WireGuard Config Generator

Road warrior setup — MikroTik as server, phones and laptops as clients

All keys are generated in your browser and never leave this page. Nothing is sent to any server, nothing is stored — reload and they are gone.

Server Settings (MikroTik)

Endpoint — public IP or DNS name

Listen port

Randomized — a non-default port keeps scanners quiet

Tunnel subnet

Router takes the first address, clients follow

Interface name

Client DNS

Leave empty to keep the device's own DNS

Use preshared keys — post-quantum hedge, generated and filled in on both sides automatically Add NAT rule — required for full-tunnel clients to reach the internet

+ Add Client

Client name

Tunnel mode

All traffic goes through the VPN

Clients

0 clients

No clients added yet

Name	Tunnel IP	Routed networks	Action

Paste into the RouterOS terminal