

Last updated: 10 June 2020


This guide for iOS (iPhone) users explains how to connect to Mullvad’s WireGuard® servers.

Choose one of the two following options. Do not use them simultaneously as they are not compatible.

Option 1: use the Mullvad VPN app

The Mullvad VPN app for iOS only uses WireGuard, so all you need to do is connect.

Option 2: use the WireGuard app

Download WireGuard app

Download WireGuard on the App Store.

Generate a configuration file

Please use Safari for these instructions; some users have reported that other browsers do not work.
  1. In a browser window on your iOS device, open our WireGuard configuration generator.
  2. If you’re not already logged in to our website, you will be prompted to do so.
  3. Tap Generate key. (Generate a separate key pair for each device that you use.)
  4. Select your desired exit location.
  5. Tap the Download button and save it to your device. You may have to wait 510 seconds for the file to begin downloading.

Import the configuration file

  1. Open the WireGuard app.
  2. Tap Add a tunnel.
  3. Tap Create from file or archive.
  4. Select the config or zip file that you downloaded.
  5. Tap Allow when WireGuard asks to add VPN configurations. You may need to enter your device's passcode in order to confirm.
  6. The location server(s) will appear in the app, for example "mullvad-se2".

Connect and disconnect

  1.  In the WireGuard app, tap the toggle button next to the location server you wish to use.
  2.  You will either connect or disconnect. That’s it!
  3.  To check your connection status, visit am.i.mullvad.net.

Using multiple devices?

If you're running the WireGuard app on multiple devices, generate a separate key pair for each device. You will otherwise likely run into connectivity issues.

If you want to access your local network when connected

  1. Tap the location server you want to use.
  2. Tap Edit.
  3. Enable the toggle next to Exclude private IPs.
  4. Add 10.64.0.0/10 to the Allowed IPs field.
  5. Tap Save and return to the location list.
  6. Toggle the location server that you edited off and then on.

On-demand activation

Enable this option if you are experiencing frequent disconnections or if you want to ensure that the VPN service is always active.

  1. Tap the location server you want to use.
  2. Tap Edit.
  3. Scroll down to the end.
  4. Enable Cellular or Wi-Fi or both.

Is it working?

While on your device, visit am.i.mullvad.net to get a quick overview of your Mullvad-WireGuard connection status. It's a good time to check if your browser is leaking information and therefore jeopardizing your privacy.

External resources

"WireGuard" is a registered trademark of Jason A. Donenfeld.