AmneziaWG — WireGuard with obfuscation
Help
What is AmneziaWG
AmneziaWG is a WireGuard fork by the AmneziaVPN team with added junk obfuscation: random handshake parameters (Jc, Jmin, Jmax, S1, S2, H1-H4) make packets indistinguishable from random traffic. This allows it to work in networks where regular WireGuard is blocked by filters.
Difference from WireGuard
Regular WireGuard is blocked in some networks — handshake packets have a characteristic byte signature that inspection systems detect. AmneziaWG adds randomization:
- Jc/Jmin/Jmax — count and size of junk packets before handshake.
- S1, S2 — padding size in main handshake packets.
- H1-H4 — overridden magic numbers replacing standard WireGuard headers.
Each server uses unique obfuscation parameters — blocking one does not help block the others.
Benefits
- WireGuard speed. Retains high performance of WireGuard — typically 2-3x faster than OpenVPN.
- Obfuscation. Works in networks where regular WG is dropped at handshake.
- Low battery drain. WireGuard-class — minimal CPU overhead, unlike OpenVPN.
- Multi-direction routing. Available chains with exit through multiple regions.
How to set up
- Order access on the order page and select AmneziaWG protocol.
- Install the official AmneziaVPN client from amnezia.org/downloads for your OS.
- In /profile download the .conf configuration file or scan the QR code.
- In AmneziaVPN → "Import configuration" → select .conf or QR → connect.
FAQ
Does regular WireGuard client work?
No, you need AmneziaVPN — it understands the junk obfuscation parameters.
What is the difference vs VLESS?
AmneziaWG is UDP-based, lower latency. VLESS is TCP, better disguised as HTTPS. We recommend trying both and picking whichever is more stable for your network.
Can it be used on a router?
Not yet — support for firmware like OpenWRT is in development. Currently only works on devices with AmneziaVPN.
Subscription URL — auto-update your config
Go to /profile → open the AmneziaWG dialog → click "Get Subscription URL". This is a stable link to your fresh config. When server parameters or obfuscation knobs change, simply re-import the config from this URL — you'll get the latest version without logging back in.
Old config no longer connects?
In May 2026 we strengthened AmneziaWG obfuscation (raised the Jc parameter from 5 to 10) to make the protocol less detectable by Russian DPI. Configs downloaded before May 28, 2026 stopped working. Solution: go to /profile and re-download your config — the new one includes the updated obfuscation parameters.