Skip to content
Network and VPN · Rio de Janeiro or São Paulo

WireGuard Server on a VPS in Brazil

Run your own WireGuard server on a Cloud VPS in Rio de Janeiro or São Paulo, Brazil, with a web panel to create access for your team. Everything arrives installed on Debian 13, with HTTPS and the admin login ready.

  • Debian 13 with Docker, ready to use
  • Web panel with HTTPS and a QR code per client
  • Fits the Start plan, using about 100 MB of memory
  • 1 Gbps link with unlimited traffic
See plans
wireguard.yourdomain.com
VPN clients with traffic and QR code
VPN clients with traffic and QR code1 screens
Plans

VPS plans for hosting WireGuard

The installation is available on all four Cloud VPS plans: Start, Basic, Plus and Pro. All include 1 Gbps with unlimited traffic, IPv4 and IPv6. Start, from US$ 6.95, covers most use cases.

Location
Selected

Basic

US$ 11.95/mo
  • 2 vCore CPU
  • 2 GB Memory
  • NVME 40 GB Disk
  • Unlimited Traffic

Plus

US$ 16.95/mo
  • 2 vCore CPU
  • 4 GB Memory
  • NVME 80 GB Disk
  • Unlimited Traffic

Pro

US$ 21.95/mo
  • 4 vCore CPU
  • 6 GB Memory
  • NVME 120 GB Disk
  • Unlimited Traffic

Billed monthly in US dollars, with the app installed. Rio de Janeiro or São Paulo, same price. Plans start at the smallest size where the app runs well. Need more? Upgrade from the client area, without reinstalling.

Where the server lives

WireGuard in Rio de Janeiro

With Rio de Janeiro selected, your VPS with WireGuard runs in Mega's original data center, on our own network with a presence at the Rio internet exchange (IX.br) and redundant transit. It is the lowest latency for users in Rio, Espírito Santo and Minas Gerais, and our support team works in the same city as the server.

Measured latency, not a promisemeasured 18 minutes ago

Rio de Janeiro to

Vivo11.4ms
Claro19.5ms
TIM20.2ms
Oi11.1ms
Algar4.5ms

São Paulo to

Vivo15.0ms
Claro8.6ms
TIM23.7ms
Oi15.2ms
Algar7.0ms
Ping from real customer connections on each carrier to our data centers in Rio and São Paulo, measured every hour by independent probes (Globalping). Algar: measured from our edge, where we connect to it directly.

What WireGuard is and what comes with your VPS

WireGuard is an open-source VPN designed to be lean, and it has been part of the Linux kernel since 2020. It uses Curve25519 and ChaCha20 encryption, and it is simpler to configure and faster than OpenVPN and IPsec. Official clients exist for Windows, macOS, Linux, Android and iOS.

To manage the VPN without editing config files by hand, we install wg-easy, version v15.4.0 (August 2026). It is an open-source web interface where you add each VPN client (peer). Each one gets a name, its own keys, a QR code to scan on a phone and a .conf file for a computer.

wg-easy runs in Docker, from the ghcr.io/wg-easy/wg-easy image. VPN traffic comes in on port 51820/UDP, open in the firewall, and the panel runs on port 51821 behind an HTTPS proxy. The whole setup uses about 100 MB of memory.

Source: Official WireGuard and wg-easy documentation, consulted in October 2026.

What is included with your VPS

  • WireGuard with wg-easy installed on Debian 13 with Docker
  • Dedicated HTTPS address, with a Let's Encrypt certificate
  • Admin account created, with login details sent by email and WhatsApp
  • Passwords and keys generated at install time, for you only
  • Root SSH access and a VPS panel in the client area (reboot, reinstall, change password and console)
  • 1 IPv4 and IPv6, inline DDoS protection and a 1 Gbps link with unlimited traffic
  • 24/7 support in Portuguese by WhatsApp, ticket and phone, for server-side issues

Why run your own WireGuard server

Remote team

Employees join the company network from a laptop or phone, even when working from home.

Cameras and NAS

Reach cameras, storage and internal servers from anywhere, without exposing those ports to the internet.

Brazilian IP while traveling

Browse through your VPS and keep a Brazilian IP when you are outside the country.

Public Wi-Fi

At an airport, hotel or café, send your traffic encrypted through the tunnel to your own server.

Branch office link

Connect offices in different cities to the same private network.

Protected access to your VPS

Make admin panels and internal apps reachable only inside the tunnel, with no exposed ports.

What the panel looks like

wg-easy screen with registered clients, each one's traffic and the shortcut to generate the QR code (example)
wg-easy screen with registered clients, each one's traffic and the shortcut to generate the QR code (example)

Screenshots come from a Mega test installation, with no customer data.

What comes already configured

Client panel

Create, name, enable, disable or delete VPN clients from your browser.

Keys and QR code

Each client has its own keys, a QR code for the phone and a .conf file for the computer.

Monitoring

The panel shows traffic sent and received and the last connection of each client.

Client expiration

Set an expiry date for temporary access, such as contractors and guests.

Panel security

Includes an admin password, TOTP 2FA and support for more than one administrator.

Network inside the tunnel

Supports IPv4 and IPv6 in the tunnel, custom DNS and split tunneling, sending only some networks through the VPN.

How to get started

  1. 1

    Choose a plan

    Select Start, Basic, Plus or Pro and a payment method: Pix, card or boleto, billed monthly, semiannually or annually.

  2. 2

    Choose the location

    Tell us in the order whether the VPS should be in Rio de Janeiro or São Paulo, Brazil. The price is the same in both.

  3. 3

    Receive your access details

    The panel's HTTPS address and the admin login arrive by email and WhatsApp.

  4. 4

    Create your clients

    Log in to the panel, add each person or device and connect with the QR code or the .conf file.

Which plan to choose

WireGuard with wg-easy uses about 100 MB of memory and needs at least 256 MB free, so Start is enough. Larger plans are for those who will share the VPS with other apps.

PlanBest for
Start
1 vCore · 1 GB
1 vCore, 1 GB RAM and 20 GB NVMe. Recommended for a VPN dedicated to a team or personal use.
Basic
2 vCore · 2 GB
2 vCore, 2 GB RAM and 40 GB NVMe. A good option if the VPN shares the server with one or two light apps.
Plus
2 vCore · 4 GB
2 vCore, 4 GB RAM and 80 GB NVMe. Suited for when the VPS also hosts business applications besides the VPN.
Pro
4 vCore · 6 GB
4 vCore, 6 GB RAM and 120 GB NVMe. For consolidating several services on one server, with the VPN among them.
Frequently asked questions

WireGuard VPS: frequently asked questions

What is WireGuard?

It is an open-source VPN, included in the Linux kernel since 2020, that uses Curve25519 and ChaCha20 encryption. It is simpler to configure than OpenVPN and IPsec.

Can I run a self-hosted WireGuard server on a VPS?

Yes. On a Mega Dedicados VPS, WireGuard arrives preinstalled with wg-easy, on Debian 13 with Docker, with an HTTPS panel and an admin account created. You only need to add your clients.

Which VPS plan is best for WireGuard hosting?

Start, with 1 GB of memory, is the recommended one. The app uses about 100 MB and needs at least 256 MB free. Move to a larger plan only if you will run other apps on the same server.

What is wg-easy?

It is an open-source web interface for managing WireGuard. It creates clients with keys, a QR code and a .conf file, and shows each one's traffic and last connection.

Which ports does a WireGuard server use?

The VPN uses 51820/UDP, open in the firewall. The wg-easy panel runs on 51821 behind an HTTPS proxy, so you reach it through a secure address.

Does WireGuard work on phones and computers?

Yes. There are official clients for Windows, macOS, Linux, Android and iOS. On a phone you scan the QR code; on a computer you import the .conf file.

Can I get a Brazilian IP with a WireGuard VPS while traveling?

Yes. When you connect to the VPN, your traffic exits through your VPS's IP, located in Rio de Janeiro or São Paulo, Brazil. Speed depends on the VPS and your local connection.

Can I use the same VPS for other apps, and what support is included?

Yes, each app gets its own address, as long as they fit in the plan's memory. 24/7 support in Portuguese covers the server side; using WireGuard and wg-easy is covered in the project's documentation.

Updated on October 19, 2026

Questions about the app or the plan?

Tell us what you want to run and for how many users; we will suggest the plan. The app arrives installed.

Talk to an engineer
Scan the code