Gateway on macOS

1. Install WireGuard from the Mac App Store.
2. On the Gateway page, choose Generate keys in my browser, keep Phone or computer selected, then choose Download .conf. The file lands in Downloads as pb-gateway-device.conf.
3. In WireGuard, choose Import Tunnel(s) from File and pick pb-gateway-device.conf. Allow the VPN configuration when macOS asks.
4. Select the imported tunnel and choose Activate.

The file needs no editing. The [Interface] section looks like this:

[Interface]
PrivateKey = <your private key>
Address = 203.0.113.25/32
DNS = 1.1.1.1, 9.9.9.9
MTU = 1320

Check it worked

• In WireGuard, the tunnel shows a Latest handshake a few seconds ago.
• Open ifconfig.me in a browser. It shows your Gateway.
• The Gateway page shows connected.

Things to know

• IPv6 is not carried. The config routes IPv4 only, so a Mac with IPv6 keeps using its own IPv6 address outside the tunnel. Sites reached over IPv6 see your normal address, and ifconfig.me may show the IPv6 one.
• The QR code holds your private key. The macOS app has no QR scanner, so use the file. To set up a phone instead, scan the code from another screen and do not share a screenshot of it.
• Running a server on the Gateway? If the macOS firewall is on, allow the app to accept incoming connections. See Run a server or app on your Gateway.
• To disconnect, choose Deactivate. Your normal connection returns.