Follow these simple step-by-step instructions to make use of AmneziaWG on your Windscribe account. 

Step 1: Download the WireGuard configuration file from this link. You must be a Pro or Build-A-Plan user to access it.

Step 2: Reach out to our support team with the location you want to connect to. Request the specific AmneziaWG configuration settings. We have chosen not to release these parameters publicly, but you’ll receive essential values like Jc, Jmin, Jmax, S1, S2, H1, H2, H3, H4 and I(1-5).

Step 3: Open the WireGuard config file in a text editor. Paste the parameters given by the support team into the [Interface] section of your config. Save the file after editing, and it will be ready to use. 

Here’s what your WireGuard config should look like:

[Interface]
PrivateKey = <unique to your config>
Address = <unique to your config>
DNS = 10.255.255.1, 10.255.255.2
Jc = <redacted>
Jmin = <redacted>
Jmax = <redacted>
S1 = <redacted>
S2 = <redacted>
H1 = <redacted>
H2 = <redacted>
H3 = <redacted>
H4 = <redacted>
I1 = <redacted>
[Peer]
PublicKey = <unique to the VPN location you select>
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = <unique to the VPN location and port you select, resolved IP address endpoint recommended>
PresharedKey = <unique to your config>

Note: The I1 parameter can help disguise VPN traffic as common UDP-based protocols like QUIC, DNS, or NTP. Check out this guide to learn how to set it up, or contact support for assistance with other protocols.

Step 4: Download and install the official AmneziaWG client. If Amnezia’s website is blocked, you can get the client from their GitHub or a mirror site. For mobile, download the “AmneziaVPN” app from the Play Store or App Store; don't confuse it with “AmneziaWG.” The client works on all operating systems and supports certain routers, either out-of-the-box or with third-party firmware.

Step 5: Import the configuration file you created in Step 3 using the “File with connection settings” feature in AmneziaWG.

Step 6: Set the DNS servers to 10.255.255.1 and 10.255.255.2 . AmneziaWG defaults to CloudFlare’s DNS servers, so this step is important to override.

Step 7: Click “Connect” to start using AmneziaWG securely.

Validation:

When everything is set up correctly, the app should show AmneziaWG as the active protocol, and the connection will be successful.

• If WireGuard is displayed instead of AmneziaWG, the connection isn’t using AmneziaWG. Double-check your configuration file to ensure the additional parameters were added and saved properly.

• If the app doesn’t connect, verify that the AmneziaWG parameters are correct, as provided by support. It's also possible that AmneziaWG is blocked on your network.
  

Advanced Imitation with WireSock (Windows Only):

WireSock enhances AmneziaWG’s protocol masking by replacing the I1 - I5 parameters with Id, Ip, and Ib.

You can specify the domain, protocol (QUIC or DNS), and browser profile (Chrome, Firefox, cURL), and WireSock will automatically handle the calculation of the I1 - I5 values.

This feature is available in WireSock version 3.0.9.1 and newer (currently in beta). You can download beta versions from WireSock’s public Telegram community.

For the best results in restricted environments, use the recommended junk packet settings and AmneziaWG Magic Headers along with WireSock’s advanced imitation parameters (Id, Ip, and Ib) as provided by our support team.

Visit our blog to learn more about how to bypass VPN blocks with Windscribe.