WireGuard for Firefox by Browser Tunnel Contributors

macOS-only preview. Requires the separate Firefox WireGuard menu-bar companion and your own supported full-tunnel WireGuard configuration. No VPN service or subscription is included.

WireGuard for Firefox connects Firefox to profiles configured in the companion. It leaves the Mac's system routes and DNS settings unchanged. No Docker or official WireGuard app is needed.

Download the ready-to-run Apple Silicon Mac app (0.2.1): https://github.com/kristof-dragon/firefox-wireguard/releases/tag/v0.2.1
Installation instructions: https://github.com/kristof-dragon/firefox-wireguard/blob/main/docs/installation.md
Source code (MPL 2.0): https://github.com/kristof-dragon/firefox-wireguard

The download requires an Apple Silicon (M-series) Mac with macOS 13 or later. No developer tools are needed. It is ad-hoc signed, not Developer ID signed or notarized by Apple; macOS may require Privacy & Security → Open Anyway on first launch. Intel users must build from source; Intel builds are untested.

Select a profile, connect, and see the public exit IP with country flag, uploaded and downloaded session totals, configured tunnel DNS, and client WireGuard IPs. The kill switch is on by default and blocks covered requests during connection setup and detected failures. Turning it off permits ordinary browsing during an outage. Disconnect explicitly returns to ordinary browsing. Localhost remains local; other private addresses use the tunnel when remotely reachable.

While protected, WebRTC calls and network prediction are disabled. Allow the extension in private windows so it can control Firefox's browser-wide proxy. Close existing tabs and downloads before connecting. This preview is not an operating-system firewall: existing connections, browser-internal traffic, IPv6, DNS-over-HTTPS, and HTTP/3 still need broader testing. Disabling or removing the extension ends protection.

Browsing requests and responses pass through your selected WireGuard server. An HTTPS request through that tunnel to ipwho.is obtains the exit IP and country on connection and approximately every five minutes. That provider sees the exit IP and normal request metadata. The project has no analytics or browsing history storage.

Privacy policy: https://github.com/kristof-dragon/firefox-wireguard/blob/main/docs/privacy.md
Test evidence and limitations: https://github.com/kristof-dragon/firefox-wireguard/blob/main/docs/validation.md

This independent project is not affiliated with Mozilla or the WireGuard project.