An advanced, open-source client for WireGuard and AmneziaWG.
WG Tunnel is a desktop client for WireGuard and AmneziaWG with advanced features like auto-tunneling based on network conditions, deferred endpoint bootstrapping for leak-free startup, a system-wide kill switch, split/encrypted DNS, local SOCKS5/HTtP proxy mode, and full AmneziaWG 2.0+ support for censorship resistance.
What's new:
- Improve Windows tunnel slow starts
- Location permission and Wi-Fi SSID agent for auto-tunnel on macOS
- Fixes for macOS app docking behavior
- Fixes for proxy mode with custom tunnel DNS
- Support for tunneled VMs on macOS
Changelog
✨ New Features
- 249b25b - lang: New Crowdin updates for it, pl (PR #62 by @zaneschepke)
- 26b8c35 - in-app locale selector (commit by @zaneschepke)
🐛 Bug Fixes
- 46abba3 - windows: AV apps flag encoded ps commands (commit by @zaneschepke)
- 3c9a283 - tunnel bootstrap dns wiring, updated screenshot (commit by @zaneschepke)
- 5303ce0 - kill switch LAN bypass ranges (commit by @zaneschepke)
- 8652cd7 - macos: ssid read agent with permissions (PR #80 by @zaneschepke)
- 8e0970d - macos: graalvm build for wifi-agent (commit by @zaneschepke)
- f80da36 - macos: bump core for macos Wi-Fi ssid fixes (commit by @zaneschepke)
- fa02878 - macos: wifi-agent build, registration, and gui/daemon sync (commit by @zaneschepke)
- 8b14dfa - macos: dock behavior (commit by @zaneschepke)
♻️ Refactors
- 0e1dac8 - macos: agent naming and icon (commit by @zaneschepke)
- ebf2d12 - macos: simplify location permission prompt and flow (commit by @zaneschepke)
🔧 Chores
- 38a17ed - deps: bump gradle wrapper to 9.8.0 (commit by @zaneschepke)
- a81ee44 - deps: bump actions, ktor, ksp, slf4j, compose plugin, lang3 (commit by @zaneschepke)
- 25b7e34 - release v2.4.1 (commit by @zaneschepke)
| Publisher | Zane Schepke |
|---|---|
| Version | 2.4.1 |
| Release date | 2026-10-17 |
| License | MIT |
| Installer type | nullsoft |
| Architecture | x64 |
| Package ID | WGTunnel.WGTunnel |
winget install --id=WGTunnel.WGTunnel -ewinget upgrade --id=WGTunnel.WGTunnel -ewinget uninstall --id=WGTunnel.WGTunnel -e"wgtunnel-2.4.1-win-x64-nsis.exe" /SWG Tunnel adds this command to the command line: wgtunnel.
What's new:
- Multihop tunnel in a tunnel support
- SOCKS4 support, especially for Windows clients
- Bugfixes for kill switch LAN bypass
- Tunnel group UX improvements
- Bugfix for macOS suspend handshake issues
- Windows tunnel start optimizations
- Various other fixes and improvements
Changelog
✨ New Features
- 2ba4fa2 - multihop and socks4 proxy support (commit by @zaneschepke)
🐛 Bug Fixes
- 3a7501e - kill switch LAN bypass private networks firewall permit (commit by @zaneschepke)
- a19595f - windows: bump core for windows kill switch sublayer fix (commit by @zaneschepke)
- 2e32f26 - windows: bump core for windows powershell optimizations (commit by @zaneschepke)
♻️ Refactors
- 8854f3c - simplify apt repository install, switch to wget (commit by @zaneschepke)
- 1e14692 - add donation prompt on update (commit by @zaneschepke)
- 6927223 - ui: entry picker, groups, dropdown menus (commit by @zaneschepke)
- e0aeb3a - switch to update all to prevent full resave (commit by @zaneschepke)
🔧 Chores
- 89e2dac - update README, add brew directions (commit by @zaneschepke)
- ee722b4 - release 2.4.0 (commit by @zaneschepke)
Full Changelog: 2.0.2...2.1.0
Yes. WG Tunnel is free and open-source software released under the MIT license.
The latest version is 2.4.1, released on Oct 17, 2026.
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 01d5da2159abfbf46f06b26e1f07a5fab9a4d2d32e07564303ca8cb5a821d217.
WG Tunnel runs on Windows and is available for 64-bit (x64) systems.
Run the offline installer with "wgtunnel-2.4.1-win-x64-nsis.exe" /S, or install it with Windows Package Manager: winget install --id=WGTunnel.WGTunnel -e --silent.
Open Settings › Apps › Installed apps, find WG Tunnel and select Uninstall. From the command line, run winget uninstall --id=WGTunnel.WGTunnel -e.
Other VPN programs for Windows from different developers.
Tailscale is a WireGuard based mesh VPN, used to connect your computers and other devices together securely without proxies.
Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
Speedtest tool for Cloudflare Warp
WireSock Secure Connect CLI is the command-line interface version of the advanced WireGuard VPN client for Windows. It provides powerful CLI capabilities for VPN management and automation.
Cross-platform, unofficial CLI for Cloudflare Warp
Amnezia VPN is an open-source VPN client, with a key feature that enables you to deploy your own VPN server on your server.