wg

Check status of currently active interfaces

$ sudo wg

$ wg genkey

$ wg pubkey < [path/to/private_key] > [path/to/public_key]

$ wg genkey | tee [path/to/private_key] | wg pubkey > [path/to/public_key]

$ sudo wg showconf [wg0]

wg [command] [arguments]

wg is the configuration utility for WireGuard, a modern VPN tunnel. It manages WireGuard interfaces including key generation, peer configuration, and status monitoring.
WireGuard uses state-of-the-art cryptography and is designed to be simpler, faster, and more secure than traditional VPN protocols like OpenVPN or IPsec.

show

Show current configuration and status

Show configuration in config file format

Generate a new private key

Generate public key from private key on stdin

Generate a preshared key

Change configuration of an interface

Apply configuration from file

Add configuration from file

Requires root privileges for most operations. Private keys should be kept secure with restricted file permissions. Interface must be created (e.g., with ip link add) before configuration. For easier setup, consider using wg-quick.

wg-quick(8), ip(8)