Adding Your Laptop or Phone as a WireGuard Peer

Why add a personal device?

Once your phone or laptop is on your private network, you can reach your HomeLab VPS servers (Home Assistant, Pi-hole, Vaultwarden and so on) from anywhere, securely, without exposing them publicly.

Add a device in the panel

Open the Network page. Click Manage Network on a VPS's Networking page, open it from your All Services list, or search for private network.
Click Add Device, enter a Device Name (e.g. "phone", "work-laptop") and pick a Device Type.
The panel creates a new key pair and assigns the next free address in your subnet.
Choose Download .conf File, Scan QR Code or Copy to Clipboard. The config is shown only once, so save it now.

Install WireGuard on your device

iOS — WireGuard on the App Store. Tap + → Create from QR code and scan the panel QR.
Android — WireGuard on Google Play. Same QR flow.
Windows — download the official client from wireguard.com/install, click Add Tunnel and choose the .conf file.
macOS — install WireGuard from the Mac App Store and import the .conf file.
Linux — save the .conf as /etc/wireguard/wg0.conf and run wg-quick up wg0.

Verify the connection

With the tunnel up, ping the private address of one of your servers, for example:

ping 10.42.0.1

Back in the panel, the device's Last Seen time updates, which confirms a working encrypted connection.

Routing

The config only sends traffic for your private network through the tunnel. Everything else uses your normal internet connection.

Security tips

Treat the .conf file like a password. Anyone with it can join your network as that device.
If a device is lost, open its Actions menu and choose Disable (you can turn it back on later) or Remove Device.
Choose New config… then Generate new config to issue fresh keys with the same IP. The old config stops working. This is useful if a config may have been copied, or when handing a device on to someone else.