Most WireGuard clients are written for the person who set up the server. WireGuide is the rare one built for the person who just got handed a .conf file and told to get online.
That positioning is the whole pitch. A cross-platform WireGuard VPN client running on macOS 15+ and Windows 11, it’s a Go 1.25+ app wrapped in Wails v3 with a Svelte frontend. Young at 75 stars with an MIT license, it’s still actively shipped — v0.4.2 dropped on July 27, 2026.
WireGuide’s three-step onboarding actually means it
The README promises three steps: drag the config in, click On, done. In my hands-on pass on macOS, that held up. I dropped a test .conf into the window, the tunnel appeared in the list, and one click on the big toggle connected it. No terminal, no wg-quick, no manual route editing. Honestly, that whole flow took me under five minutes from install to an active tunnel.
Beyond the toggle, the tray icon shows connection state at a glance, and the drag-drop import also accepts QR codes and ZIP archives — useful if your team distributes configs as a bundle.
| Feature | WireGuide | Typical open-source WG clients |
|---|---|---|
| Drag-drop .conf import | ✅ (also QR / ZIP) | Partial |
| Automation by network (SSID / subnet / router MAC) | ✅ built-in | Rare |
CLI for scripting (wireguide ctl) | ✅ | Some |
| Kill switch | ✅ OS-native (pf / WFP / nftables) | Varies (userspace shims) |
| Config editor w/ syntax highlighting | ✅ (CodeMirror 6) | Some |
| Account / telemetry | ❌ none | Often none |
WireGuide’s automation is the feature I didn’t expect to like
Beyond the one-click toggle, WireGuide ships per-tunnel Automation: connect or disconnect a tunnel based on which network you’re on — by Wi-Fi SSID, subnet, or the router’s MAC address, with rules ordered by priority. The example in the docs is exactly the real-world case: kill the work VPN when you’re home, keep it on elsewhere.
The CLI covers the same ground, so it’s scriptable. Yet it’s simple enough for anyone: wireguide ctl dnsleak checks for leaks outside the tunnel; wireguide ctl routes dumps the OS routing table. That makes it usable by both the click-it-on person and the one who wants to automate the whole thing.
What runs quietly underneath matters more
The parts you never see are where this project earns its keep. Sleep/wake recovery brings the tunnel back after the lid closes. When you hop between Wi-Fi and Ethernet, a route monitor keeps it working. Health check and auto-reconnect fix a stalled handshake without you noticing. And there’s also a kill switch built on the OS-native firewall — pf on macOS, WFP on Windows, nftables on Linux — not a userspace packet filter that can fail open.
Architecture is deliberately boring: the GUI runs unprivileged, a small helper runs as root, and they talk over a Unix socket or named pipe. Nothing is exposed over HTTP or the network.
That engine is current too. WireGuide is built on wireguard-go from May 2025 — the README notes it sits 57 commits ahead of the WireGuard engine inside the official macOS app, which hasn’t been updated since February 2023. On a privacy tool, that gap between “current crypto” and “shipped crypto” is worth paying attention to.
What to watch out for
Still, WireGuide is early. Thirteen open issues, a small community, and only macOS and Windows tested so far — Linux appears in the firewall code but not in the release assets. The binaries are unsigned, so Windows SmartScreen will warn you on install, and macOS may flag the app until you clear it. Worth knowing before you roll it out to a team.
If you’re comparing it to a full wireguard install guide or wondering how the protocol stacks up against commercial options, our WireGuard vs OpenVPN vs IKEv2 comparison covers the protocol side. WireGuide is purely a cleaner front door to the WireGuard you already run.
Bottom line
WireGuide is the WireGuard client for people who don’t want to manage WireGuard. The drag-and-drop onboarding, network-aware automation, and OS-native kill switch make it a genuinely good desktop WireGuard GUI for macOS and Windows — and it’s free, MIT-licensed, and telemetry-free. It’s young and the signing situation is rough, but for a small team handing out configs, that trade is easy to make.