WireGuard or OpenVPN: which should you use?

TekLan VPN supports two VPN protocols: WireGuard and OpenVPN. Both encrypt everything between your device and the TekLan server, and both hide your real IP address from the sites you visit. Where they differ is how you set them up, which devices support them, and how they cope with networks that get in the way.

If you use a TekLan VPN app, you can switch between them in the app's settings. If you're setting up a router, NAS or another device through the VPN Dashboard, you choose when you create the profile.

Quick answer

• Use WireGuard wherever the device supports it. It's the default in the apps.
• Use OpenVPN when the device doesn't support WireGuard, or when WireGuard won't connect on a particular network.
• On a network that blocks both, try OpenVPN over TCP.

WireGuard

WireGuard is the newer of the two. A WireGuard profile is a short .conf file holding the device's own private key and the server details. That makes it the simplest to set up:

• No username or password on the device. The key in the file is the sign-in.
• QR codes. On a phone or tablet, scan the Dashboard's QR code in the WireGuard app and you're done.
• One-time codes. On a device with a browser but no easy way to receive a file, such as a TV browser, Steam Deck or Raspberry Pi, open dash.teklanvpn.com/get and enter a code from the Dashboard.

Because the key identifies the device, each WireGuard profile belongs on one device only. Copy the same profile onto two devices and they'll keep knocking each other offline. Make a profile for each device instead.

WireGuard runs over UDP. Most home and mobile networks are fine with that, but some hotel, workplace and public Wi-Fi networks block or interfere with it.

OpenVPN

OpenVPN has been around much longer and is supported by more equipment, especially older routers and NAS software. An OpenVPN profile is an .ovpn file plus a username and password.

• The username and password belong to the profile, not your account. You'll find them under Show OpenVPN credentials in the Dashboard. Never enter your TekLan VPN account password into a router or NAS.
• UDP or TCP. OpenVPN can run over UDP or TCP. TCP is the same kind of connection secure websites use, so it often gets through networks that block other VPN traffic, at the cost of some speed.
• Moving the file. Download it or email it to yourself from the Dashboard. One-time codes are for WireGuard profiles only.

Choosing by device

If a connection won't start

1. Try the other protocol: WireGuard to OpenVPN, or OpenVPN UDP to OpenVPN TCP.
2. Try a different location.
3. For a Dashboard profile, check you're using the newest one. If you made a replacement, the old file stops working.
4. Check the device's date and time. Encrypted connections fail when the clock is badly wrong.

The VPN not connecting help article has more fixes. Still stuck? Open a ticket with the device, protocol and location, and we'll help.

Frequently asked questions

Is one more secure than the other?

For everyday use, no. Both encrypt everything between your device and the server. Choose for speed and for what your network allows.

Which one is faster?

WireGuard is usually quicker and lighter on battery. The location you pick often makes a bigger difference than the protocol.

Does switching protocol use another connection?

No. A device uses one connection while it's connected, whichever protocol it uses.

Want the full picture on networks that fight back? Read our guide to which protocol to use on hotel Wi-Fi and mobile data, or get the apps from the apps page.