The discussion centers on the trade-offs between using macOS Secure Enclave for SSH keys versus traditional methods, with users praising the hardware-bound security but criticizing the lack of portability and backup capabilities. Strong disagreements arise regarding whether the biometric requirement is a feature or a bug for automation, and if the perceived security benefits outweigh the usability friction compared to passphrase-protected keys.
139 readable replies · Supporting reply 1 · Supporting reply 2 · Supporting reply 3 · Supporting reply 4WireGuard
wireguard-apple
Swift2021–2025
WireGuard / wireguard-apple
wireguard-apple
Mirror only. Official repository is at https://git.zx2c4.com/wireguard-apple
3Distinct people
4Mentions
0Explicit recommenders
1.4KGitHub stars
What to know before exploring
What it is
Mirror only. Official repository is at https://git.zx2c4.com/wireguard-apple
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
Mentions over time
HN mentions by year4 dated mentions
Observed mentions: 2021-09-30 16:24:50 UTC to 2025-03-15 01:30:06 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 2 | 1 | 1 |
What Hacker News says
4 sourcesCRcromka·Mar 15, 2025Submission
Are official macOS/iOS WireGuard clients abandoned?
3 points · Open discussionThere are two dozens of pending PRs on the project on GitHub. There's hasn't been any change in the master branch (https://git.zx2c4.com/wireguard-apple/log/) nor any release in 2 years.
Some of those PRs fix seriously annoying issues like the currently non-functional Split DNS. https://github.com/WireGuard/wireguard-apple/pull/11 . For the record, that PR has been actually approved earlier this year in January but still haven't been merged.
In another comment from 2 years ago they mention they have resources issues: https://github.com/WireGuard/wireguard-apple/pull/17#issueco... . And I get that, but why not advertise for it, then, ask publicly for new members to join the project? I am sure many would be happy to.
It's rater odd keeping this project so obscure considering Wireguard's otherwise tremendous success.
In Are official macOS/iOS WireGuard clients abandoned?Okay, I just dove into wireguard‘s source code and it looks like I made wrong assumptions. When I used mullvad or wireguard, it always showed „127.0.0.1“ as the server, however, according to wireguard‘s source, this is just set as a placeholder. I assume that mullvad used this code to implement their app too.
https://github.com/WireGuard/wireguard-apple/blob/13b720442d...
https://ibb.co/x5kwxZW
In Running a VPN server on iOS is against AppStore's GuidelinesAs someone who uses OPNsense a lot now, the community WG plugin is both a fairly minimal MVP and also for whatever reason WG on OPNsense has been a bit wonky. DNS for example sometimes just mysteriously stops working for a while, then with absolutely no changes starts working again even while IPs function normally. Haven't had time to try to dig into that yet but as well as speed I'm looking forward very much to WG in the FreeBSD kernel (and OPNsense's move to vanilla FreeBSD foundation as well) in the hopes it'll help eliminate a few extra moving parts.
I'm looking forward though to seeing more tooling developed on top of WG as was always intended, making it easier to plug into other user auth systems and to deploy it to non-technical end users. The QR code thing helps for example but I'd also like to see widespread support for options l
Read the rest
ike autogenerating mobileconfigs [0] for Macs/iDevices and equivalents elsewhere, tying into MDM etc. To get maximum use it needs to get to the point of "install this profile, that's it" or just happen automagically for managed devices. More graphical visualization of what's going on and troubleshooting could help novices too. Such a great foundational tool but projects like this are exciting to see appear as well since they are important next steps.
----
0: https://github.com/WireGuard/wireguard-apple/blob/master/MOB...