Server ready, now the devices. The Untangle app hands every client its setup in two forms — a config file for computers and a QR code for phones. Here is the clean onboarding flow for both, plus the test most people skip.
In the video, client setup takes the last two minutes — because the firewall does the hard part. What follows is that same flow written down carefully: tunnel on the server first, config second, honest test last. Follow it in this order and the first client is also the easiest client.
Illustrative panel — the Remote Client view is where every client config and QR code comes from. Example addresses are illustrations.
Every client begins life on the server side. In the WireGuard app, open the Tunnels tab and click Add. Name the tunnel after the person and the device — Ramesh-Laptop, not Tunnel-2 — because in six months this list is your audit record. Save it, and the tunnel now exists with its own address and keys, waiting for its device.
wireguard.com — the official site only.The whole phone onboarding takes about a minute — which is exactly why the QR code must be guarded: that minute works for anyone holding a photo of it.
A laptop tested on office Wi-Fi can appear to work even with a broken setup, because it never really left the building. Do the honest test: on the phone, turn Wi-Fi off and connect over mobile data; on a laptop, use a phone hotspot. Then open an office-only resource — a shared folder or an internal server page. If it loads, the full chain works: internet, firewall, tunnel, access rules. If the tunnel shows a handshake but nothing loads, you are in the access-rules case — the fix guides in this series cover it.
Watch the client being added and connected live at the end of the full setup video.
▶️ Watch Full VideoFrom the official site, wireguard.com — it is free. Avoid third-party download portals; a VPN client is the worst possible place for a bundled installer.
Use the text configuration from the same Remote Client view: on the phone, the WireGuard app can also import from a file or clipboard. Enlarging the QR code on screen and raising screen brightness fixes most scan failures.
You can, but understand what you are sending: the file is the credential itself. A private message to the right person is normal practice; a group chat or a shared mailbox is not. If a file ever goes to the wrong place, delete that tunnel and issue a fresh one.