Master da Web

YOUR PROJECT + OUR INFRASTRUCTURE

WireGuard VPN VPS

A VPS with WireGuard VPN pre-installed · By wg-easy

Popular

A fixed point for your network, in the cloud.

Your own WireGuard VPN: add clients in the wg-easy panel and connect phones by QR code, already installed on your VPS.

  • A dedicated public IPv4 and a server that is always on
  • VPN, remote access and network management under your control
  • A firewall in the panel to open only the ports you need

from R$49.90/mo

Deploy nowTalk to a specialist

Pay with Pix, bank slip or card · You choose the location and the plan on the next screen. Nothing is charged until you confirm.

Ready in minutes

Automatic provisioning once the order is confirmed.

24/7 support

Our own team, by chat and ticket.

Pick the right plan for WireGuard VPN

Every plan includes public IPv4 and IPv6, NVMe storage and a 1 Gbps uplink. Click one to reach the checkout with everything filled in.

How to size your project

Most network tools use little CPU and memory; what weighs is the number of devices and connections and, for VPNs and relays, traffic. Start with the recommended plan and watch usage.

See every plan at checkout →

How to order WireGuard VPN

  1. Pick a plan

    vCPU, memory and disk sized for your project. You can grow it later without reinstalling.

  2. Confirm the order

    Pix, bank slip or card. Nothing is charged until you confirm, and you have a 7-day guarantee.

  3. WireGuard VPN ready in minutes

    The server comes up with WireGuard VPN installed and configured. Access details appear in the panel.

What to use a WireGuard VPN VPS for

Some of the most common uses. The server is yours — run whatever you like on it.

  • Give home-office staff access to systems that only accept authorised addresses
  • Have a known outbound IP, the VPS's IPv4, to allow on firewalls, ERPs and admin panels
  • Protect browsing on hotel or airport Wi-Fi by going out through a server you trust
  • Let contractors in for a limited time, with an expiry date, and switch off just the lost phone

More about the Linux VPS →

WireGuard VPN VPS specifications

Virtualisation
KVM, virtual server with your plan’s resources
vCPU
1 to 48
Memory
1 GB to 192 GB
Storage
NVMe, 30 GB to 2 TB
Network
1 Gbps, public IPv4 and IPv6 included; DDoS protection available
Datacenters
Belo Horizonte (Brazil) · Dallas (USA)
System
WireGuard VPN, pre-installed
Management
Web panel, API and MCP, VNC console, snapshots, backups and firewall
Billing
Monthly, quarterly, semi-annual or annual (discounted); Pix, bank slip or card
Support and guarantee
24/7, 7-day money-back guarantee

About WireGuard VPN

With your own VPN, your devices connect through a server that belongs to you rather than through a third-party service. WireGuard is the modern, lean VPN protocol built into the Linux kernel, and wg-easy is the open source web panel that makes that VPN server manageable from a browser: you add a client for each person or device, show its QR code, and the phone connects through the WireGuard app.

It is the VPN for people working from home who need to reach systems that only accept approved addresses, for teams that want a known exit IP to allow in firewalls and ERPs, and for anyone on hotel or airport Wi-Fi who wants their traffic encrypted up to a server they trust. Each client can be disabled, given an expiry date (handy for contractors) or deleted, and the panel shows who is connected and how much traffic each one has moved.

On a VPS, the VPN is entirely yours: the keys stay on your server, the exit IP is the VPS's dedicated IPv4, and there is no per-user fee, because WireGuard and wg-easy are open source. Lost a phone? Disable that one client in the panel and leave everyone else connected.

At Master da Web, the server comes up with wg-easy 15 (pinned) on Debian 13, with the panel behind Caddy over HTTPS with an automatic certificate. The administrator is created during installation, before the panel is reachable, so nobody can claim it before you: the login (admin) and the generated password arrive in the welcome e-mail with the VPN endpoint (the server's IP, port 51820/UDP), and are also kept in /root/wg-easy.txt, which only root can read. Devices get the IP as their endpoint, so the tunnel never depends on DNS, and use the DNS servers 1.1.1.1 and 1.0.0.1, which you can change in the panel.

The rest is your call: creating the clients, sending all traffic through the VPN or only traffic for certain networks, pointing your own domain at the panel and deciding when to update. Two honest notes: the tunnel carries IPv4 only (devices' IPv6 is dropped inside the VPN rather than leaving outside it), and a VPN of your own does not make anyone anonymous, because browsing leaves with your server's IP.

Software features

  • Web panel to create, edit, enable and disable VPN clients
  • QR codes to connect phones with the WireGuard app (Android and iOS)
  • .conf files for Windows, macOS and Linux, or a single-use 5-minute link
  • Per-client expiry dates for contractors and temporary access
  • See who is connected and each device's traffic right in the panel
  • Routes (Allowed IPs) and DNS adjustable for every client or just one
  • Two-factor authentication (TOTP) for the panel login
  • wg-easy 15 pinned to its version, behind Caddy with automatic HTTPS
  • Administrator created at installation, password in the welcome e-mail
  • VPN on UDP port 51820 of the server's IP: the tunnel never depends on DNS
  • Open source: no licence and no per-user fee

Requirements

Platform minimum

Memory
1 GB
Storage
30 GB

Below this the order is refused — the checkout raises the disk for you automatically.

Recommended for production

vCPU
2 vCPU
Memory
2 GB
Storage
30 GB

What we would put it on, not a limit.

What your WireGuard VPN gets at Master da Web

Manage infrastructure from one panel: security, recovery, connectivity and growth. Check prices and availability when configuring your server.

  • Snapshots

    Take a snapshot of WireGuard VPN before a risky update and roll back to it with one click, without reinstalling anything.

  • Automatic backups

    Scheduled copies of the whole server, kept off the host. Restore the complete WireGuard VPN whenever you need to.

  • Managed firewall

    Rules by port and source, applied from the panel, no iptables editing. Open only what WireGuard VPN needs.

  • Security Center

    Continuous external scanning of your server, with findings prioritised and the fix spelled out for each one.

  • Private network (VPC)

    Connect WireGuard VPN to databases and other servers over an isolated network with nothing exposed to the internet. With a VPN Gateway for remote access.

    About the VPC →

  • DDoS protection

    Volumetric attack mitigation for your WireGuard VPN server. Check protection options and prices when ordering.

    DDoS protection →

  • Grow without reinstalling

    Add vCPU, memory and disk from the panel and pay only the difference, and WireGuard VPN stays exactly as it is.

  • API and MCP for automation

    Create, resize and manage servers through the public API — or straight from an AI assistant, over MCP.

    API documentation →

Deploy WireGuard VPN now

Related applications

Know what to expect from day one.

Ready infrastructure, with the freedom to configure your application your way.

01

With your VPS

Your chosen image installed, the plan’s resources and a panel to manage the server. Administrative access is provided after provisioning.

02

Configure for your business

The tool comes up installed and you get the access details when the server is ready. You configure clients, devices, rules and the firewall to fit your network.

03

Expand when you need to

Backups, snapshot capacity, DDoS protection, private networking and other features are available as you need them. Check prices and availability when configuring your server.

You administer the system and application, including updates and data. For help with configuration or management, talk to our team about the scope of support.

FAQ

Frequently asked questions