Wag, MFA and Enrollment for WireGuard
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…
Wag, MFA and Enrollment for WireGuard launched on May 11, 2024 with 149 votes, #368 of 4,539 launches that month and more than 95% of that year's launches. The site was still online in September 2026, 2 years on.
In plain words
Wag is a multi-factor authentication and enrollment system built on top of WireGuard. It addresses gaps in WireGuard's device security and enrollment processes by adding MFA capabilities and streamlined device onboarding. The project uses eBPF for low-level network operations and recently transitioned to etcd for clustering and high availability. Wag is designed for teams needing stronger security controls around WireGuard deployments without relying on commercial alternatives.
written from the facts on this page · September 2026
From the sources
Simple Wireguard 2FA. Contribute to NHAS/wag development by creating an account on GitHub.
In the maker’s words, at launch
Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf…
Does a similar job
all alternatives →
WireHub – easily create and share WireGuard networks2023 · wirehub.org · ▲312WireHub is a side project I've been working on, on and off, for close to a year now. It's made with django and minimal javascript. It's a hosted WireGuard config generator/manager, that you can invite others to join your networks and manage their own configs/devices. It's still very much a beta, maybe an mvp, but I just wanted to get some early from the community. Thanks!
Wg-easy] Easy to setup, all-in-one WireGuard and Management Web UI2021 · github.com · ▲135The easiest way to run WireGuard VPN + Web-based Admin UI. - wg-easy/README.md at master · WeeJeWel/wg-easy
TailGuard – Bridge your WireGuard router into Tailscale via a container2025 · github.com · ▲150My elderly parents are behind a 5G connection in rural areas, and I help them manage their network from overseas. I found a reasonably priced 5G router that can do external antennas required for it to work, but the only reasonable ways to get access to it is either through OpenVPN or WireGuard, the latter of which is much more lightweight and preferred with the memory constraints of the device. The problem with WireGuard is that it requires handling key management oneself, and configuring the keys to every device you want to access it from. It also doesn't play nicely together with other…
Wachy – A UI for eBPF-based performance debugging2022 · rubrikinc.github.io · ▲116eBPF is an amazing technology that allows safely running user-supplied functions at pretty much arbitrary probe points in a kernel/user space context. Much has been written about how amazing this feature is for kernel observability. But as someone who writes user space code, what I find even more amazing is the support for tracing arbitrary user space programs, with no code changes and low overhead. However, doing in-depth analysis can get complicated and time-consuming. My goal with wachy was to make this debugging significantly easier/faster to use, by displaying traces in a TUI…
Wg-admin – web UI for an existing WireGuard hostSep 2026 · github.com · ▲35Contribute to logimaxx/wg-admin development by creating an account on GitHub.
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
