From a profile to a connection.
A careful first-device checklist for supported WireGuard clients.
1. Enroll the device
In Devices, choose a friendly label and declared platform. Your browser creates the keypair locally and sends only the public key. Wait for confirmed provisioning. The private configuration is shown only for this enrollment and is not saved for later download.
2. Import safely
Install a supported official WireGuard client for your operating system. Import the downloaded configuration or scan its local QR code on your own device. Treat either as a secret. Dunivra never emails a private configuration.
3. Check the path
Enable the tunnel in the WireGuard client. Confirm a recent handshake, DNS diagnostic and applied policy revision in Dunivra. A registered profile alone does not prove protection. Test a known domain rule and allow for DNS cache lifetime.
Replace a lost configuration
Revoke or rotate the old profile and generate a new local keypair. A browser management page cannot turn on the system VPN for you. A shared router profile remains one peer unless individual routed clients are supported.