Skip to content
Get Real IP Docs

Windows Setup

This guide covers running the WireGuard tunnel on a Windows PC. Your static IP will be assigned directly to the machine running the WireGuard client.

Prerequisites

Section titled “Prerequisites”
  • Windows 10 or later
  • Your Get Real IP WireGuard config downloaded from the dashboard

Install WireGuard

Section titled “Install WireGuard”

Download the official WireGuard client from wireguard.com/install.

Run the installer — no additional configuration needed.

Import the config

Section titled “Import the config”
  1. Open the WireGuard app
  2. Click Import tunnel(s) from file (or press Ctrl+O)
  3. Select the .conf file you downloaded from the dashboard
  4. The tunnel will appear in the left sidebar

Activate the tunnel

Section titled “Activate the tunnel”

Click Activate on the tunnel. The status should change to “Active” within a few seconds.

Verify your public IP by opening a browser and visiting:

https://api.ipify.org

Or from PowerShell:

Terminal window
curl.exe -4 https://api.ipify.org

It should match the static IP shown in your dashboard.

Start on boot (optional)

Section titled “Start on boot (optional)”

To have the tunnel activate automatically when Windows starts:

  1. In the WireGuard app, go to Edit → Global settings (or click the gear icon)
  2. Check Launch application on system startup
  3. On the tunnel itself, check Activate tunnel on application launch

Alternatively, you can run WireGuard as a Windows service:

Terminal window
# Run as Administrator
wireguard /installtunnelservice "C:\path\to\getrealip.conf"

This installs a system service that starts the tunnel before any user logs in.

Windows Firewall

Section titled “Windows Firewall”

When you activate the tunnel for the first time, Windows may prompt you to allow WireGuard through the firewall. Click Allow.

Your static IP is now reachable from the internet — make sure Windows Firewall is configured to only expose the ports you intend. By default, Windows blocks most inbound connections, which is what you want.

To allow a specific port (e.g. a game server on port 25565):

  1. Open Windows Defender Firewall with Advanced Security
  2. Click Inbound Rules → New Rule
  3. Select Port → TCP or UDP → enter the port number
  4. Allow the connection
  5. Name it something descriptive

Troubleshooting

Section titled “Troubleshooting”

Tunnel shows “Active” but my IP doesn’t change:

  • Make sure you’re checking with curl.exe -4 https://api.ipify.org (not a browser that may be using IPv6)
  • Check that AllowedIPs in the config includes 0.0.0.0/0

“Unable to create WireGuard adapter”:

  • Run WireGuard as Administrator
  • Reboot if you recently installed — the driver sometimes needs a restart

Handshake fails (no latest handshake shown):

  • Verify your network allows outbound UDP on port 51834
  • Some corporate networks and hotspots block non-standard UDP ports — try a different network to confirm