This guide will help you set up your Windows device to connect to your Algo VPN server.
- Windows 10 (all editions)
- Windows 11 (all editions)
- Windows Server 2016 and later
WireGuard is the recommended VPN protocol for Windows clients due to its simplicity and performance.
- Download and install the official WireGuard client for Windows
- Locate your configuration file:
configs/<server-ip>/wireguard/<username>.conf - In the WireGuard application, click "Import tunnel(s) from file"
- Select your
.conffile and import it - Click "Activate" to connect to your VPN
- QR Code: If you have access to the QR code (
wireguard/<username>.png), you can scan it using a mobile device first, then export the configuration - Manual Entry: You can create a new empty tunnel and paste the contents of your
.conffile
While Algo supports IPsec/IKEv2, it requires PowerShell scripts for Windows setup. WireGuard is strongly recommended instead.
If you must use IPsec:
- Locate the PowerShell setup script in your configs directory
- Run PowerShell as Administrator
- Execute the setup script
- The VPN connection will appear in Settings → Network & Internet → VPN
This is a common error that occurs when trying to connect. See the troubleshooting guide for the solution.
- Check Windows Firewall: Ensure Windows Firewall isn't blocking the VPN connection
- Verify Server Address: Make sure the server IP/domain in your configuration is correct
- Check Date/Time: Ensure your system date and time are correct
- Disable Other VPNs: Disconnect from any other VPN services before connecting
- DNS Not Working: Check if "Block untunneled traffic (kill-switch)" is enabled in tunnel settings
- Slow Performance: Try reducing the MTU in the tunnel configuration (default is 1420)
- Can't Import Config: Ensure the configuration file has a
.confextension
- Use WireGuard: It's significantly faster than IPsec on Windows
- Close Unnecessary Apps: Some antivirus or firewall software can slow down VPN connections
- Check Network Adapter: Update your network adapter drivers to the latest version
To exclude certain traffic from the VPN:
- Edit your WireGuard configuration file
- Modify the
AllowedIPsline to exclude specific networks - For example, to exclude local network: Remove
0.0.0.0/0and add specific routes
To connect automatically:
- Open WireGuard
- Select your tunnel
- Edit → Uncheck "On-demand activation"
- Windows will maintain the connection automatically
You can import multiple .conf files for different Algo servers. Give each a descriptive name to distinguish them.
- Keep your configuration files secure - they contain your private keys
- Don't share your configuration with others
- Each user should have their own unique configuration
- Regularly update your WireGuard client for security patches
- Check the main troubleshooting guide
- Review WireGuard documentation
- Create a discussion for help