Adding Your Laptop or Phone as a WireGuard Peer

Network
Updated
2 views

Why add a personal peer?

Once your phone or laptop is a peer on your private network, you can reach Private Homelab VPSes (Home Assistant, Pi-hole, Vaultwarden, Immich…) from anywhere on the internet, securely, without exposing them publicly.

Add a peer in the panel

  1. Open Network → Devices.
  2. Click Add Device, give it a name (e.g. "phone", "work-laptop").
  3. The panel generates a fresh keypair and assigns the next free address from your subnet.
  4. Download the .conf file or scan the QR code displayed.

Install WireGuard on your device

  • iOS — WireGuard on the App Store. Tap + → Create from QR code and scan the panel QR.
  • Android — WireGuard on Play Store. Same QR flow.
  • Windows — download the official client from wireguard.com/install, click Add Tunnel → Import, choose the .conf.
  • macOS — install WireGuard from the Mac App Store, drag the .conf in.
  • Linux — place the .conf at /etc/wireguard/wg0.conf and run wg-quick up wg0.

Verify the connection

With the tunnel up, ping any private server:

ping 10.42.0.1

Back in the panel, the device row shows Last handshake ticking up — that confirms a successful encrypted connection.

Routing options

By default each peer config only routes traffic for your private subnet through the tunnel; everything else uses your normal internet. If you want all traffic to go through the network (full tunnel), tick Route all traffic when generating the config.

Security tips

  • Treat the .conf file like a password — anyone with it can join your network as that device.
  • If a phone is lost, click Revoke on the device in the panel. Its keys stop working immediately.
  • Click Regenerate on a device to issue a fresh keypair without changing the IP — useful when handing a device on to someone else.
Back to Knowledge Base