WireGuard is a modern, high-performance VPN built into your EvoSeedbox. It encrypts all traffic between your devices and your seedbox, giving you privacy, security, and the ability to access seedbox services as if you were on the same local network. Every EvoSeedbox plan includes WireGuard with two peer slots — one for your phone and one for your computer.
Why Use WireGuard on Your Seedbox? #
- Privacy — All traffic between your device and seedbox is encrypted
- Access local services — Reach apps like Plex, Sonarr, and Radarr through their local ports
- Bypass restrictions — Route your internet traffic through your seedbox’s connection
- Fast — WireGuard is significantly faster than OpenVPN with less CPU overhead
- Simple — One config file or QR code to set up on any device
How It Works #
Here’s how WireGuard connects your devices to your seedbox:
YOUR DEVICES YOUR SEEDBOX
────────── ──────────
┌──────────────┐ ┌──────────────────────────┐
│ 📱 Phone │ │ WireGuard Server │
│ Peer 1 │──── Encrypted ────▶│ UDP Port 51820 │
│ 10.13.13.X │ Tunnel │ 10.13.13.1 │
└──────────────┘ │ │
│ ┌─────────┐ ┌────────┐ │
┌──────────────┐ │ │ Plex │ │ Sonarr │ │
│ 💻 Laptop │ │ │ :32400 │ │ :8989 │ │
│ Peer 2 │──── Encrypted ────▶│ └─────────┘ └────────┘ │
│ 10.13.13.Y │ Tunnel │ ┌─────────┐ ┌────────┐ │
└──────────────┘ │ │ Radarr │ │Jellyfin│ │
│ │ :7878 │ │ :8096 │ │
Both can connect │ └─────────┘ └────────┘ │
simultaneously! └──────────────────────────┘
Each user gets a private VPN IP address on the 10.13.13.0/24 subnet. Your phone and laptop each get their own IP, and both can be connected at the same time. All traffic between your devices and the seedbox is encrypted end-to-end using modern cryptography (ChaCha20, Curve25519).
Prerequisites #
- An active EvoSeedbox account (any plan)
- The WireGuard app on your device (download here)
Step 1: Install WireGuard on Your Seedbox #
If WireGuard isn’t already installed on your seedbox, you can install it with one click from the client area:
- Log in to your EvoSeedbox Client Area at client.evoseedbox.com
- Navigate to Services > click on your active seedbox plan
- Scroll down to the Apps section — you’ll see a grid of available applications
- Find WireGuard (described as “An extremely simple yet fast and modern VPN”)
- Click the Install button on the WireGuard card
- Wait for the installation to complete — this usually takes 1-2 minutes. The button will change from “Install” to Open once ready
Here’s the flow of what happens behind the scenes when you click Install:
INSTALLATION FLOW
─────────────────
You click "Install"
│
▼
┌─────────────────────┐
│ Seedbox provisions │
│ your 2 peer slots │
│ in the shared VPN │
└─────────┬───────────┘
│
▼
┌─────────────────────┐
│ Keys auto-generated │
│ • Private key │
│ • Public key │
│ • Pre-shared key │
│ (per peer) │
└─────────┬───────────┘
│
▼
┌─────────────────────┐
│ Config files created │
│ • peer1.conf │
│ • peer2.conf │
│ • QR codes (PNG) │
│ • ZIP downloads │
└─────────┬───────────┘
│
▼
┌─────────────────────┐
│ Button changes to │
│ "Open" — ready! │
└─────────────────────┘
Configuration files sync automatically every hour. If you just installed WireGuard, your configs will be ready within minutes.
Step 2: Get Your WireGuard Configuration #
There are three ways to access your WireGuard configuration. Each gives you the same config files — choose whichever is most convenient.
Option A: From the Client Area (Recommended for First Setup) #
After installation, click Open on the WireGuard app card in your client area. You’ll see a rich configuration panel:
CLIENT AREA — WireGuard Panel
═══════════════════════════════════════════════════
┌─────────────┬─────────────┐
│▶ Peer 1 │ Peer 2 │ ◀── Peer tabs
└─────────────┴─────────────┘ (green = active)
┌───────────────────────────┐
│ │
│ ▓▓▓▓▓▓▓▓▓▓▓▓▓ │
│ ▓▓ QR CODE ▓▓ │ ◀── Scan with phone
│ ▓▓▓▓▓▓▓▓▓▓▓▓▓ │
│ │
│ "Scan with WireGuard │
│ mobile app" │
└───────────────────────────┘
┌───────────────────────────┐
│ [Interface] │
│ PrivateKey = xK3p... │ ◀── Config text
│ Address = 10.13.13.5/32 │ (dark terminal
│ DNS = 1.1.1.1 │ style box)
│ │
│ [Peer] │
│ PublicKey = Yb2m... │
│ Endpoint = srv:51820 │
│ AllowedIPs = 0.0.0.0/0 │
└───────────────────────────┘
┌──────────────┐ ┌──────────────┐
│ 📋 Copy │ │ 📥 Download │
│ Config │ │ ZIP │
└──────────────┘ └──────────────┘
(green) (blue)
- Peer Tabs — Switch between Peer 1 and Peer 2 (the active peer tab is highlighted in green)
- QR Code — Scannable QR code displayed at the center. Perfect for setting up your phone in seconds
- Configuration Text — Your full WireGuard config in a dark terminal-style box with green monospace text
- Copy Config button (green) — Copies the configuration to your clipboard. Briefly changes to “Copied!” to confirm
- Download ZIP button (blue) — Downloads a ZIP containing the
.conffile and QR code PNG image
Tip: Use Peer 1 for your mobile device (scan the QR code) and Peer 2 for your desktop/laptop (download the ZIP or copy the config).
Option B: From ruTorrent #
If you’re already logged into ruTorrent, you can access your WireGuard config directly from the toolbar:
- Look for the WireGuard shield icon in the ruTorrent toolbar:
- 🟢 Green shield = WireGuard installed, config ready
- ⚪ Grey shield = Not installed or config not yet synced
- Click the green shield icon to open the WireGuard VPN panel
- The panel shows the same interface as the client area: peer tabs, QR code, config text, Copy Config, and Download ZIP buttons
Option C: Direct HTTPS Download #
Your configuration ZIP files are also available as direct downloads:
https://YOUR-SERVER.myseedbox.site/private/peer1.zip
https://YOUR-SERVER.myseedbox.site/private/peer2.zip
Replace YOUR-SERVER with your actual server hostname (shown in your dashboard). You’ll be prompted for your seedbox username and password. Each ZIP contains a .conf file and a QR code PNG image.
Step 3: Set Up on Your Device #
iOS / iPhone #
- Install WireGuard from the App Store
- Open the app and tap “+” then “Create from QR code”
- Scan the QR code from your client area or ruTorrent panel (use Peer 1)
- Name the tunnel (e.g., “EvoSeedbox”)
- Allow the VPN configuration when prompted
- Toggle the switch to connect
Android #
- Install WireGuard from Google Play
- Open the app and tap “+”
- Choose “Scan from QR code”
- Scan the QR code from your client area or ruTorrent panel
- Name the tunnel and tap “Create Tunnel”
- Toggle the switch to connect
For split tunneling on Android (route only seedbox traffic through VPN), see our Split Tunneling with WireGuard on Android guide.
Windows #
- Download and install WireGuard from wireguard.com
- In the client area, click Download ZIP on the Peer 2 tab
- Extract the ZIP file — you’ll find a
.conffile inside - Open WireGuard and click “Import tunnel(s) from file”
- Select the
.conffile - Click “Activate” to connect
Alternative: Click Copy Config in the client area, then in WireGuard click “Add Tunnel” > “Add empty tunnel” and paste the configuration directly.
macOS #
- Install WireGuard from the Mac App Store
- Download the Peer 2 ZIP from the client area and extract the
.conffile - Open WireGuard and click “Import tunnel(s) from file”
- Select the
.conffile - Click “Activate” to connect
Linux #
- Install WireGuard tools:
# Debian/Ubuntu
sudo apt install wireguard
# Fedora
sudo dnf install wireguard-tools
- Copy the config from the client area (click Copy Config) and save it:
sudo nano /etc/wireguard/evoseedbox.conf
# Paste the config and save (Ctrl+O, Enter, Ctrl+X)
- Connect and manage:
# Start the VPN
sudo wg-quick up evoseedbox
# Stop the VPN
sudo wg-quick down evoseedbox
# Check connection status
sudo wg show
# Auto-start on boot
sudo systemctl enable wg-quick@evoseedbox
Understanding Your Configuration #
Whether you view it in the client area’s dark terminal panel or open the .conf file, your WireGuard configuration has two sections:
YOUR CONFIG FILE EXPLAINED
══════════════════════════════════════════════════
[Interface] ◀── YOUR DEVICE SETTINGS
──────────────────────────────────────────────────
PrivateKey = xK3p... Your secret key (never share!)
Address = 10.13.13.5/32 Your VPN IP address
DNS = 1.1.1.1 DNS while connected (Cloudflare)
[Peer] ◀── SEEDBOX SERVER SETTINGS
──────────────────────────────────────────────────
PublicKey = Yb2m... Server's public key
PresharedKey = aF9x... Extra encryption layer
Endpoint = srv:51820 Server address + UDP port
AllowedIPs = 0.0.0.0/0 What traffic goes through VPN
PersistentKeepalive = 25 Keep connection alive (seconds)
The AllowedIPs Setting — Full VPN vs Split Tunneling #
The most important setting to understand is AllowedIPs. It controls what traffic goes through the VPN tunnel:
FULL VPN (default) SPLIT TUNNEL
AllowedIPs = 0.0.0.0/0 AllowedIPs = 10.13.13.0/24
Your Device Your Device
│ │
│ ALL traffic ├── Seedbox traffic ──▶ VPN Tunnel
│ │ (10.13.13.*)
▼ │
VPN Tunnel └── Everything else ──▶ Normal Internet
│ (browsing, YouTube,
▼ streaming, etc.)
Seedbox
│
▼
Internet
✅ Maximum privacy ✅ Best speed for browsing
✅ Your IP = seedbox IP ✅ Only seedbox apps use VPN
⚠️ All traffic routed ✅ No bandwidth impact
through seedbox ⚠️ Your IP unchanged for
non-seedbox traffic
To switch to split tunneling, edit the AllowedIPs line in your config before importing, or modify it in the WireGuard app settings after import:
# Change from:
AllowedIPs = 0.0.0.0/0
# To:
AllowedIPs = 10.13.13.0/24
For a detailed Android-specific guide, see Split Tunneling with WireGuard on Android.
Verifying Your Connection #
Once connected, verify the VPN is working:
CONNECTION VERIFICATION CHECKLIST
═════════════════════════════════
1. WireGuard App Status
├── Shows "Active" ✓
├── Latest handshake: < 2 minutes ago ✓
└── Transfer: ↑ and ↓ show data ✓
2. IP Address Check (full VPN only)
└── Visit whatismyip.com
└── Shows seedbox IP, not your home IP ✓
3. Ping Test
└── Terminal: ping 10.13.13.1
└── Getting replies ✓
4. Service Access
└── Open Plex/Sonarr/Radarr via VPN IP
└── Apps load normally ✓
Using Both Peers Simultaneously #
Each EvoSeedbox account comes with two peer slots. These are completely independent — you can have both connected at the same time from different devices:
RECOMMENDED PEER SETUP
══════════════════════
Peer 1 (Mobile) Peer 2 (Desktop)
┌────────────────────┐ ┌────────────────────┐
│ 📱 Phone / Tablet │ │ 💻 Laptop / PC │
│ │ │ │
│ Setup: QR Code │ │ Setup: Import file │
│ IP: 10.13.13.X │ │ IP: 10.13.13.Y │
│ │ │ │
│ Best for: │ │ Best for: │
│ • On-the-go access │ │ • File management │
│ • Quick Plex check │ │ • ruTorrent access │
│ • Public Wi-Fi │ │ • Full workflow │
└────────────────────┘ └────────────────────┘
Both connect to the same seedbox simultaneously ✓
Both peers appear as separate tabs in the client area and ruTorrent panel, each with their own QR code, config, and download link.
Troubleshooting #
Connection Times Out / No Handshake #
Symptom: WireGuard shows “Handshake did not complete” or the connection hangs with no data transfer.
Fixes:
- Make sure UDP port 51820 is not blocked by your local network or firewall. Some corporate networks and public Wi-Fi block UDP — try switching to mobile data to test
- Double-check your configuration. In the client area, use the Copy Config button rather than manually selecting text to avoid copying errors
- Verify your seedbox is online by checking your dashboard
Connected But No Internet #
Symptom: WireGuard shows connected with a recent handshake, but websites don’t load.
Fixes:
- Try changing the DNS in your config to
8.8.8.8(Google) or9.9.9.9(Quad9) - If you only need seedbox access, switch to split tunneling by changing
AllowedIPsto10.13.13.0/24 - On some networks, MTU issues cause this. Try adding
MTU = 1280under the[Interface]section of your config
QR Code or Config Not Showing #
Symptom: The WireGuard panel in the client area or ruTorrent shows empty tabs or no config data.
Fix: WireGuard configurations sync automatically every hour after installation. If you just installed WireGuard, wait up to one hour and refresh the page. In ruTorrent, the shield icon will turn from grey to green once the config is ready. If it persists after an hour, open a support ticket.
“Install” Button Instead of “Open” #
Symptom: The client area still shows “Install” even though you already installed WireGuard.
Fix: Refresh the page — the app status updates periodically. If it still shows “Install” after several minutes, the installation may have failed. Try clicking Install again or contact support.
Only One Peer Available #
Symptom: You see Peer 1 but not Peer 2, or only one tab appears.
Fix: Each user gets two peer slots. If one is missing, the hourly peer sync may not have completed yet. Wait for the next sync cycle. If both peers don’t appear after a few hours, contact support.
Tips & Best Practices #
- Use Peer 1 for mobile, Peer 2 for desktop — Both can be connected simultaneously from different devices
- Auto-connect on untrusted Wi-Fi — In the WireGuard mobile app, enable on-demand activation for untrusted networks for automatic protection
- Keep your config private — Your configuration contains your private key. Never share it publicly or post it online
- Split tunneling for speed — If you don’t need full VPN, use split tunneling (
AllowedIPs = 10.13.13.0/24) to keep your regular browsing at full speed - VPN keys are independent — Changing your seedbox password does NOT affect your WireGuard config. The VPN uses its own keypair
- Bookmark your client area — The easiest way to re-download your config anytime is from the client area’s WireGuard panel. No SSH or technical knowledge needed
- Check connection stats — The WireGuard app shows real-time transfer stats and last handshake time. If the handshake is older than 3 minutes, the tunnel may be inactive