The client

Answers about the Paart client on iPhone, iPad and Mac.

You have — or can get — a WireGuard configuration: a .conf file, or a QR code from your server’s admin interface. Paart imports it and connects.

• Adding your first connection

  What a WireGuard configuration is, and the two ways to get one into Paart.

• Keeping your private key safe

  The one line in your configuration that is a credential rather than a setting.

• When the tunnel will not connect

  A handshake that never completes almost always has one of five causes.

• DNS, routing and split tunnelling

  Deciding what travels through the tunnel, and who answers your name lookups.

• Split DNS: the right resolver for each network

  A VPN usually replaces your resolver for the whole machine. Split DNS sends each domain to the network that knows it, and leaves the rest alone.

• Running several WireGuard tunnels at once on a Mac

  On a Mac, Paart can keep several WireGuard connections up together, each carrying its own routes. Here is what that does, and what it rests on.

• Connecting automatically

  Rules that bring the tunnel up on the networks where you want it.