How to use a VPN on your PC and phone

Step 1: choose a plan and register your devices

Start on the pricing page, which shows the current prices. SuaVPN plans are sized by how many devices you can register: Basic covers 3, Pro 5, Family 10. Pay by card through Stripe from anywhere; prices are in Brazilian reais, so your issuer handles any conversion. There is no contract: you can cancel at any time from the dashboard, and purchases can be refunded within 7 days under Brazilian consumer law.

After signing in, open Devices in the dashboard and add one entry per device that will use the VPN. Give each a name you will recognize later and pick a location from those listed on the status page. The dashboard generates a WireGuard configuration for that device and shows it as a QR code, for phones, and as a .conf file, for computers. Every device gets its own key pair, so if a phone is lost you revoke that one profile and the rest keep working.

Step 2: install the official WireGuard app

SuaVPN does not ship an app of its own. The service runs on WireGuard, and you connect with the official WireGuard client, which is free, open source, and maintained by the protocol's own developers. That is a deliberate choice: one small program with no ads or bundled extras, instead of a branded app wrapped around the same protocol.

Where to get it depends on the system. On Android, install WireGuard from Google Play; on iPhone and iPad, from the App Store; on a Mac, from the Mac App Store. On Windows, the installer is at wireguard.com/install and asks for administrator rights because it adds a network driver. On Linux, install the wireguard-tools package from your distribution's repositories. Get it only from those sources; copies hosted elsewhere often carry extras you did not ask for.

Step 3: import your configuration

The configuration is a short text file that tells WireGuard which server to talk to, which keys to use, and which traffic to send through the tunnel. SuaVPN profiles route everything, since there is no split tunneling.

Import each profile only on the device it was created for. The same profile on two devices at once makes them compete for the same key, and the connection turns unreliable for both. A second location on the same computer means a second device in the dashboard, and one more of your plan's device slots. How you import it depends on the device:

• Android and iPhone: in the app, tap the plus button and choose to create a tunnel from a QR code, then point the camera at the code shown in the dashboard on another screen. If you opened the dashboard on the phone itself, save the .conf file and import it from your files instead.
• Windows and Mac: save the .conf file, open WireGuard, and use "Import tunnel(s) from file". The tunnel takes its name from the file; on Windows keep that name short, with no spaces or special characters.
• Linux: copy the file to /etc/wireguard/ with a short name such as suavpn.conf and bring it up with sudo wg-quick up suavpn, or import it into NetworkManager if you prefer an entry in the network menu.

Step 4: how do you know the VPN is working?

Three signs, in order. The WireGuard app shows a recent "Latest handshake" timestamp, meaning keys were exchanged and traffic is flowing; a key icon or VPN badge appears in your phone's status bar; and a site that displays your public IP address shows the location you chose instead of your own.

So: flip the switch next to the tunnel, or click "Activate" on a PC, then do the check that matters and open any site that shows your public IP address. If it still shows your own address, the tunnel is not carrying your traffic, whatever the status says.

If the handshake never appears, check the status page first to see whether the location is online, then turn the tunnel off and on again. If that does not help, generate a fresh configuration for the device in the dashboard and import it again. Still stuck? Contact support with the tunnel status, last handshake time, and location.

Should you leave the VPN on all the time?

For most people, yes. A VPN you have to remember to switch on is off exactly when you need it, on the airport Wi-Fi you joined without thinking. Every system can start it automatically, and there are only a few moments, listed further down, when turning it off briefly is the right call.

On Windows, WireGuard runs as a service: a tunnel that was active at shutdown comes back at the next boot, before anyone signs in. Edit the tunnel and check "Block untunneled traffic (kill-switch)" so nothing leaves the PC outside the VPN if the tunnel drops. On a Mac, open the tunnel settings and enable on-demand activation for Wi-Fi, so it starts whenever you join a wireless network. On Linux, systemctl enable wg-quick@suavpn starts the tunnel at boot.

On Android, go to Settings > Network & internet > VPN and tap the gear next to WireGuard. "Always-on VPN" brings the tunnel back after reboots and network changes; "Block connections without VPN" cuts internet access entirely until the tunnel is up; that is the kill switch other services advertise, built into Android. On iPhone, edit the tunnel inside the WireGuard app and set "On-Demand Activation" to Wi-Fi, cellular, or specific networks. With these on, public Wi-Fi is covered without a second thought; the Android, iPhone, Windows, Mac, and Linux guides cover each platform's quirks.

Using an IP from another country, and when to switch off

To appear in another country, create a device in the dashboard with the location you want, import that profile, and activate it. Only one tunnel is active at a time, so the app switches the previous one off. From then on, sites see the server's IP address and location. Keep expectations realistic: what SuaVPN controls is that your traffic exits from that location over an encrypted path. How third-party platforms treat VPN traffic is up to them; streaming services and some apps apply their own rules, and what works with one service today may not tomorrow.

Some moments call for turning the tunnel off for a few minutes:

• Printing or reaching devices on your local network (printer, TV, NAS): with the tunnel up, some systems cannot see them.
• Banking and payment apps that refuse connections from known VPN address ranges: turn the tunnel off for that session and back on afterward.
• Captive portals, the login pages on hotel and airport Wi-Fi: they cannot be reached through the tunnel, so sign in to the network first, then activate.
• Competitive online games, if the nearest listed location still adds latency you can feel.