Drıftstack docs
Docs

Add an OpenVPN (.ovpn) or WireGuard (wg0.conf) proxy

You might be here because: “how do I add my VPN” · “where do I upload the ovpn file” · “paste wg0.conf” · “add your OpenVPN configuration to save an OpenVPN proxy” · “can I use my VPN provider instead of a proxy” · “OpenVPN username and password” · “vpn setup” · “import ovpn”

Short answer

Open Proxies → Add proxy, choose Type OpenVPN or WireGuard, then paste the whole .ovpn or wg0.conf into the box or use Upload a .ovpn file / Upload a wg0.conf file. The endpoint, keys and allowed IPs fill in from the file. Press Add proxy; the row is saved to your account and Check VPN connects the tunnel to verify it (up to 90 s). VPN proxies need a paid plan.

Check first

Likely causes and fixes

  1. OpenVPN. The file must be a client config with a client line and a remote line, up to 256 KiB, with certificates and keys inline. If it has no client line the app offers Add the missing client line; if it has script lines it offers Remove unsupported lines. If the provider needs a username and password, enter them in the OpenVPN fields — they are stored with the config.
  2. WireGuard. Paste the whole wg0.conf. Required: PrivateKey, peer PublicKey, Endpoint = host:port, and Address; AllowedIPs defaults to 0.0.0.0/0; DNS and PresharedKey are optional.
  3. “Add your OpenVPN configuration to save an OpenVPN proxy.” / “Add your WireGuard configuration…” — the Type is a VPN but the box is empty.
  4. Server address inside the file must be public. See Proxy host must be a public internet address.
  5. “This VPN configuration points at a Driftstack server. Use your VPN provider’s server address.” — a remote, http-proxy, socks-proxy or WireGuard Endpoint names one of Driftstack’s own servers. Put your VPN provider’s server there instead.
  6. “… holds a character a text config cannot contain …” (the app says “Line N: This line holds a character…”; the server says “Line N of this file holds a character…”) — that line has a hidden character: a control, line-separator, invisible formatting or text-direction character (often from copying the file out of a chat, PDF or word processor). Export the file from your VPN provider again as plain text and paste or upload that. For WireGuard the desktop app checks this when you paste the file.
  7. The stored file and keys are never shown again. The row lists only the endpoint, allowed IPs, address, DNS, or the OpenVPN username. To change anything inside, paste the full file again.
  8. The plan does not include VPN. See OpenVPN/WireGuard not included on this plan.

If it still fails

Press Talk to a person in this chat (or open Help) and include the exact refusal sentence and line number — never the file, keys or password.