How to Set Up a VPN: Step-by-Step Guide for Every Device (2026)

To set up a VPN you need to do three things: choose a protocol, get a configuration file (or subscription link) from your provider, and import it into the app on your device. On most platforms this takes 3-5 minutes, and on a router WireGuard works out of the box. Below we walk through the whole process step by step for Android, iOS, Windows, macOS and routers, using Fiery VPN as the example.

In short: grab your configuration from the Telegram bot @fiery_VPN_bot or the mini-app vpn.fiery.host, install the right app (AmneziaVPN for AWG 2.0, the official WireGuard client, or v2RayTun for VLESS), import the profile, tap Connect, and verify your IP. In 2026 the most resilient choice for Russia is obfuscated AmneziaWG (AWG 2.0).

Step 1. Choose a protocol for your situation

The protocol determines which app you'll use and how resilient the connection is to blocking. In May 2026 Roskomnadzor escalated to ASN- and subnet-level blocking and disrupted plain WireGuard and VLESS Reality in places. That makes protocol choice more important than it was a year ago.

• AmneziaWG (AWG 2.0) — an obfuscated version of WireGuard. It disguises traffic so DPI cannot recognise it as VPN. The most reliable option for Russia in 2026, and our default recommendation. Set up via the AmneziaVPN app.
• WireGuard — fast, battery-friendly, and runs natively on routers with no extra software. A great choice where your ISP isn't yet throttling UDP via DPI.
• VLESS Reality — masquerades as ordinary TLS traffic to a real website. A solid backup protocol on phones and computers.

If in doubt, start with AmneziaWG. There's a detailed breakdown in VPN protocols compared, and more context on why blocking happens in why VPNs get blocked in Russia.

What makes Fiery different: RU-direct routing

With Fiery you connect over WireGuard or AmneziaWG to a Moscow hub on a Russian IP. Russian sites and services (banks, government portals, marketplaces) go direct — low latency and no trouble with anti-fraud systems. Only foreign traffic is forwarded to an overseas exit node through a secure server-to-server tunnel. You get local-connection speed and access to blocked resources at the same time.

Step 2. Get your configuration

A configuration is either a .conf file (for WireGuard/AmneziaWG), a QR code, or a subscription link (for VLESS). You can get it in about a minute:

1. Open the Telegram bot @fiery_VPN_bot or the mini-app vpn.fiery.host.
2. Pay for a subscription with a convenient method — MIR card, SBP, crypto (USDT) or Telegram Stars.
3. Choose your device and protocol. The bot returns a QR code and a config file (or a subscription link for VLESS).
4. On a phone it's easiest to scan the QR code straight from the screen; on a computer, download the .conf file.

Step 3. Install and configure on your device

Android

1. For AWG 2.0 install AmneziaVPN from Google Play or the Amnezia site. For plain WireGuard use the official WireGuard app. For VLESS use v2RayTun or Hiddify.
2. Tap "+" and choose import from file or scan a QR code.
3. Scan the QR from the bot or open the downloaded .conf.
4. Flip the toggle. Android will ask permission to create a VPN connection — confirm it.

iOS / iPadOS

1. Install from the App Store: AmneziaVPN (for AWG 2.0), WireGuard, or v2RayTun (for VLESS).
2. Import the configuration: "Add a tunnel" → "Create from QR code" or from a file.
3. Allow the VPN configuration to be added to iOS settings.
4. Activate the profile with the toggle.

Windows

1. Download the WireGuard for Windows client from the official site, or AmneziaVPN for AWG 2.0.
2. In WireGuard: "Import tunnel(s) from file" → select the .conf.
3. Click Connect. On first launch the system asks for administrator rights — that's normal.

macOS

1. Install WireGuard from the Mac App Store, or AmneziaVPN.
2. Import the tunnel from the .conf file and allow the configuration to be added to system settings.
3. Enable the tunnel from the menu bar.

Router (Keenetic, MikroTik, OpenWRT)

The big advantage of WireGuard on a router is that once it's set up, the VPN protects every device on the network at once (TV, set-top box, console) with nothing to install on them. WireGuard configs run natively on these routers.

1. Get a WireGuard config (not AWG — routers usually don't support obfuscation natively) from the bot.
2. In the router's web interface find the WireGuard section and create a new interface, transferring the parameters from the .conf (private key, address, peer public key, endpoint, AllowedIPs).
3. Bring the interface up and configure routing if needed.

For model-specific guides, see VPN on a router (overview), plus the dedicated Keenetic setup and MikroTik setup walkthroughs.

Setup compared by platform

Platform	App	Difficulty	Notes
Android	AmneziaVPN / WireGuard / v2RayTun	Very easy	Scan QR, 2-3 minutes
iOS / iPadOS	AmneziaVPN / WireGuard / v2RayTun	Very easy	Must allow the VPN profile in settings
Windows	WireGuard / AmneziaVPN	Easy	Import .conf, admin rights
macOS	WireGuard / AmneziaVPN	Easy	Allow the configuration in the system
Router	Built-in WireGuard	Moderate	Protects the whole network; use a WireGuard profile

Step 4. Connect and verify the VPN works

After activating the profile, confirm your traffic really goes through the VPN:

• Open any IP-check service (e.g. search "what is my IP") and confirm the country and address changed to what you expect.
• Check for DNS leaks — on a dedicated leak test, the DNS servers should belong to the VPN, not your ISP.
• Visit a previously blocked site to confirm the block is bypassed.
• If you're on Fiery with RU-direct routing, Russian sites will show your real region — that's expected and intentional.

Fixing common errors

Connects, but no internet

This is usually a wrong AllowedIPs value or a DNS conflict. Re-download the configuration from the bot and import the fresh file. On a router, check routing and firewall rules.

WireGuard connects then immediately drops

Your ISP is probably throttling UDP via DPI. Switch to AmneziaWG (AWG 2.0) — obfuscation solves this. More detail in why VPNs get blocked in Russia.

"Handshake did not complete"

Check the system clock on your device (a time skew breaks encryption), make sure the endpoint and port are correct, and that the required UDP port isn't blocked on your network. Try a different network (mobile data instead of Wi-Fi).

Works at home but not at the office or while roaming

Some networks filter VPN ports. Again, AmneziaWG or VLESS Reality help here because they disguise themselves as legitimate traffic. Keep two protocols on hand.

FAQ

Which protocol should a beginner choose?

For Russia in 2026, AmneziaWG (AWG 2.0) via the AmneziaVPN app: it's the most resilient to blocking and sets up just as easily as plain WireGuard.

Do I have to pay to get a configuration?

The configuration is issued after you pay for a subscription. MIR cards, SBP, USDT crypto and Telegram Stars are all supported, so you can pay from inside Russia.

Can I use one configuration on several devices?

Technically you can import the QR/file onto different devices, but for stable performance it's better to get a separate profile per device from the bot, so connections don't conflict.

Will banking apps still work with the VPN on?

With Fiery, yes. Thanks to RU-direct routing, Russian banking and government services go direct, so anti-fraud systems see your real region.

The VPN slows my internet — is that normal?

A small speed drop is possible, but Fiery doesn't route Russian traffic abroad, so familiar sites open at local speed. If everything is slow, try switching protocol or node.

Ready to start? Get a subscription and your configuration in the mini-app vpn.fiery.host or via the Telegram bot @fiery_VPN_bot — setup takes a couple of minutes, and support will help if anything goes wrong.