VPN on iPhone 2026: Set Up WireGuard and AmneziaWG

To set up a VPN on an iPhone in 2026, the easiest path is to install the protocol's official app from the App Store (WireGuard or AmneziaVPN), import your configuration via a QR code or link, and tap a single connect button. iOS adds the VPN profile to the system and routes your traffic through an encrypted tunnel. Under the tightened blocking of 2026, the most resilient choice has become the obfuscated AmneziaWG protocol (AWG 2.0), which disguises traffic as ordinary data and survives DPI where plain WireGuard already stumbles.

In short: on iPhone a VPN is set up through an App Store app, not in the system Settings. For stability and unblocking, choose AmneziaVPN (AmneziaWG / AWG 2.0); for top speed on a clean network, WireGuard is great. Import the config by QR code, enable on-demand auto-connect, and if you see drops, check iCloud Private Relay and Low Power Mode. iOS cannot truly split traffic per app — that is solved on the server side (RU-direct routing).

Why iPhone VPNs are configured through an app, not in Settings

iOS does have a built-in "Settings → VPN" section, but it only supports legacy protocols — IKEv2, L2TP/IPsec, and proprietary clients like Cisco. Modern WireGuard, let alone AmneziaWG, is not there. So on iPhone a VPN is almost always set up through a dedicated app that creates the system VPN profile itself and manages the tunnel. After installation the profile appears under "Settings → VPN & Device Management," but it is more convenient to toggle the connection from inside the app.

A key iOS trait: only one VPN tunnel can be active at a time. If you switch between profiles (say, WireGuard and AmneziaWG), the previous one disconnects automatically. That is normal and requires no manual cleanup.

Which protocol to choose in 2026

Your choice of protocol directly determines whether the VPN works at all. In May 2026, Roskomnadzor moved to blocking at the ASN and subnet level and began selectively breaking plain WireGuard and VLESS connections in several regions. Against that backdrop, two scenarios stand out.

WireGuard — fast and simple

WireGuard offers minimal latency, instant reconnects, and barely touches the battery. It is the ideal choice if your ISP has no aggressive DPI or you are using a VPN abroad. There is one downside, and in 2026 it is significant: bare WireGuard is easy to fingerprint and can be blocked by signature.

AmneziaWG (AWG 2.0) — resilient to blocking

AmneziaWG is an obfuscation layer on top of WireGuard. It adds junk packets and masks the start of the session, so the traffic no longer looks like a VPN to DPI systems. On iPhone, AWG 2.0 is configured through the AmneziaVPN app. If your usual VPN recently started dropping or stopped connecting entirely, this is the prime replacement. We compared the two in detail in AmneziaWG vs WireGuard (RU).

VLESS Reality — a backup option

VLESS Reality disguises traffic as a request to a legitimate HTTPS site and gets through well where UDP is throttled. On iOS it is set up through third-party clients (for example, Streisand or v2RayTun). It is a working reserve, but for most iPhone users the AmneziaWG + WireGuard pairing is simpler and more reliable. Learn what it is in what VLESS Reality is (RU).

Criterion	WireGuard	AmneziaWG (AWG 2.0)	VLESS Reality
iOS app	WireGuard	AmneziaVPN	Streisand / v2RayTun
DPI resilience in 2026	Low	High	High
Speed and latency	Excellent	Very good	Good
Battery impact	Minimal	Low	Medium
Ease of setup	Very easy	Easy	Medium
When to choose	No blocking	Blocking, instability	UDP throttled

Setting up WireGuard on iPhone: step by step

Install the WireGuard app from the App Store (publisher: WireGuard Development Team).
Get a configuration from your VPN service. With Fiery VPN this is done in the @fiery_VPN_bot Telegram bot or the mini-app, which issues a QR code or a .conf file.
Open WireGuard, tap "+" in the top-right corner and choose "Create from QR code." Point the camera at the code — the config imports automatically.
Name the profile and tap "Save." iOS will ask permission to add a VPN configuration — confirm with Face ID or your passcode.
Flip the toggle next to the tunnel to "on." A VPN icon appears in the status bar.

If you have a .conf file instead of a QR code, send it to yourself (Notes, email, or Telegram), open it, and choose "Share → WireGuard," or use "Import from file" inside the app.

Setting up AmneziaWG (AWG 2.0) via the AmneziaVPN app

Install AmneziaVPN from the App Store.
In the Fiery VPN bot, choose the AmneziaWG protocol and get a configuration — usually a link like vpn://... or a QR code.
In AmneziaVPN tap add server and paste the link or scan the QR code. The app recognizes the AWG 2.0 protocol automatically.
Confirm installation of the system VPN profile (Face ID / passcode).
Tap the connect button. Done — your traffic now flows through the obfuscated tunnel.

AmneziaVPN on iOS also lets you store several profiles and switch between them quickly — handy if you keep both WireGuard and AmneziaWG on standby.

On-demand auto-connect: the VPN turns itself on

The most useful feature on iPhone is on-demand auto-connect. It makes the system bring the tunnel up automatically the moment the device goes online, so you never accidentally end up unprotected.

In the WireGuard app: open the tunnel → "Edit" → enable "On-Demand" and pick which networks it applies to (Wi-Fi and/or cellular). You can add exceptions for trusted Wi-Fi networks.
In AmneziaVPN: in connection settings enable autostart / "Connect automatically." The behavior is the same.

Note an iOS quirk: if you manually turn off the VPN while on-demand is active, the system may turn it back on. To temporarily disable the tunnel completely, WireGuard has a separate "On-Demand" switch that you need to turn off.

iCloud Private Relay and VPN: how they coexist

If you have an iCloud+ subscription, iCloud Private Relay may be active — it hides your IP in Safari. It partially conflicts with a full VPN: while a VPN tunnel is active, iOS usually pauses Private Relay automatically, since all traffic is already encrypted. But this can sometimes cause oddities — for example, Safari complaining about the network or sites loading slowly.

The advice is simple: if you use a VPN all the time, turn off Private Relay in "Settings → [your name] → iCloud → Private Relay." Double-wrapping traffic gives no privacy gain but can add latency and drops.

Can you split traffic per app on iOS

Here it is worth being honest about a platform limitation. Unlike Android, iOS does not give regular VPN apps a per-app VPN feature — choosing "these apps through the VPN, the rest direct" on a personal iPhone is not possible out of the box (that is only available under corporate MDM management). So when the tunnel is on, all device traffic goes through it.

This is exactly why the server-side RU-direct routing used by Fiery VPN is so valuable. You connect to a Moscow hub on a Russian IP; Russian sites and apps (banks, government services, delivery) keep going direct with low latency and never "see" a foreign IP, while only foreign traffic is forwarded abroad through the tunnel. That closes precisely the gap that per-app splitting cannot fill on iOS. For more on why services get blocked in the first place, see why VPNs are blocked in Russia.

What to do if the VPN keeps dropping on iPhone

Drops are the most common complaint. Let's go through the causes in order.

1. Protocol blocking

If the connection comes up but falls after a few seconds or minutes, or never establishes at all, your ISP's DPI is most likely triggering. The fix is to switch to AmneziaWG (AWG 2.0). This is the most common cause of drops in 2026.

2. Low Power Mode

On a low battery or with "Low Power Mode" enabled, iOS aggressively suspends background processes, including the VPN. Turn off Low Power Mode and make sure the app is allowed background activity.

3. Switching Wi-Fi ↔ cellular

When the network changes, the tunnel briefly reconnects. WireGuard and AmneziaWG do this quickly, but if keepalive is set to too large an interval, the pause is noticeable. Enabling on-demand usually smooths the transitions.

4. MTU and "heavy" sites

If pages open but large downloads or video stall, the cause may be a non-optimal MTU. A good service tunes it in advance; if you set it manually, try a value around 1280.

FAQ

Can you set up a VPN on iPhone for free and safely?

Technically yes — the WireGuard and AmneziaVPN apps are free. But you still need a server (the configuration). Free public VPNs often log traffic, are overloaded, and are the first to get blocked. A paid service with a no-logs policy and a Russian IP at the entry point is a more reliable and private option.

Why doesn't the VPN appear in iPhone Settings?

The profile is added only after you import a configuration into the app and confirm installation of the VPN profile via Face ID or passcode. Until then the "VPN" section in system settings is empty. After import, the profile appears under "Settings → VPN & Device Management."

WireGuard or AmneziaWG — which to install on iPhone in 2026?

If a VPN works stably in your region and on your ISP, start with WireGuard for speed. If the connection drops, lags, or won't come up, switch to AmneziaWG (AWG 2.0): it is purpose-built to bypass modern DPI and is the most resilient right now.

Does a VPN affect Russian banks and government apps?

With an ordinary VPN, all traffic goes through a foreign IP, and banking apps may block login or demand extra verification. Fiery VPN solves this with RU-direct routing: Russian services go direct from a Russian IP, so banks and government apps work as usual.

Can you install a VPN on iPhone without the App Store?

The official WireGuard and AmneziaVPN apps are distributed through the App Store, and that is the recommended way. Third-party builds outside the App Store are an unnecessary security risk; on iOS there is no need for them, as the clients you want are available legally.

Bottom line

Setting up a VPN on iPhone in 2026 takes a couple of minutes: install the app, import the config by QR code, enable auto-connect. Choose WireGuard for speed and AmneziaWG (AWG 2.0) for resilience to blocking. Keep in mind the iOS limitation on per-app traffic splitting and the conflict with iCloud Private Relay.

Want a ready-made iPhone configuration with WireGuard, AmneziaWG, and VLESS support, a Russian IP at the entry point, and payment via MIR card, SBP, or crypto? Get access in the @fiery_VPN_bot bot or at vpn.fiery.host — the config arrives instantly; all that's left is to scan the QR code. If you are still choosing a service, see our guide on VPN protocols compared.