Creating Your Own Encrypted VPN in 15 Minutes

How to Set Up Your Own Encrypted VPN Server in Just 15 Minutes
The safest VPN is the one you set up and control yourself.

You’ve probably seen many VPN service ads. However, as we’ve mentioned in previous articles, routing all your internet traffic through a commercial VPN isn’t the best idea.

Despite their promises, many VPN companies don’t offer complete privacy. They can track your browsing history since they manage your traffic and DNS requests. Some of them even keep logs of your connections and IP addresses, which can result in your data being handed over to authorities or stolen by hackers.

In practice, you don’t always need a VPN since most websites already use encrypted connections (HTTPS). However, a VPN can be helpful when you need to bypass network restrictions, such as accessing blocked websites or during travels when content is unavailable.

This is why it makes sense to consider setting up your own VPN server, encrypted and under your control.

Easy option: Installing Tailscale on a home computer
Tailscale makes it easy to set up a network and connect your devices to it. Based on the WireGuard protocol, Tailscale provides security and can work on a wide range of devices.

You can use Tailscale as an alternative to commercial VPNs, encrypting and routing traffic through your home computer. To do this, simply install Tailscale on a computer or laptop that’s always on at home. The program supports Windows, macOS, and Linux.

After creating a Tailscale account and network (tailnet), enable the "exit node" feature and connect other devices, like your laptop or smartphone. This allows you to use your home computer to route internet traffic.

Tailscale ensures that private keys remain only on your devices, with no access for the company to your data. This makes VPN usage secure without the need to manage encryption keys manually.

Intermediate level: Setting up Tailscale on Raspberry Pi
If your router is in an inconvenient location, you can use a separate device, like a Raspberry Pi. This miniature computer with a Gigabit Ethernet port can be connected to your router via Ethernet cable for a more stable connection.

To install Tailscale on Raspberry Pi, flash a microSD card with Raspberry Pi OS and connect the device to a monitor for setup. After installing Tailscale, run a few terminal commands to enable IP forwarding and complete the VPN server setup.

Advanced level: Tailscale on Fly.io or WireGuard on VPS
For advanced users, you can set up Tailscale on virtual machines at Fly.io, allowing you to create exit nodes in different regions. If you prefer full independence, you can manually install WireGuard on a VPS.