Help

WireGuard or OpenVPN: which should I use?

TekLan VPN supports two VPN protocols, WireGuard and OpenVPN. Both encrypt everything between your device and the VPN server; they differ in how they connect and which networks let them through.

Short answer: Use WireGuard unless your network blocks it. If you are on hotel, office or school Wi-Fi that stops the VPN connecting, switch to OpenVPN, ideally over TCP. The TekLan VPN apps include both, so you can change in VPN settings at any time.
The difference

Two good protocols, built differently

  • WireGuard

    Modern and compact. It is usually quicker to connect, lighter on battery and copes well when your phone moves between Wi-Fi and mobile data. It uses UDP, which a few restrictive networks block.

  • OpenVPN

    Long established and very flexible. It runs over UDP or TCP; over TCP it looks much like ordinary secure web traffic, so it gets through networks that block other VPN traffic. It can be a little slower.

Which to choose

A simple rule of thumb

  • Everyday use

    WireGuard. It is the default in the apps for good reason.

  • The VPN will not connect

    OpenVPN over TCP. In the iPhone, iPad and Mac apps from 4.4.0, OpenVPN over TCP uses port 443, the same port as secure websites.

  • Apple TV and Vega OS

    WireGuard: it is the only protocol those apps use.

  • Routers and NAS boxes

    Whichever your firmware supports. The Dashboard creates a profile for either.

How to switch

In the apps, or with a Dashboard profile

In the TekLan VPN apps: open VPN settings › Protocol (VPN protocol on Android), choose WireGuard or OpenVPN, and reconnect. Apple TV and Vega OS use WireGuard only.

Without the app: in the VPN Dashboard, add a device and choose WireGuard (a QR code, a .conf file or a one-time device code) or OpenVPN (an .ovpn file with its own username and password). Each device’s setup guide shows the steps.

The browser extensions use neither: they connect with ProxTek, TekLan’s encrypted connection for browsers, which protects that browser only.

Questions

Frequently asked

Which is more secure?

Both are secure when set up properly, and TekLan VPN uses current settings for each. Choose for speed and for what your network allows, not for security.

Why will WireGuard not connect on some Wi-Fi?

Some networks only allow web traffic and block UDP, which WireGuard uses. Switch to OpenVPN over TCP on that network.

Can I use WireGuard on one device and OpenVPN on another?

Yes. Each device chooses its own protocol.

Related