Your VPN provider or router, on Apple TV

Almost no VPN provider ships a tvOS app, and almost every one of them speaks standard WireGuard. That is all an Apple TV needs. Take the .conf file your provider or router already gives you, import it into WG Connect, and the Apple TV joins the same tunnel as the rest of your devices.

Commercial VPN providers

For privacy and for travel: your traffic leaves through the provider's server instead of the hotel's network.

• Mullvad on Apple TV — generate a WireGuard config in your account and import it
• Proton VPN on Apple TV — generate a config for third-party clients and import it
• IVPN on Apple TV — add a device key, download the config, import it

Firewalls and routers

For reaching your own network remotely: Plex, a NAS, cameras and everything else behind the home router, from a hotel or a second home.

• Firewalla on Apple TV — export a profile from the VPN Server feature
• pfSense on Apple TV — build the client config from your tunnel and peer
• OPNsense on Apple TV — build the client config from your instance and peer
• UniFi on Apple TV — download a client config from the gateway's WireGuard VPN server

What is the same everywhere

• An Apple TV has no camera. It cannot scan the QR codes providers display. WG Connect reverses the flow — the TV shows a QR code, your phone scans it, and the file transfers over your local Wi-Fi. Pasting the config text, importing from a URL, and manual field entry work too.
• Protocol detection is automatic. WG Connect reads the file and works out whether it is WireGuard or AmneziaWG. There is no protocol setting to get wrong.
• Give each device its own config. Two devices sharing one WireGuard key will fight over the same tunnel and the connection will flap between them.
• Use a hostname as the endpoint unless you have a static address, so the profile survives an ISP address change.