Support

Help & FAQ

Common questions about setting up and using your WirePath VPN. Can't find what you need? Email us and we'll get back to you quickly.

Looking for step-by-step installation instructions? See the Setup Guide for macOS, Windows, Linux, iPhone, and Android.

Getting started

Setup & config file

I didn't receive my config file ↓

Check your spam folder for an email from noreply@wire-path.com. Provisioning usually takes about 2 minutes. If it's been more than 5 minutes, email us and we'll resend it.

How do I re-download my config file? ↓

Sign in to your account dashboard at any time to download your .conf file and QR code again.

Where do I find my QR code again? ↓

Your QR code is in the original welcome email and is always available in your account dashboard. Sign in and click "Download config / QR code".

Can I use this on multiple devices at once? ↓

The config is set up for a single active connection at a time. You can import the same config on multiple devices, but only one should be connected simultaneously to avoid conflicts.

Connectivity

Connection problems

The VPN connects but I have no internet ↓

This usually means the server is still being provisioned. Wait 2–3 minutes after purchase and try reconnecting. If the problem persists after 5 minutes, contact us.

Still stuck? ↓

Email us at support@wire-path.com and include your platform (e.g. "Windows 11") and a brief description of what's happening. We'll get back to you quickly.

Advanced

Kill switch

A kill switch blocks all internet traffic if the VPN tunnel drops unexpectedly, so your real IP address is never exposed. Setup varies by platform — click yours below.

🐧 Linux ↓

The kill switch is implemented via iptables rules that run when the tunnel comes up and are removed when it goes down. Edit your config file, then restart the tunnel.

Step 1 — Open your config file

sudo nano /etc/wireguard/wirepath.conf

Step 2 — Add these two lines inside the [Interface] section

PostUp = iptables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT
PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT

Step 3 — Make sure your [Peer] section has IPv6 covered

AllowedIPs = 0.0.0.0/0, ::/0

If your config already has AllowedIPs = 0.0.0.0/0, just add , ::/0 to cover IPv6 leaks too.

Step 4 — Restart the tunnel to apply changes

sudo wg-quick down wirepath && sudo wg-quick up wirepath

Note: requires iptables

Most desktop distros include iptables by default. On systems that use nftables only (e.g. Debian 12+), install the compatibility layer: sudo apt install iptables

🪟 Windows ↓

WireGuard for Windows has a built-in kill switch option. No config file editing required.

  1. 1. Open the WireGuard app.
  2. 2. Select the wirepath tunnel in the left panel, then click Edit.
  3. 3. Check the box labelled "Block untunneled traffic (kill-switch)".
  4. 4. Click Save. The kill switch is now active whenever the tunnel is connected.

While the kill switch is enabled, all non-VPN traffic is blocked when the tunnel is up. Deactivating the tunnel restores normal internet access.

🍎 macOS ↓

The Mac App Store version of WireGuard runs in a sandbox and can't execute shell scripts, so it doesn't support PostUp/PreDown. You need to install WireGuard via Homebrew instead, which gives you the same wg-quick CLI used on Linux. The kill switch is then implemented using macOS's built-in pf firewall.

Step 1 — Install Homebrew and wireguard-tools

brew install wireguard-tools

Don't have Homebrew? Install it first from brew.sh.

Step 2 — Copy your config into place

sudo mkdir -p /etc/wireguard && sudo cp ~/Downloads/wirepath.conf /etc/wireguard/wirepath.conf && sudo chmod 600 /etc/wireguard/wirepath.conf

Step 3 — Add the kill switch lines to the [Interface] section

PostUp = /sbin/pfctl -e; echo "block drop all\npass quick on %i all\npass quick on lo0 all" | /sbin/pfctl -f -
PreDown = /sbin/pfctl -F all; /sbin/pfctl -d

Also confirm your [Peer] section has AllowedIPs = 0.0.0.0/0, ::/0.

Step 4 — Connect using wg-quick

sudo wg-quick up wirepath

To disconnect: sudo wg-quick down wirepath

Note: replaces existing pf rules

The PostUp command overwrites any active pf rules for the duration of the VPN session, and PreDown disables pf entirely. If you rely on other pf rules (e.g. a custom firewall setup), let us know and we can help you adapt this to use a pf anchor instead.

📱 iPhone / iPad (iOS) ↓

iOS does not support a true kernel-level kill switch for third-party VPN apps. The best alternative is On-Demand activation, which tells iOS to automatically reconnect the tunnel if it drops.

  1. 1. Open the WireGuard app and tap your tunnel name.
  2. 2. Tap Edit, then enable On-Demand Activation.
  3. 3. Choose to activate on Wi-Fi, Cellular, or both.

This keeps the tunnel running automatically and minimises exposure windows, but there is a brief gap between a drop and reconnect during which traffic uses your normal connection.

🤖 Android ↓

Android has a system-level "Block connections without VPN" setting that acts as a kill switch for all apps. Enable it alongside WireGuard's Always-on VPN for the strongest protection.

  1. 1. Go to Settings → Network & internet → VPN.
  2. 2. Tap the gear icon next to WireGuard.
  3. 3. Enable Always-on VPN.
  4. 4. Enable Block connections without VPN.

Menu names vary slightly by Android version and manufacturer. The path above applies to stock Android 12+.

Didn't find your answer?

Send us an email with your platform and a description of the issue. We typically reply within a few hours.

Email support@wire-path.com