AmneziaWG VPN: Providers, Clients and Self-Hosted Options Compared
AmneziaWG is an obfuscated fork of WireGuard, and it reaches you in three forms: five ready consumer subscriptions on this page, four decentralised VPN entries (NymVPN, Sentinel dVPN and two Sentinel clients) and ten others, from client apps and self-hosted panels to a VPS, router hardware and a reseller platform. The three services with the highest page scores are CitadelVPN (8.55), Xeovo VPN (5.05) and NymVPN (4.49), with paid plans from €1.38 a month and a median of €3.59. Read more
Sorted by this page’s weighting: Censorship bypass weighs 40% on this page. Each row also shows the overall score.
Ready-made lists
- Works under heavy blocking
- Anonymous
- Honest free
- Trial without a card
- No price rise at renewal
- Netflix and streaming
- Gaming
- For business
All filters by topic: Price and payment · Anonymity and privacy · VPN security · VPN protocols · VPNs by platform · VPNs by use case · Travel and restrictions · VPN jurisdictions · VPN servers by country · VPN customer support · VPN segments
| # | Service | Page score | Protocols | Clients and configs | Obfuscation | From | |
|---|---|---|---|---|---|---|---|
| 1 | CitadelVPN | 8.55overall 8.74 | WireGuard, OpenVPN, VLESS / Reality, Trojan… | VLESS subscription link/keys; … | Yes VLESS/Hysteria2 for… | Protocols: WireGuard, OpenVPN, VLESS / Reality, Trojan…; Clients and configs: VLESS subscription link/keys; …; Obfuscation: yes (VLESS/Hysteria2 for… | €1.38per month |
| 2 | Xeovo VPN | 5.05overall 4.17 | WireGuard, OpenVPN, VLESS / Reality, VMess… | Yes WireGuard/AmneziaWG configs,… | Yes Stealth Proxies | Protocols: WireGuard, OpenVPN, VLESS / Reality, VMess…; Clients and configs: yes (WireGuard/AmneziaWG configs,…; Obfuscation: yes (Stealth Proxies) | €2.99per month |
| 3 | NymVPN | 4.49overall 4.97 | WireGuard, Own protocol, AmneziaWG | none | censorship resistance listed | Protocols: WireGuard, Own protocol, AmneziaWG; Clients and configs: none; Obfuscation: censorship resistance listed | €3.44per month |
| 4 | L×Box | 4.38overall 2.64 | WireGuard, VLESS / Reality, VMess, Trojan… | subscription links; Base64; Xray… | Yes DPI bypass: REALITY, XHTTP,… | Protocols: WireGuard, VLESS / Reality, VMess, Trojan…; Clients and configs: subscription links; Base64; Xray…; Obfuscation: yes (DPI bypass: REALITY, XHTTP,… | — |
| 5 | 3X-UI | 4.09overall 2.42 | WireGuard, VLESS / Reality, VMess, Trojan… | subscription links; QR codes; … | Yes REALITY, XTLS, fallbacks on… | Protocols: WireGuard, VLESS / Reality, VMess, Trojan…; Clients and configs: subscription links; QR codes; …; Obfuscation: yes (REALITY, XTLS, fallbacks on… | — |
| 6 | RocketVPN | 4.01overall 3.70 | WireGuard, OpenVPN, IKEv2, L2TP/IPsec… | — | Yes V2Ray TLS camouflage,… | Protocols: WireGuard, OpenVPN, IKEv2, L2TP/IPsec…; Obfuscation: yes (V2Ray TLS camouflage,… | €3.59per month |
| 7 | is*hosting VPN | 3.94overall 3.20 | WireGuard, OpenVPN, L2TP/IPsec, VLESS / Reality… | Yes VPS root access, configs | no built-in stealth mode; … | Protocols: WireGuard, OpenVPN, L2TP/IPsec, VLESS / Reality…; Clients and configs: yes (VPS root access, configs); Obfuscation: no built-in stealth mode; … | €6.01per month |
| 8 | ChibaTunnel | 3.89overall 3.12 | WireGuard, OpenVPN, VLESS / Reality, VMess… | none (in-app) | Yes | Protocols: WireGuard, OpenVPN, VLESS / Reality, VMess…; Clients and configs: none (in-app); Obfuscation: yes… | — |
| 9 | WireDog VPN | 3.51overall 3.78 | AmneziaWG | — | Yes AmneziaWG disguises traffic… | Protocols: AmneziaWG; Obfuscation: yes (AmneziaWG disguises traffic… | €4.29per month |
| 10 | Sentinel dVPN | 3.16overall 2.89 | WireGuard, VLESS / Reality, VMess, Hysteria2… | SDKs (JS, C#, Go, Swift) | Yes V2Ray for anti-censorship | Protocols: WireGuard, VLESS / Reality, VMess, Hysteria2…; Clients and configs: SDKs (JS, C#, Go, Swift); Obfuscation: yes (V2Ray for anti-censorship) | — |
| 11 | StarVPN | 3.06overall 2.94 | WireGuard, OpenVPN, AmneziaWG | .ovpn / WireGuard / SOCKS5… | Yes obfuscation, AmneziaWG; OS… | Protocols: WireGuard, OpenVPN, AmneziaWG; Clients and configs: .ovpn / WireGuard / SOCKS5…; Obfuscation: yes (obfuscation, AmneziaWG; OS… | €6.88per month |
| 12 | Meile dVPN (MathNodes) | 2.92overall 2.55 | WireGuard, Hysteria2, AmneziaWG | — | Yes V2Ray/XRay, Hysteria2,… | Protocols: WireGuard, Hysteria2, AmneziaWG; Obfuscation: yes (V2Ray/XRay, Hysteria2,… | €2.70per month |
| 13 | wg-easy | 2.35overall 1.94 | WireGuard, AmneziaWG | .conf + QR code | Yes experimental AmneziaWG DPI… | Protocols: WireGuard, AmneziaWG; Clients and configs: .conf + QR code; Obfuscation: yes (experimental AmneziaWG DPI… | — |
| 14 | WG Tunnel | 2.33overall 1.92 | WireGuard, AmneziaWG | user-supplied WireGuard/AmneziaWG… | Yes AmneziaWG obfuscation for… | Protocols: WireGuard, AmneziaWG; Clients and configs: user-supplied WireGuard/AmneziaWG…; Obfuscation: yes (AmneziaWG obfuscation for… | — |
| 15 | WireSock | 2.22overall 1.76 | WireGuard, AmneziaWG | .conf import/export (CLI) | Yes WireGuard obfuscation, DPI… | Protocols: WireGuard, AmneziaWG; Clients and configs: .conf import/export (CLI); Obfuscation: yes (WireGuard obfuscation, DPI… | — |
| 16 | Firewalla | 2.10overall 1.59 | WireGuard, OpenVPN, AmneziaWG | import 3rd-party .ovpn /… | Partial AmneziaWG obfuscated… | Protocols: WireGuard, OpenVPN, AmneziaWG; Clients and configs: import 3rd-party .ovpn /…; Obfuscation: partial (AmneziaWG obfuscated… | — |
| 17 | Shimo VPN | 1.98overall 1.61 | WireGuard, OpenVPN, IKEv2, L2TP/IPsec… | — | — | Protocols: WireGuard, OpenVPN, IKEv2, L2TP/IPsec… | — |
| 18 | WGDashboard | 1.80overall 1.36 | WireGuard, AmneziaWG | — | Yes via AmneziaWG configurations | Protocols: WireGuard, AmneziaWG; Obfuscation: yes (via AmneziaWG configurations) | — |
| 19 | BillingServ White Label VPN | 1.80overall 1.36 | WireGuard, OpenVPN, AmneziaWG | — | — | Protocols: WireGuard, OpenVPN, AmneziaWG | €115.00per month |
Why plain WireGuard gets dropped and this fork does not
Deep packet inspection recognises WireGuard by its fixed headers and uniform packet sizes on every handshake. AmneziaWG keeps the same cryptography but randomises those parts, so the WireGuard signature disappears from the traffic. It does this with junk packets before the handshake (Jc, Jmin, Jmax), random padding (S1–S4) and replaced packet-type headers (H1–H4); version 2.0 adds I1–I5 signature packets that imitate other UDP protocols such as QUIC. Protocol-level details live on the AmneziaWG vs WireGuard comparison; this page is about who actually offers it.
The three services with the highest page scores
| CitadelVPN | Xeovo VPN | NymVPN | |
|---|---|---|---|
| Page score | 8.55 | 5.05 | 4.49 |
| Jurisdiction | Panama | Finland | Switzerland |
| Delivery | apps for Windows, macOS, iOS, Android | config files + setup guides | apps for all major platforms |
| Extra bypass protocols | VLESS, Hysteria2, Trojan, Shadowsocks | VLESS, VMess, Trojan, Shadowsocks | none |
| Cheapest plan | €1.38/mo (2 years) | €2.99/mo (1 year) | €3.44/mo (1 year) |
| Trial | 5 days, 5 GB, no card | none | 7 days, card required, then paid |
| Devices | unlimited | 5 | 10 |
Bypass counts for 40% of the score, privacy for 21%, security for 14%. That explains the spread. NymVPN's bypass sits at 3.3: AmneziaWG exists only inside its 2-hop Fast Mode, with no VLESS, Trojan or Shadowsocks as a fallback. In exchange it runs a 5-hop mixnet across 800+ nodes in 70+ countries and passed a Cure53 audit in 2024, though no independent no-logs audit is done. Xeovo loses on security (1.1) because a kill switch, DNS leak protection and audits are unpublished. CitadelVPN is the only entry here with an independent no-logs audit; it also runs RAM-only servers and takes one-off payments with no auto-renewal.
Clients, panels and hardware in the list
| Type | Entries | What you still need |
|---|---|---|
| Server panels | 3X-UI, wg-easy, WGDashboard | your own VPS |
| Client apps | L×Box, WireSock, WG Tunnel, Shimo VPN | a server someone else runs |
| Decentralised | Sentinel dVPN, ChibaTunnel, Meile dVPN | a wallet, nodes are paid in DVPN tokens |
| Hardware / other | Firewalla, is*hosting VPS, BillingServ | the device or the server itself |
L×Box holds the highest bypass score on the page (8.6) as a free, GPL-3.0 Android client on a sing-box fork core, but it has no servers of its own and stays outside the main ranking for lack of published data. Firewalla boxes run an AmneziaWG server and client on a one-time purchase.
What has to match for the tunnel to connect
Both sides of the tunnel need the same Jc, Jmin, Jmax, S1–S4 and H1–H4 values; one wrong character and the handshake dies silently. A stock WireGuard app cannot connect to an obfuscated server, so an AmneziaWG-aware client is required. Configs from version 2.0 fail to load in a 1.0 build, and GL.iNet routers run obfuscation on firmware 4.9 or newer; the GL.iNet parameter reference documents valid ranges for every field.
Where AmneziaWG runs out of road
Transport is UDP, nothing else. On a TCP-only network no parameter setting helps, which is where a second protocol earns its place: VLESS, Hysteria2 and Shadowsocks each appear in 6 of the 19 entries. CitadelVPN and Xeovo VPN carry that fallback; NymVPN does not. If your network never blocks WireGuard anyway, the WireGuard VPN ranking covers a far wider market.
AmneziaWG VPN FAQ
Is AmneziaWG free?
The protocol costs nothing, as do many clients; ten entries offer a free tier, mostly the open-source tools, but servers still need funding unless you self-host.
Can I use my normal WireGuard app?
Only with obfuscation set to zero, which defeats the purpose.
Does it run on a router?
Yes: Firewalla natively, GL.iNet on firmware 4.9+, and five entries here list router support.
Does obfuscation improve privacy?
No. It hides that you run a VPN, not what the provider logs; for 9 of the 19, nothing is published about logging.
Which option fits you
CitadelVPN is the pick for the lowest price and the page's only independent no-logs audit. Xeovo VPN fits if you want to pay cash or Monero without an email; its 30-day money-back guarantee covers card and other non-crypto payments only, so there are no refunds on crypto. NymVPN suits anyone who values multi-hop and decentralised nodes over raw bypass. With a VPS of your own, pairing 3X-UI or wg-easy with WireSock or WG Tunnel leaves you paying for the server alone.