Windows
Download WireGuard 1.1.1 for Windows.
Download WireGuard 1.1.1 for Windows if you need the current WireGuardNT client. It was tagged on 20 September 2026. The amd64 MSI and the x86 MSI are 3.3 MB each. The arm64 MSI is 2.9 MB. The license is MIT. Supported systems are Windows 10, Windows 11, and Server 2016, 2019, 2022, and 2025.
Updated . Version date .
Files for 1.1.1
The installer executable selects the MSI for this PC, checks the signature and the hash, and then runs it. Administrators who deploy with Group Policy can take the MSI directly. The MSI property DO_NOT_LAUNCH skips opening the window after setup.
| Machine | File | Size | Action |
|---|---|---|---|
| This PC | wireguard-installer.exe | Selects the MSI, then checks signature and hash | Download Windows installer 1.1.1 |
| 64-bit Intel or AMD | wireguard-amd64-1.1.1.msi | 3.3 MB | Download amd64 MSI 1.1.1 |
| ARM64 | wireguard-arm64-1.1.1.msi | 2.9 MB | Download arm64 MSI 1.1.1 |
| 32-bit x86 | wireguard-x86-1.1.1.msi | 3.3 MB | Download x86 MSI 1.1.1 |
System requirements
You need a Windows edition from the project list and a configuration from a peer you are allowed to join. The client does not include that peer.
- Windows client
- 10 and 11. Server 2016, 2019, 2022, and 2025.
- CPU
- amd64, arm64, or x86. Use the matching MSI.
- Privilege
- An administrator installs the service and the adapter. Network Configuration Operators can get a limited tray UI only when that registry option is set.
- Network
- UDP to the peer endpoint. 51820 is the usual example listen port, not a requirement.
- Config
- A .conf file or a .zip of configs. 1.1.1 rejects duplicate tunnel names in one import.
Version history
Notes below are tied to the Windows git history and to published file sizes. If a tag message is only a version bump, that is all this timeline claims.
-
1.1.1
- Go 1.27.1.
- Translations updated from Crowdin.
- The UI updates the blocking state when Table is off.
- Import rejects duplicate tunnel names.
- The embeddable C# service fixes the allowed-IP layout.
- A new Interface section clears a pending peer.
- Comments survive a save. Work dated 14 July 2026 in this cycle.
- ::0 endpoints are handled.
- A hash mark in PreUp, PreDown, PostUp, and PostDown values is kept.
- The driver adapter is released when the tunnel stops.
- amd64 and x86 MSIs are 3.3 MB. The arm64 MSI is 2.9 MB.
-
1.1
Tag message is the version bump. Published MSI size is about 3.2 MB for amd64 and x86, and about 2.9 MB for arm64.
-
1.0.1
Follows 1.0 by two days. Published MSI size is about 3.2 MB for amd64 and x86.
-
1.0
First 1.0 Windows tag in this series. Published MSI size is about 3.2 MB for amd64 and x86.
-
0.5.3, still listed on some catalogs
About 2.8 to 2.9 MB. The Softonic page still shows 0.5.3, about 2.89 MB, and a 4.6 score for that listing. It is not 1.1.1. The catalog's own note on that build mentions stability trouble, missing Windows driver pieces, and no technical support desk.
Signature and hash
The Windows installer does not trust a bare MSI that it just fetched. It checks the signature and the hash, then runs the file. Standalone MSIs are for people who deploy the package themselves. This page does not print a digest. Compare a digest only with the file you actually have, and start by matching the version and the size in the table above.
Source for the Windows client is the MIT-licensed repository. The Linux kernel implementation follows the kernel GPL terms. License split
If a scanner flags the file
A May 2021 report described McAfee quarantining wireguard.exe after an update. The exception did not survive the next hash. A support comment in that discussion treated VPN software as suspicious because it changes the route.
If the file is 1.1.1 and the size matches this table, that pattern is a known false positive class. If the size or the version does not match, do not restore it. Quarantine steps