Immediate protection
WG Tunnel is intentionally designed for enhanced leak protection and reliability. As soon as you turn on your tunnel, you are protected. You can even turn on a tunnel when you have no network connection and it will automatically connect the moment you're online.
Learn how this works →Resolve endpoints first, leaking during resolution → never comes up if resolution fails.
Locks down traffic first (no leaks) → resolves endpoints in the background, retrying indefinitely.
Features
Auto-Tunneling
Tunnels automatically turn on, off, or switch based on your network conditions, fully customizable per network.
Kill Switch
A system-wide, tunnel-independent kill switch that blocks all traffic outside the tunnel, on both Android and desktop.
AmneziaWG Support
First class support for AmneziaWG 2.0 through 3.1 alongside standard WireGuard, for robust protection on restrictive networks.
Multihop
Nest any of your tunnels inside another, mixing WireGuard and AmneziaWG freely. The entry hop sees your real IP but not your traffic, and the exit hop sees your traffic but not your real IP.
Split & Encrypted DNS
Resolve DNS through the tunnel via plain DNS, DoT, or DoH, and optionally split resolution by domain suffix.
Local Proxy Mode
Expose any tunnel over a local SOCKS5 or HTTP proxy for individual apps or other devices to use.
Tunnel Recovery
Continuously monitors handshake health and automatically recovers from network switches, NAT issues, IPv4/IPv6 endpoint failures, and dynamic server IPs, all without restarting the VPN.
Fully Native, Everywhere
Android and desktop are both genuinely native apps with native performance. Desktop compiles to native executables, running the tunnel as a background service.
Open Source & Independent
Fully open source, with no telemetry, ads, or proprietary code. Funded entirely by small-dollar donations from the community, with no investors or corporate interests.