# WireGuard Easy

> A WireGuard VPN server with a web interface to add clients and show QR codes

Category: Self hosted apps (https://aiarabicdev.com/self-hosted)
Canonical page: https://aiarabicdev.com/self-hosted/wg-easy
Tags: vpn, wireguard, networking, docker, remote-access

WireGuard Easy (wg-easy) packs a WireGuard server and a web admin into one container. You create a client, scan the QR code on your phone, and you are connected to your home network. It is AGPL-3.0 licensed.

## Facts

- Licence: AGPL-3.0
- Language: TypeScript
- Cost: Free and open source
- Self hostable: yes
- Added: 2026-10-25
- Last checked: 2026-10-25

## Links

- Website: https://wg-easy.github.io/wg-easy/latest/
- Source: https://github.com/wg-easy/wg-easy

## WireGuard without editing key files

WireGuard is a fast, modern VPN built into the Linux kernel, but setting it up by hand means generating key pairs and writing a config per device. wg-easy does that part: the web interface lists clients, shows who is connected and how much traffic they used, and gives each one a QR code or a downloadable config.

It suits a classic hub setup: one server at home, phones and laptops that dial in to reach the home network or to route all their traffic through it on public Wi-Fi. If you do not want any open port at all, a mesh VPN such as Tailscale is the other route.

## What running it involves

It is very light on RAM and CPU. It needs the NET_ADMIN capability and the WireGuard kernel module, which modern Linux kernels include, and it keeps its state in one folder that you should back up.

The trade off is exposure. Clients reach the server through a UDP port that must be open on your router, which means port forwarding and a public IP or dynamic DNS. WireGuard stays quiet on that port, but the admin interface itself must never be published: keep it on the LAN or reach it over the VPN.

## Reach for it when

- you want a VPN back to your home network that you fully control
- you prefer QR codes over hand written WireGuard configs
- you can open one UDP port on your router

## Watch out for

- it needs a forwarded UDP port and a reachable public address, which CGNAT connections may not have
- it is a hub, not a mesh, so traffic between remote devices goes through your home server
- the web admin controls every key, so it must stay off the internet

---

aiarabicdev is a free directory of open source tools. No affiliate links, no sponsored placements.
New entries are announced at https://t.me/arabic_Intelligence