32-bit
wixmachine scopedownload.wireguard.com · publisher domain- File name
- wireguard-x86-1.1.msi
- SHA-256
- 71811698d544607e6bd94bbfff14e936b186da53b2934ff74d736daa74105481
- Product code
- {B90DE94F-FC4B-4FEF-ACDF-BD2BA2A545FB}
by WireGuard LLC · MIT
Fast, Modern, Secure VPN Tunnel
These URLs are the ones WireGuard LLC declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what WireGuard LLC published. Delete it.
Windows · PowerShell
Get-FileHash "wireguard-amd64-1.1.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "wireguard-amd64-1.1.msi"Expected output
6daa5d37a9e2950dfb8c48b95ab8e562cb2bad1c785d020f38f97bea4c6a5566
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
32-bit · machine scope · MSI convention
msiexec /i "wireguard-x86-1.1.msi" /qn /norestart64-bit · machine scope · MSI convention
msiexec /i "wireguard-amd64-1.1.msi" /qn /norestartARM64 · machine scope · MSI convention
msiexec /i "wireguard-arm64-1.1.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 32-bit
{B90DE94F-FC4B-4FEF-ACDF-BD2BA2A545FB}
Uninstall, with the usual prompts
msiexec /x {B90DE94F-FC4B-4FEF-ACDF-BD2BA2A545FB}Silent, for deployment
msiexec /x {B90DE94F-FC4B-4FEF-ACDF-BD2BA2A545FB} /qn /norestartProduct code · 64-bit
{99A54A94-4BE0-4374-B3A6-F504E826DDF8}
Uninstall, with the usual prompts
msiexec /x {99A54A94-4BE0-4374-B3A6-F504E826DDF8}Silent, for deployment
msiexec /x {99A54A94-4BE0-4374-B3A6-F504E826DDF8} /qn /norestartProduct code · ARM64
{C55D0D9D-310E-4767-8382-BC4BBBBE6FDB}
Uninstall, with the usual prompts
msiexec /x {C55D0D9D-310E-4767-8382-BC4BBBBE6FDB}Silent, for deployment
msiexec /x {C55D0D9D-310E-4767-8382-BC4BBBBE6FDB} /qn /norestartThe codes above belong to WireGuard 1.1, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "WireGuard*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions WireGuard registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from wireguard.com, which is a domain we have tied to WireGuard LLC.
Every one of the 3 installers on this page comes with the SHA-256 WireGuard LLC declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id WireGuard.WireGuard --exactUpgrade later
winget upgrade --id WireGuard.WireGuardWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of WireGuard, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
97B5A55E66B1179C6F4DC5D3E0EB19BB47721A0206739751FFE9A703E3DFED24
2B7E230C26E533F21C67498517F23D3C8677E144D34353D3A27AD54092C21214
F9710003E772312913973650AB83197C33FDF363E08CBEE688E6C50B5A72A0FD
F0B1B41432CA128DADAAD4C402CAC91C0E9A4771CDACE181CC6C931FB5D20213
5A8CADF7F4ABC2F28D96A851B4A23F0C9807817F9BEBD137B0E1B29D1A7AE039
830035B0593A480F1978138AA941875AEED42DF0B3A95F8C017E17261C6B416A
1B4A1559041A0E8D762E6624A06ABE4AC053DADA36C0F44231068A65FE1A6907
3721A8F12B0B8ED4D9A3120B0438EBC034EA36057D8256A88E57A773E6F46FF8
8EDAD7FF716E23215004802DAC06CD26749E1BA9AE116B23D14DFC8DA2554C12
163303E09402A3E9744D655A5BA428E64BA078446BB67F2977D755F3BCFA3424
71AFA88A7F50494BE7CF5D8AB79F467ECB8A2AD86CE6D2D1890E0E4DE4644D7E
31865D09D8D3D4744CFC9537EA92CAD7519590FD4A75F1F74F685CC38821224F
AD1AF1AE3474EF35DE3809979AEE98758430881B270E47E89E027B3490791D0D
76FCEC042C5989C5B816CD32EAED1E5B1C3B998A4B1C9ECA55F299E3314EF7E4
E11F22D22E2E938822C39B88EE04AF814B2FB53B70ACB00A0BD1BCB2C3F36B1C
0AE67041848AEFC63E4DECFD1F232FC12B74E387320B4E6E01A0880EE06B9CEE
C38CBCF35549644F7B3A3ECFFD213DB5ABB559BD7A1723AB7B8ABF1F1F110A6A
22F90E96F0E496F6DD213A13B15855B2148F0DFEF2C6831064C76066964969BD
2672E92F638EAA34EE926967B4214EF19B78F46B5831CB486B744BDEF4340536
DBE184488F989910586003CDB4A97AE4BADE0715ECBD3A9C56A81A23E9F57A1D
02566EBDB528B4A0CF5B7D668C8A62E5D516821CB459064F7499A43C5807438F
647668DD264BE9A46780686466442C215056633F3AEB802041E06E5481FE048F
A7A4FF4CD19B06FA42A24F597F8275886316B73B094157AA4459884FA84C40D5
2AB25B8507AACA45086E7B65773775B5D43472536C88626696B20753B2F96F5B
ED217FE5FCC6C16CF4D71EC70B341A350E9266A8B1124CB661C453C0DF513B7B
EB6E6CD67AFA46A38130A2E91EFB93FD9ADDD39447674CA82D593DF7C42496C1
4CE9845C8D9801B2B8968353A511F15F5EEA526A70711211348BBEA2B1FA4037
0B6425B6F05ACB628D7D93F098490A4A882307164169B16271F9412B8D3335CE
1C2867DFEA29D26616BE3D757C6D653F2EC4EB23AEC36D7C36522C64540476A1
0CC1D7F7CE5CF71769B0B1C50BA3F59EA53E5A778EF2F1CF4DD9339D34D452F9
C78D1EDB67649F918193F855B995BB41CF4607A708DB8C38B65575B71C06BB19
996FAA20E541B76548B9B6FACAFB82DA12D8792CB79A78057A13F50B43BDD1BF
2B29D80C12457D058BD163BD6F65136F873BFF93EE5595BF01AB90B44C11265A
095C51B340C69EE5B24958636E99775D04D8EC569D4E742EEA17906FAB515A22
D1507604F8595B0505719095BE50A1579CAB49A998210FEEB578A192A19CE14F
275572EBD927DB8304ADD8411BC52B3942BFBC580E64E706AF08C417C81A4452
EC38E62C4ED4763968AD5066C81B987B373C5B898FF8D1819D3F95BAA131ED3D
BF9AD4255A456660F968F0AF68247BE73CAB59035BC64F0C6436ED3E50C1DBDE
C91D33735677B1AD6EF3B5CC58181F891DD8D00583871DA0A297043A86D493B7
5DAFD50180D829F4DCC02698CAEB97C9ED7C513A07A6554894ED4AC58A72E135
5C75EAE9597A92F3B125AEA2156E8FEF4B4D0D106C0CD719D2BAF557E367390E
8699E2066B324175A3F60378E63EE1A643DA47F7F395FBB78B2C9ACE85C0A0B8
7E174349BFAAC8B85E2A11630141F30D0BF5609E904446CCAC44191F8BE6D7C1
503CFA538AA17C2111C32A273353535332A54D03717251356D8E1B35E2D2D22C
A654942C061F7727F7F2C2521F58451A68BD35EEE4CCAA8D26814876F57E8B1C
441EECB96A7C172AEC012FFFB3E10066672145F1C326DA80F21CE9FE57EC6D8C
34F0EDB2385E2066496C80F24F2045F915A668742ECD7DCF0761F1BAD771077F
D15D4CEC8EA08737A79786DDE139CE4F80843BCFE5AE085464ACFD4522BA9F88
DDF9651431C7BB310280C0E17ECA971DA4078FDFF20C6D87497D064EB2AE3A91
9A8837674DC029926858C8FBD847FD45CD4328C672CA2FB1C426A41882037F6A
60E125CDCF1CB4891A4F095B0625F912B3DD73218877432A013C2994F06C3B83
061D5896DCA56768DE6A8B120010AF10C187074B285C94A88CD137AB2DD71794
E1551C4904DAEF2300452666C0104140D84D990A0DB9D696040C4C52BCF38AAC
2A18BA01925A13D55F74150B347F2830E8C0B708BCAB00CED4C5587A791070F2
FA9780C322BB7466395D62EA3B348545F6B732F64CD6BEC559161E29FBA47D29
4443D4CD8C178DA0CCE427F70AE896DDA1E8ED8C4094D59E6EE560A8199D7CAF
317163EA73C6A6FB06A0626812E20B5C233EE60CD255B323F2918839DEF26ED3
D40E4053FD877D60B339D9968D034072839E3CE28E03F95D49773F0102D566F5
CC9ACF331CA338520F7E777C1B1B71B9770692537D3F502B72DC5C3615BFAA8E
E10EA1D879F41BC01508E5688C0F60FDE5A7CD0CBA37AEFE471BF209FF45E822
ACB3FF6A5C6FA62A8010F7C1919A2EF2601D90F95912B599F446900344125D9F
B7148CF4F2598016615CB468436938CBEE9DE9F82DF673ACAD9D10FD929D78F6
321043F621F61A4047FC6DF87A52581ADB28A9F993D088C86A362941203651A0
5529EF883BEBE16DA9980411B0DC009D9FE43BCE55EE6B7F00DE5B534145744B
AAB46F916A0E58133A77E5A02C5C3A66CDB1AAF6BF301377A6967FC7B4B35543
07473B4A6C62C1A661E85EAE221D3B9DE36DF829645A210998216CA2C467C2FA
5BA0CE5530BEA43A450883C931FE4E4F46FF791D9E9AD76D73EE49AB192B99DD
82981689570B14E605AF91F45C6C3B613DB59B40CFC355D5D1FC01688C4E3F4C
6E4D5A75CFAE3FBD5F3AA4C0C4F9F615E12BDCE419548EC2A156F82A402610B2
8D3E7ABF0E513C212B914CD6C9508EEFE11413033B20159E3012B8B8D098ABFA
1C456F49AFE2A5180B28E9DD15893D1B726702B701541385FB455AE6C2B368BD
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every WireGuard version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories WireGuard LLC and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to WireGuard — just other entries, each with its own official URL and published hash.