Set Up a Personal VPN on a Budget VPS: WireGuard Guide for $3–$6/mo

A personal VPN is one of the most practical uses for a budget VPS. For $3–$6/month, you can run your own WireGuard VPN server that gives you privacy on public Wi-Fi, secure access to your home network, a fixed IP address for remote work, and the ability to bypass geo-restrictions — all without paying $10–$15/month for a commercial VPN service. WireGuard is faster, simpler, and more secure than OpenVPN, and it runs comfortably on the cheapest VPS plans. Before you start, compare budget VPS providers to find one that offers KVM virtualization and a dedicated IPv4 address.

Why WireGuard on a Budget VPS?

WireGuard has several advantages over traditional VPN protocols that make it ideal for low-resource VPS plans:

• Minimal overhead: WireGuard lives in the Linux kernel. A single-core budget VPS can handle 500+ Mbps of encrypted traffic — limited by the network port, not the CPU.
• Memory footprint: WireGuard uses under 20 MB of RAM. Even a 512 MB VPS can run it alongside a web server or other services.
• Simple configuration: A complete WireGuard setup takes 10 minutes: install, generate keys, write a config file, and start the service. No certificate authorities, no complex routing rules.
• Built-in roaming: WireGuard handles IP changes seamlessly. If your laptop moves from Wi-Fi to cellular, the VPN stays connected.

What You Need

• A budget VPS with at least 512 MB RAM and a public IPv4 address ($3–$6/month)
• Ubuntu 22.04 or 24.04 LTS (or any distribution with kernel 5.6+)
• WireGuard installed on your client devices (Windows, macOS, Linux, iOS, Android)

Step-by-Step Setup

1. Install WireGuard on the VPS

sudo apt update
sudo apt install wireguard -y

2. Generate Keys

cd /etc/wireguard
umask 077
wg genkey | tee privatekey | wg pubkey > publickey

3. Create the Server Configuration

Create /etc/wireguard/wg0.conf:

[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = <paste server private key>

# Enable IP forwarding
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

[Peer]
# Client 1 - your laptop
PublicKey = <paste client public key>
AllowedIPs = 10.0.0.2/32

4. Enable IP Forwarding

sudo sysctl -w net.ipv4.ip_forward=1
echo "net.ipv4.ip_forward=1" | sudo tee -a /etc/sysctl.conf

5. Start WireGuard

sudo systemctl enable wg-quick@wg0
sudo systemctl start wg-quick@wg0

6. Configure the Client

On your laptop or phone, create a WireGuard config:

[Interface]
PrivateKey = <paste client private key>
Address = 10.0.0.2/24
DNS = 1.1.1.1

[Peer]
PublicKey = <paste server public key>
Endpoint = your-vps-ip:51820
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25

The AllowedIPs = 0.0.0.0/0 line routes all traffic through the VPN. If you only want to route traffic to your home network or specific services, change this to the appropriate subnet.

Security Considerations

Running your own VPN means you are responsible for the server’s security. At minimum, configure the firewall to only allow WireGuard traffic (UDP port 51820) and SSH on a non-standard port:

sudo ufw default deny incoming
sudo ufw allow 51820/udp
sudo ufw allow 2222/tcp  # your custom SSH port
sudo ufw enable

Also consider setting up Fail2ban and unattended upgrades as described in our security hardening guide. A compromised VPN server is worse than no VPN at all.

Performance Expectations

On a $5/month VPS with a 1 Gbps port, WireGuard typically achieves 300–600 Mbps throughput — more than enough for streaming, browsing, and remote work. The bottleneck is almost always the VPS network port, not WireGuard itself. If you need higher throughput, choose a provider with unmetered or high-bandwidth plans.

Cost Comparison: DIY VPN vs Commercial VPN

Feature	DIY WireGuard on Budget VPS	Commercial VPN ($10–$15/mo)
Monthly cost	$3–$6	$10–$15
Data logging	None (you control the server)	Varies by provider
Server locations	1 (your VPS data center)	50+
Setup time	10 minutes	1 minute (app install)
Throughput	300–600 Mbps	200–500 Mbps (varies)
Multi-device	Unlimited peers	5–10 devices
Run other services	Yes (web server, etc.)	No

The DIY approach saves $7–$12/month and gives you full control over your data. The trade-off is a single server location and the need to manage your own security updates. For most technical users, the savings and control are well worth the 10-minute setup.

Ready to set up your own VPN? Browse our list of budget VPS providers to find a plan with KVM virtualization, a dedicated IPv4 address, and enough bandwidth for your VPN traffic.