Support

Who pays for the server?

You do, directly to your cloud provider. A Hetzner cpx11 costs roughly €4.35 per month with 20 TB of traffic included, and new accounts usually start with €20 of credit — about four months. That price is the provider’s and can change. OwnTunnel itself is free: no subscription, no in-app purchases, no ads, and we take no share of what you pay your provider.

How do I delete my server?

Log in to your cloud provider’s console — for Hetzner that is console.hetzner.cloud — open the project you used, and delete the server there. Servers created by the app carry the label owntunnel, so they are easy to spot. Deleting the OwnTunnel app does not delete your server, and a server keeps billing until you delete it. If setup was interrupted halfway, OwnTunnel asks about the leftover server at the next launch and can delete it for you.

Where is my configuration stored?

In the Keychain on your device, and nowhere else. The configuration (including your WireGuard private key) and your cloud API token are stored with the AfterFirstUnlockThisDeviceOnly protection class: not synchronised to iCloud Keychain and excluded from device backups, encrypted ones included. A third copy lives in a shared Keychain group so the VPN system extension — a separate process iOS requires to run the tunnel — can read it. Your data → Forget this configuration erases all of it, plus the VPN profile in system settings, and tells you if any part of that erasure failed.

Why scan a QR code?

Because copying a WireGuard configuration between devices by hand is where things break: a line break lost in the paste, a key truncated. If you already run a server, its configuration can be shown as a QR code (qrencode does it, and most WireGuard servers can produce one), and the scanner reads it in one shot. The camera frames are analysed on the device by the system’s QR detector — nothing is written to disk, saved to your photo library or sent anywhere, and if you decline camera access you can paste the configuration as text instead. There is no scanner on macOS: the system code detector does not work there, so the Mac app never asks for camera access.

Which platforms are supported?

iOS 16 or later and macOS 13 Ventura or later, from one codebase, using the official WireGuardKit. An Android version (8.0 and later) follows. On Windows and Linux there is no OwnTunnel app: export or scan the configuration and import it into the official WireGuard client, which speaks exactly the same standard. WireGuard is the only protocol, on purpose.

Something is not working

Check first that the server exists and is running in your provider’s console, that your API token has read and write scope, and that your cloud account has been verified — new accounts often cannot create anything until the provider verifies them. If the tunnel still refuses to come up, write to us with what you did and what you saw; there is no account for us to look up, so a description is all we have to work with.