Devices
A device is a machine you have registered so it can reach your labs over the private tunnel (an encrypted WireGuard connection). This page covers how to manage your devices after you have added them.
Follow Connect your device — it walks through installing WireGuard, registering, and testing the tunnel.
Go to Connectivity → My Devices.
Reading a device card
| Field | Meaning |
|---|---|
| Status | Online (green) — the tunnel is up. Unreachable (amber) or Offline (red) — the device has not been heard from recently; activate the tunnel on that machine. No Connection — the tunnel has never connected. |
| Interface chip | Which network the device is on. The shared network is the default. |
| Device IP | The device's address inside the private network |
| Origin IP | Where the tunnel last connected from |
| Sent / Received | Traffic through the tunnel |
| Reserved | This address is kept for the device (below) |
What the status means
The status comes from the last time the device completed a handshake with the private network. Hover the status badge to see when that was. The page updates the status and traffic counters every few seconds while it is open.
| Status | Last handshake |
|---|---|
| Online | Less than 2 minutes ago |
| Unreachable | Between 2 and 10 minutes ago |
| Offline | More than 10 minutes ago |
| No Connection | Never |
A tunnel only handshakes when there is traffic or a keep-alive, so a device whose tunnel is switched off in the WireGuard app drifts from Online to Offline on its own. That is normal.
Add a device: every field
Add Device opens a dialog. The step-by-step setup is in Connect your device; this table explains every field you may see.
| Field | What it does |
|---|---|
| Device Name | A name you recognize, up to 25 characters. Also used as the name of the downloaded tunnel file. |
| Device Type | Mobile, Laptop, Desktop, Tablet, Server, IoT or Embedded. A label shown on the card. |
| Network | Shown only when you can use more than the public network. Choose which private network the device joins. See Private networks. |
| Reallocate IP | Shown only when you have reserved addresses that no device is using. Pick one to give this device that address, or leave Auto-allocate for a new one. |
| Wireguard Public Key | Paste your own WireGuard public key — 44 characters ending in = — or check Auto Generate Keypair and leave the field empty. |
| Auto Generate Keypair | The platform creates the key pair and keeps the private key, so it can give you a ready-to-use tunnel file and QR code. |
| Primary Device, Trusted Device | Labels for your own reference. They do not change what the device can reach. |
| Reserve IP when Allocated | Reserves the address the device gets, as if you chose Reserve IP afterwards. |
What a tunnel file contains
The tunnel file sends only traffic for the private network through the tunnel. Your normal internet traffic does not go through it. The file also keeps the tunnel alive while it is idle, so labs can reach the device too.
Keep the same address: reserve it
Without a reservation, a device can be given a different address later. If you have scripts, firewall rules or bookmarks that point at a device's address, reserve it.
- Reserve IP in the device's menu keeps the current address.
- Unreserve IP gives it up. The address goes back to the pool and the device may get a different one next time.
You can also select Reserve IP when Allocated when you add a device. Reserved addresses are listed under My Network → IP Addresses — see Private networks.
Get the configuration again
From the device's menu:
| Item | What you get |
|---|---|
| Show Configuration | The tunnel config as text, with Copy and Download Tunnel File |
| Show QR Code | A QR code for the mobile WireGuard app |
| Download Tunnel File | A .conf file for the desktop app |
If you supplied your own key
When you registered with your own public key instead of Auto Generate
Keypair, the platform never saw your private key. The configuration then
contains a {private_key} placeholder that you fill in on your machine, and
Show QR Code / Download Tunnel File are not offered — any QR code is
built in your browser and not stored.
To switch a device between the two modes, delete it and add it again.
Delete a device
Delete in the device's menu removes it and cuts its tunnel. Its address is released unless it is reserved.
Delete devices you no longer use. This is also how you free a slot when you reach the limit.
The confirmation shows the device's current address. If that address is not reserved, you lose it: it goes back to the pool, and someone else can get it.
Limits
The Limit: N / M counter under Add Device shows how many you have used. Every account can register 5 devices by default; your administrator can change that for you. At the limit, Add Device is grayed out.
Labs appear here too
A running lab connected to the private network shows up in this list as a device of type Lab. This is expected: it is how your devices and your labs see each other. You do not need to manage these entries yourself.
Things to know about Lab entries:
- They count toward your device limit. Each running lab on the private network uses a slot, and a lab that joins more than one network uses one per network. The entry is removed when the lab stops, which frees the slot.
- If you are at the limit when a lab deploys, the lab can start without a private-network address — its Device IP stays empty. Delete a device you no longer use, then redeploy the lab.
- Do not delete them. Deleting a Lab entry cuts that lab off the private network until you redeploy it.
- Unreserve IP is blocked on Lab entries with a Not Recommended message. A lab keeps its address through its own settings — see Lab settings.
Devices in an organization
While you are acting as an organization, My Devices shows the organization's devices, and devices you add belong to the organization and count against its limit, not yours.
When your plan or activity changes
| Situation | What happens to devices |
|---|---|
| Your plan is downgraded and you now have more devices than the new limit allows | The newest devices over the limit are disconnected. Their records are kept, and you get a Plan changed notification. Delete the ones you do not need. |
| A free account is inactive for a year | Devices are suspended along with your storage. Signing in again restores them. |
Common errors
| Message | Fix |
|---|---|
| You reached a rate limit. Please delete existing objects to continue. | You are at the device limit. Delete one first. |
| …conflicts with a device that is already registered… | That public key is already in use. Generate a new key pair for this machine. |
Do it with an AI assistant
You can also do this by asking an AI assistant connected to your account — see Connect an AI assistant to set one up.
| Ask | What the assistant does |
|---|---|
| “List my devices and when each last connected” | list_devices |
| “Give me the WireGuard config for my laptop again” | Finds the device with list_devices, then device_config |
| “Add my new desktop” | add_device, then device_config |
| “Remove my old phone” | list_devices, then delete_device |
A config that the platform generated includes the device's private key. You reserve an address in the dashboard, not through the assistant. Device tools work on every plan, including the free plan.
Next
- Secure tunnels and networking
- Private networks — reserved addresses and extra networks
- Cannot connect — when the tunnel will not come up