# WireGuard 315 Hacker News commenters recommended WireGuard and 62 criticized it, November 2025 to November 2026. It was recommended in 12 of 13 months; owners who said how long report a median of 5 years (3 owners). It meets the Hacker Approved badge rule. **Verdict:** A small, audited VPN that gives secure remote access to home networks and servers without a third party, though setup takes some learning and NAT traversal is limited. ## Why people recommend it - Private remote access without middlemen (8 comments): "You can have them assist with configuring and operating wireguard nearly as easily as you can have them walk you through Tailscale, eliminating the need for a middleman." ([source](https://news.ycombinator.com/item?id=46590564)) "We live in the age of Wireguard (and Nebula and Tailscale etc). Not being home is not an issue for accessing stuff at home in the slightest" ([source](https://news.ycombinator.com/item?id=49035679)) "Use any PC (even a Raspberry Pi or any cheap "thin client") with Wireguard and you remove Apple and Tailscale from the equation entirely" ([source](https://news.ycombinator.com/item?id=46260482)) - Invisible to unauthenticated connection attempts (5 comments): "The default setup is perfect - you set up your profiles, and the server doesn't respond if you try to connect with an invalid one." ([source](https://news.ycombinator.com/item?id=49310515)) "WireGuard is nice because, unlike most other services, it operates on UDP and sends no reply packet unless you know the key" ([source](https://news.ycombinator.com/item?id=47959458)) "If I were to lose the phone, I would simply revoke the Wireguard key and there wouldn't be anything valuable left on it." ([source](https://news.ycombinator.com/item?id=49059740)) - Simple, straightforward configuration (6 comments): "it is both convenient and secure. No maintenance or hardening is required, as Wireguard was intentionally designed not to require any tinkering." ([source](https://news.ycombinator.com/item?id=47106835)) "The only thing I see that would need a bit setup would be the wireguard vpn, but even that is pretty straightforward under FreeBSD" ([source](https://news.ycombinator.com/item?id=47581212)) "With the rise of wireguard (and tailscale I suppose), keeping things connected and private has never been easier." ([source](https://news.ycombinator.com/item?id=47300323)) - Small, audited, minimal codebase (5 comments): "WireGuard itself is a relatively small project at roughly 4,000 lines of code. It has been thoroughly audited and is even built into the Linux kernel." ([source](https://news.ycombinator.com/item?id=46358656)) "If you want a hard-to-use VPN with minimal features and minimal surface area, as you said, Wireguard is right there." ([source](https://news.ycombinator.com/item?id=49128977)) "Wireguard exemplifies the superiority of a qualified independent developer over the fractal layers of ossified cruft" ([source](https://news.ycombinator.com/item?id=47505578)) ## What people warn about - Setup still takes effort (3 comments): "I found good success with OpenWRT/Tomato and WireGuard. The interface is bad when it comes to provisioning but it can be done with a QR code" ([source](https://news.ycombinator.com/item?id=47618941)) "using wireguard is awesome, but I wouldn't say deploying and maintaining it lacks complexity exactly" ([source](https://news.ycombinator.com/item?id=50265698)) "Wireguard in particular took me a solid half a day to build understanding and get it configured." ([source](https://news.ycombinator.com/item?id=46371586)) - Trouble with NAT and dynamic endpoints (2 comments): "The hardest part with bare wireguard is one part really wants to be static, OR you have to re-init stuff and push DNS updates every time it updates." ([source](https://news.ycombinator.com/item?id=46561685)) "It's also entirely impossible to use by itself when both devices you're trying to connect are behind a NAT or some other restricted network." ([source](https://news.ycombinator.com/item?id=50025966)) - No crypto negotiation or AES option (3 comments): "It's unfortunate that WireGuard doesn't include a switch that if both sides agree the crypto in use would be AES and SHA256" ([source](https://news.ycombinator.com/item?id=47507357)) "there's no negotiation possible in the protocol; you're basically standing up a 'Wireguard 2.0' that runs separately" ([source](https://news.ycombinator.com/item?id=49926822)) "I kind of wish Wireguard looked more toward the future and had included AES as alternative to ChaCha20" ([source](https://news.ycombinator.com/item?id=46344454)) - Occasional routing and compatibility quirks (2 comments): "has been working somewhat perfectly for years, but there always are a couple of servers that just dont want to play nice" ([source](https://news.ycombinator.com/item?id=48925757)) "I've been having some weird routing issues with WireGuard, that seem to work differently based on the client" ([source](https://news.ycombinator.com/item?id=47988574)) ## Alternatives hackers recommend - [OpenVPN](https://hackerapproved.com/p/openvpn.md): 19 recommend - [AmneziaWG](https://hackerapproved.com/p/amneziawg.md): 6 recommend - [GotaTun](https://hackerapproved.com/p/gotatun.md): 5 recommend - [TrustTunnel](https://hackerapproved.com/p/trusttunnel.md): 5 recommend ## Cite as Hacker Approved, "WireGuard", https://hackerapproved.com/p/wireguard/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).