About wg-easy
WireGuard Easy (wg-easy) combines a WireGuard VPN server and a web-based admin interface into a single package for Linux hosts. The web UI lets you list, create, edit, delete, enable and disable VPN clients, show a client's QR code, and download its configuration file. It is written in TypeScript and released under the AGPL-3.0 license.
Monitoring and security options include connection statistics, transmit and receive charts for each client, Prometheus metrics, client expiration, one-time links, two-factor authentication, OIDC sign-in with providers such as Google, GitHub, Authelia and Authentik, and per-client firewall filtering that requires iptables. The interface supports light and dark modes, multiple languages, IPv6 and CIDR. Installation uses Docker Compose, docker run or Podman, and the documentation covers reverse proxy setups with Caddy and Traefik as well as a migration guide from older versions.
Key features
- WireGuard server with a web admin UI
- Client QR codes and config downloads
- Per-client traffic charts and connection status
- Client expiration and one-time links
- Two-factor and OIDC sign-in support
- Prometheus metrics and IPv6 support
Good fit for
- →Personal VPN on a home server or VPS
- →Managing a small team's WireGuard clients
- Built with
- TypeScript
- Tags
- wireguard
- vpn
- self-hosted
- docker
- web-ui
- networking
- oidc
- homelab
wg-easy: questions and answers
- What is wg-easy used for?
- wg-easy is a Docker-friendly tool that bundles a WireGuard VPN server with a web UI for managing clients on a Linux host. It is a good fit for personal VPN on a home server or VPS and managing a small team's WireGuard clients.
- Is wg-easy open source?
- Yes. wg-easy is open source under the AGPL-3.0 licence. Its source code is on GitHub at wg-easy/wg-easy and is written mainly in TypeScript.
- Is wg-easy free?
- Yes. wg-easy is open source, so the software itself is free to use.
- Can I self-host wg-easy?
- Yes. wg-easy can be self-hosted on your own server or infrastructure; there is no official hosted version.
- What is wg-easy an alternative to?
- wg-easy is an open-source alternative to NordVPN, ExpressVPN, Tailscale and Proton VPN. Other open-source alternatives to NordVPN include Headscale, OpenVPN and IPsec VPN Server.
- Is wg-easy actively maintained?
- Yes. The most recent commit to wg-easy was on 30 September 2026, and the latest release is v15.4.0, published on 14 August 2026. The project has 27k stars on GitHub.
Open-source alternatives to wg-easy
See allHeadscale
Networking & VPN
An open source, self-hosted implementation of the Tailscale control server
BSD-3-Clausevs Tailscale★ 44k
OpenVPN
Networking & VPN
OpenVPN is an open source VPN daemon
OSSvs NordLayer★ 15k
IPsec VPN Server
Networking & VPN
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-gene
OSSvs ExpressVPN★ 7.1k
NetBird
Networking & VPN
Connect your devices, users, and agents into a secure WireGuard®-based overlay network wit
OSSvs Tailscale★ 30k
Netmaker
Networking & VPN
Securely connect your devices, clouds, and sites with Netmaker's Zero Trust platform.
OSSvs Tailscale★ 12k
Defguard
Networking & VPN
Zero-Trust access management with true WireGuard® 2FA/MFA
OSSvs Tailscale★ 2.9k
SaaS alternatives to wg-easy
See all
NordVPN
Networking & VPN
Consumer VPN service with threat protection, double VPN and meshnet
SaaS
ExpressVPN
Networking & VPN
Consumer VPN service with apps for desktop, mobile, routers and browsers
SaaS
Tailscale
Networking & VPN
Mesh VPN and zero trust network that connects devices without manual configuration
SaaS
Proton VPN
Networking & VPN
VPN service from Proton with a no-logs policy and a free tier
SaaS
Private Internet Access
Networking & VPN
Consumer VPN service with a large server network and configurable privacy settings
SaaS
NordLayer
Networking & VPN
Business VPN and network access security for remote and hybrid teams
SaaS

