Apps & Setup

Download & get running in minutes.

WireGuard-based apps for every major platform. One account, up to 10 devices, full speed on all of them.

Download
Windows
v1.0 · Windows 10 / 11
RequirementsWindows 10 (64-bit) or later. Administrator access required for installation.
Download for Windows Setup guide →
macOS
v1.0 · macOS 12 Monterey+
RequirementsmacOS 12 Monterey or later. Apple Silicon and Intel supported.
Download for macOS Setup guide →
iOS
v1.0 · iOS 15+
RequirementsiOS 15 or later. iPhone and iPad supported.
Download on App Store Setup guide →
Android
v1.0 · Android 8+
RequirementsAndroid 8.0 (Oreo) or later.
Download on Google Play Setup guide →
Linux
v1.0 · Ubuntu, Debian, Fedora
RequirementsUbuntu 20.04+, Debian 11+, or Fedora 35+. WireGuard kernel module required.
Download for Linux Setup guide →
Router
DD-WRT · OpenWRT · pfSense
RequirementsRouter firmware with WireGuard support. Protects every device on your network from one install.
Router setup guide
Setup guides
1
Download the installer
Download the Windows installer above. Run it as Administrator — WireGuard requires admin access to create the network adapter.
2
Log in to your account
Open SecureTunnel and sign in with your account email and password. Your subscription is verified and your device is registered.
3
Choose a server and connect
Select a region from the server list. Click Connect. The kill switch activates automatically — if the VPN drops, your internet connection drops with it.
4
Verify your connection
Visit securetunnel.com — the IP bar at the top should show the IP of the server you connected to, not your home IP. Run a DNS leak test to confirm DNS is routing correctly.
1
Download and open the .dmg
Download the macOS package above. Open the .dmg and drag SecureTunnel to your Applications folder. On first launch, macOS may ask you to allow a System Extension — approve it in System Settings → Privacy & Security.
2
Log in
Sign in with your account credentials. Works natively on both Apple Silicon (M1/M2/M3) and Intel Macs.
3
Connect
Select a server and click Connect. SecureTunnel lives in your menu bar for quick access — you can connect, switch servers, and check your status without opening the full app.
4
Verify
Visit securetunnel.com and check the IP bar. Run a DNS leak test to confirm your queries are routing through our servers.
1
Download from the App Store
Tap "Download on App Store" above. Search for SecureTunnel if needed. Install the app on your iPhone or iPad.
2
Log in and allow VPN configuration
Sign in with your account. iOS will ask permission to add a VPN configuration — tap Allow. This is required for the app to create the WireGuard tunnel.
3
Connect
Select a server and tap Connect. The VPN icon appears in your status bar when connected. Enable "Connect on demand" in settings to automatically reconnect whenever you leave WiFi.
1
Download from Google Play
Tap "Download on Google Play" above. Install SecureTunnel on your Android device.
2
Log in and grant permissions
Sign in with your account. Android will ask permission to set up a VPN connection — tap OK. This is a standard Android permission required for all VPN apps.
3
Connect and verify
Select a server and tap Connect. A key icon in your notification bar confirms the VPN is active. Enable "Always-on VPN" in Android network settings for automatic reconnection.
1
Install WireGuard
Ensure WireGuard is installed: sudo apt install wireguard (Ubuntu/Debian) or sudo dnf install wireguard-tools (Fedora).
2
Download the SecureTunnel CLI or GUI
Download the Linux package above. The GUI is available as an AppImage — make it executable with chmod +x SecureTunnel.AppImage and run it. The CLI is available for headless server setups.
3
Log in and download your config
Sign in with your account. Download the WireGuard configuration file for your chosen server region from the account dashboard.
4
Connect
Use the GUI to connect, or via CLI: sudo wg-quick up /path/to/securetunnel.conf. To disconnect: sudo wg-quick down /path/to/securetunnel.conf.
1
Confirm WireGuard support
Router-level setup requires firmware with WireGuard support. Confirmed compatible: DD-WRT (build 45000+), OpenWRT 21.02+, pfSense 2.5+, OPNsense 21.1+, Asus Merlin, GL.iNet routers.
2
Download your WireGuard config
Log in to your SecureTunnel account and download the WireGuard configuration file for your chosen server region. This file contains your private key — keep it safe.
3
Import into your router
Navigate to your router's VPN or WireGuard section. Import the configuration file or manually enter the peer details. The exact steps vary by firmware — consult your router's documentation.
4
Verify and test
Connect a device to your router's network and visit securetunnel.com. The IP bar should show the VPN server's IP, not your ISP's. Run a DNS leak test to confirm.

Router installation protects every device on your network.

A router-level setup means your smart TV, gaming console, and any device that can't run a VPN app is still protected — without installing anything on each device individually.

It counts as one simultaneous connection regardless of how many devices are behind it. For households or small offices, this is often the most practical setup.

Compatible router firmware

  • DD-WRT (build 45000 or later)
  • OpenWRT 21.02 and later
  • pfSense 2.5 and later
  • OPNsense 21.1 and later
  • Asus Merlin firmware
  • GL.iNet routers (built-in WireGuard)