Get a unique device profile
Ask your gateway operator for a device-specific .conf file or generate one on your own gateway. Do not reuse another device’s profile or publish its private key.
Choose your client
Use an official WireGuard client for your platform, or the clearly labeled Android repair candidate for testing. Import the .conf file and approve the platform VPN request when you choose to connect.
Verify more than the button
Wait for a recent handshake and confirm browsing, DNS and the expected external address. If there is no handshake, check the endpoint, UDP port, firewall and matching public keys.