The default setting for the WireGuard configuration generator to create keys automatically for you. The private key is never transmitted to our servers and is protected since it's generated automatically in your browser. The public key is always stored on our servers as it used to authenticate you when connecting.
However, you might want to generate the keys yourself in case:
- You don't trust us to generate the private key for you.
- You already have generated a key for your device before, but we have added additional VPN servers after that time, and you want to access the new servers.
- You already have generated a key for your device before, but did not download configuration files for all VPN servers, and now you want to connect to a new server.
The configuration generator allows you to enter a public key. If you do that, you will need to edit the downloaded configuration files manually to enter your private key. A downloaded configuration file might look as follows:
[Interface]
PrivateKey = ___PRIVATE_KEY___
Address = 172.99.28.25/32, fd00:0000:0000:0000:1111:1111:2e41:7214/128
DNS = 46.227.67.134, 192.165.9.158
[Peer]
PublicKey = JwXrcvj+GT0/OgeYZxFfHoBPhY3CmVX4jKYI21VdNS0=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn84.prd.sundsvall.ovpn.com:9929
Note that the PrivateKey field is incorrect. You will need to input your private key there, so it looks something like this:
PrivateKey = kB3vUVXnt75LGaSX9P0Amz2T7sS9NntoT74oRflXtlo=
The private key used in this article is just an example--it needs to be replaced with your own private key.