owntunnel

WireGuard · iOS & macOS

Own your tunnel.

OwnTunnel builds a WireGuard server inside your own cloud account in about two minutes. No account, no logs, no telemetry — your traffic goes from this device to a machine you own, and never passes through anything we operate.

Coming to the App StoreiOS 16+ and macOS 13+. Free, no ads, no in-app purchases.

OwnTunnel is not a VPN service. It is the tool that builds you one.

How it works

Three steps, about ninety seconds.

  1. Token

    Create a read/write API token in your own cloud account and paste it in. It is kept in the Keychain on this device and sent to your provider — to nobody else.

  2. Location

    Pick a country. Both key pairs are generated on the device, the server is created in your account, and WireGuard is installed on it.

  3. Connect

    The tunnel comes up and your traffic leaves the network from your own machine. Already run a server? Scan its QR code or paste its configuration instead.

What is not here

There is no middle to look from.

Every VPN app asks you to trust a stranger with all of your traffic. The good ones publish audits about what they promise not to keep. OwnTunnel removes the question instead: we run no servers, so there is nothing for us to keep, hand over, sell or lose.

  • No accountNo sign-in, no email address, no password, no phone number.
  • No logsNot “we delete them” — there is no server of ours for your traffic to pass through.
  • No telemetryNo analytics, no crash reporting, no advertising, no third-party SDKs of any kind.
  • Keys stay putConfiguration and private key live in the device Keychain, marked device-only: never synced to iCloud, left out of backups.
  • Open sourceThe claims above are meant to be checkable line by line. The repository is not public yet; it will be.
The mark is the diagram. Traffic enters on the left, goes through a tunnel that belongs to you, and leaves no trail behind it on our side — because there is no our side.

Honest about cost

The app is free. The server is not.

A server costs money, and we would rather say so here than after you have tapped something. The bill is your cloud provider’s, addressed to you, in your own account — we never touch it and take no cut of it.

  • ServerAbout €4.35 per month for a Hetzner cpx11, 20 TB of traffic included. The provider’s price, not ours; it can change.
  • First monthsNew Hetzner accounts usually start with €20 in credit — roughly the first four months, before you pay anything.
  • Billed byYour cloud provider, directly to you. Deleting the app does not delete the server; delete it in your provider’s console when you are done.
  • The appFree. No subscription, no in-app purchases, no ads, no paid tier.

Referral links, plainly: when a referral programme is in effect, opening a cloud account through our link earns OwnTunnel a small service credit from the provider — credit that pays for our own test servers, not a commission taken from you. The app says so on the same screen, before you tap, and offers a plain link that earns us nothing right beside it. Today those links are plain links: we are not enrolled in any referral programme yet.

What to expect

A tunnel, not a magic trick.

A VPN changes where your traffic leaves the network. It is not anonymity, and it is no protection against an adversary who can watch both ends. What OwnTunnel gives you is a tunnel whose far end you own, instead of one that belongs to somebody selling you a promise.

WireGuard only, on purpose. iOS 16 or later and macOS 13 or later; an Android version follows. Windows and Linux users can import the configuration OwnTunnel produces into the official WireGuard client. On the Mac, configurations are pasted rather than scanned — macOS has no QR reader to offer.

Questions, or something broken? Support and FAQ.