Provisional name — work in progress

A digital veil over your connection.

A WireGuard VPN that is safe by design: no connection logs, a RAM-only control service (nothing is ever written to disk), a private key generated on the fly and never retained. A ready-to-use config in one click, to import into the official WireGuard app — available on Windows, macOS, Linux, Android and iOS.

Password-protected access — no self-service signup. To get it, contact me through whatever channel you already know me by. Limited to 20 devices connected at the same time. A connection idle for more than an hour is automatically disconnected to free up a slot.

Your configuration

This configuration is shown only once and is not stored anywhere on the server. Download it or scan the QR code now.

WireGuard configuration QR code

No logs

Neither the server nor the registration service keeps a connection history, IP address, or timestamp. The VPN service's technical logs live in RAM only and vanish on reboot. As a security hygiene measure, any config left inactive for more than 7 days is automatically deleted server-side.

Private key never stored

Your private key is generated at request time, returned once in the encrypted (HTTPS) response, then immediately forgotten. It is never written to any file or log.

Isolated network

The Voile tunnel runs on its own network, separate from the rest of the infrastructure: internet access only, no access to other internal services.

Official WireGuard

No custom app to install: Voile relies on the official, open-source, audited WireGuard app, available on every platform.

Mandatory tunnel, in and out

The generated config routes all of your traffic (0.0.0.0/0, ::/0) exclusively through the WireGuard tunnel — no split-tunnel mode is offered. For a hard guarantee if the tunnel drops, also enable your platform's kill switch (on Android: Settings → Network → VPN → ⚙ icon → "Block connections without VPN").

Official WireGuard app