01 ~ 30 seconds
Sign up
Create your account with Google or email. No credit card. You'll land in the dashboard in under a minute.
Three simple steps to create the mesh, plus vendor-specific instructions for whatever hardware you have.
Connect your devices securely
and start building your mesh.
Create your account with Google or email. No credit card. You'll land in the dashboard in under a minute.
Click Add machine, give it a name (e.g. "branch-mumbai" or "office-router"), and we generate a WireGuard config tied to that machine.
Open the WireGuard section of your router or the official WireGuard app on your laptop / phone. Paste the config. The tunnel comes up within seconds.
Archer · Deco · ER series with WireGuard support.
RouterOS 7+. WireGuard is a first-class interface type.
19.07+ via LuCI or /etc/config/network. Wraps wg-quick.
UDM (firmware 3.x+) and EdgeRouter with the wireguard package.
OPNsense 22.1+ has WireGuard in core. pfSense 2.7+ as a package.
Use the official WireGuard app — it imports the .conf as-is.
Prerequisites, architecture, site-to-site connectivity, verification, and troubleshooting — all the context you need to configure your WireGuard routers seamlessly.
MeshWG operates as a hosted control plane for standard WireGuard. When you add a machine to your dashboard, MeshWG generates a WireGuard configuration. The private keys are returned once and are never retained server-side. MeshWG orchestrates the peer connections (endpoint IPs and routing tables) across your network. Your actual encrypted traffic is designed to flow directly peer-to-peer between your routers, utilizing relays only when direct UDP connections are blocked.
To connect two branch offices (e.g., sharing a subnet like 192.168.10.0/24), you do not need complex manual routing. In the dashboard, edit the machine representing your router and add its local subnet to its Advertised Routes. MeshWG will automatically update the AllowedIPs on all other authorized peers in your network to route traffic seamlessly.
Once you apply the WireGuard configuration to your device, verify the tunnel is active:
10.x.x.x) from another connected device on the mesh.If your tunnel fails to establish a handshake or pass traffic, check these common issues:
MeshWG is built around standard WireGuard cryptography. Private keys generated during setup are shown to you once and are not persisted server-side. Additionally, MeshWG employs a Zero Trust access model—machines cannot communicate with each other by default unless you explicitly create an Access Rule allowing the connection. Learn more in our technical documentation.
Most setups land in under 2 minutes. If yours doesn't, send a note with your router model and we'll walk it through with you — usually same day.