Set up the NetOz VPN on iPhone and iPad with WireGuard

You can connect an iPhone or iPad to your organisation's NetOz managed VPN in about a minute. The quickest way is to scan the QR code on your setup page with the WireGuard app. This guide also covers what to do if you only have the one device and cannot scan your own screen.

Before you start

• Find the setup email NetOz sent you on behalf of your organisation. Its subject starts with the name of your VPN, followed by "set up" and the name of the device.
• Check that the link is for this iPhone or iPad. Each device gets its own link. Setting up two devices from one link stops both from connecting.
• The easiest method is to open the setup link on a computer or second screen and scan the QR code with your phone.

Step 1 Install WireGuard from the App Store

Open the App Store, search for WireGuard and install the free app from WireGuard Development Team. It is the official app linked from wireguard.com/install.

Step 2 Open your setup link on another screen

Open the setup email on a computer, tablet or other screen and select the link. The setup page shows:

• An On a phone section with a QR code.
• An On a computer section with a download button.
• A What you'll be able to reach list of the networks the VPN carries.

If the page says This link is no longer valid, your device or access has been removed or replaced. Ask your administrator to send a new link.

Step 3 Scan the QR code in WireGuard

Open WireGuard on your iPhone or iPad and tap +, or Add a tunnel if this is your first tunnel. Choose Create from QR code. Your setup page calls this option "Scan from QR code", and it is the same thing.

Allow WireGuard to use the camera if asked, then point it at the QR code on your setup page.

When the code is recognised, WireGuard asks you to name the tunnel. Use something you will recognise, such as the name of your organisation, and tap Save.

Step 4 Allow the VPN configuration

iOS asks whether WireGuard may add VPN configurations. Tap Allow, then confirm with Face ID, Touch ID or your passcode.

The tunnel now appears in the WireGuard app.

Step 5 Switch the VPN on

Tap the switch next to the tunnel to turn it on. A VPN indicator appears in the status bar or Control Centre.

Tap the tunnel name to see more detail. After a few seconds there should be a Latest handshake time and data counters under Data received and Data sent. A recent handshake means you are connected to the NetOz VPN server.

You can also switch the VPN on and off in Settings, under VPN.

Step 6 Check you can reach work systems

Open the internal app or website your organisation uses over the VPN. If it loads, you are all set.

Only one device? Import the file instead

If you can only open the setup email on the iPhone or iPad itself, you cannot scan the QR code shown on the same screen. Instead:

1. On the setup page, use the Download button in the On a computer section to save the .conf file to the Files app.
2. In WireGuard, tap + and choose Create from file or archive.
3. Select the downloaded .conf file, then allow the VPN configuration as in Step 4.

Delete the downloaded file from Files afterwards. It contains your device's private key.

How the NetOz VPN behaves on iPhone and iPad

Only work traffic uses the VPN. NetOz configurations are split tunnels. Only traffic to the addresses under What you'll be able to reach goes through the tunnel. Everything else, including Safari, social apps, streaming and calls, uses your normal Wi-Fi or mobile data. The VPN indicator shows even though most of your traffic is not using the tunnel.

Battery and data. WireGuard is light on battery. The configuration sends a small keep-alive every 25 seconds while the tunnel is on, so it stays connected when you move between networks. You can switch it off when you do not need work systems.

DNS stays the same. The configuration does not change your DNS servers. If a company hostname will not load, try the IP address your administrator gave you.

When things change

• The setup page says the network changed: your organisation updated the VPN. Delete the old tunnel in WireGuard, then scan the new QR code from the same link.
• New phone: ask your administrator to add the new phone as a device so it gets its own link, and to remove the old one. Do not restore the old tunnel onto the new phone.
• Deleted the app: reinstall WireGuard and scan the QR code from your original link again. The link keeps working while the device is active.

Next steps

• Troubleshooting the NetOz WireGuard VPN
• Set up the NetOz VPN on Android
• Set up the NetOz VPN on a Mac