AmneziaWG 2.0 is here

In this article, we’ll walk you through what AmneziaWG (AWG) 2.0 is, what’s changed in the protocol, and why this release is a major step forward in the fight for a free internet. Versions for Amnezia Free and Premium aren’t far behind, but for now, we’ll show you how to install and configure AWG 2.0 if you’re using Self-hosted.

From Camouflage to Mimicry

Last year we realized that camouflage isn’t always enough. DPI (deep packet inspection) systems can detect even obfuscated protocols by analyzing statistics and behavioral patterns.

AmneziaWG is our take on a cutting-edge, open source fork of the WireGuard protocol. The first version was released in 2024, and we’ve been steadily improving it ever since.

AmneziaWG 1.0 and AWG 1.5 could “make noise” and tweak headers to throw off censors’ tools, but in 2026 that doesn’t cut it. With AmneziaWG 2.0, we’re building on the capabilities of its predecessors. Instead of just hiding traffic, we now disguise it as a legitimate UDP. The updated version mimics DNS queries, QUIC connections, or SIP calls. For an ISP, this looks like a regular working protocol, so the traffic passes through.

The Self‑hosted option lets you become a provider yourself: spin up your own VPN server and share access to an uncensored internet with friends and family.

What’s Changed Compared to AmneziaWG 1.5

AmneziaWG 2.0 is packed with surprises for DPI systems and statistical analysis tools.

Signature Packets

In addition to “noise” packets, we’ve added five signature packets that can be shaped to look like genuine traffic — a DNS query, a QUIC handshake, or any other common protocol — so they wouldn’t be blocked by DPI systems. AmneziaWG 2.0 comes with sensible defaults, but you can tweak the parameters to closely mimic a specific protocol and further lower your risk of being exposed.

CPS: The Language of Mimicry

For AWG 2.0, we developed a system called CPS (Custom Protocol Signature) — a builder that dresses up VPN traffic to slip past the DPI tools. CPS combines special tags defined in the connection configuration, lowering the risk of detection. The resulting traffic looks like a legitimate UDP session, fooling the DPI filters.

Padding for All Packets

Previously, only the handshake messages — those used to establish a connection — had variable sizes. Now random bytes are being added to every packet and to all message types. This makes it much harder for DPI systems to recognize patterns and decide which connection to block.

Think of it like sending parcels. With AmneziaWG 1.0, we changed the envelope size only for the first parcel, leaving all the others the same size — making it relatively easy for a sensor to pick them out and cut the connection.

In AWG 2.0, we add a random amount of packing material to every parcel. This way, it’s much harder to tell what’s inside.

Dynamic Header Ranges

AmneziaWG 2.0 assigns a random header value from a configurable range to each packet, instead of using a fixed one. This makes the protocol’s signature unpredictable and complicates the work of censors.

Think of it like getting past a security guard who checks passes. With AWG 1.0, everyone was given a pass with the same number — say, 12345. Sooner or later, the guard would’ve memorized it. With AmneziaWG 2.0, each user in this scenario gets a pass with a randomly generated number from 00001 to 99999. It would take the guard far too long to memorize all those numbers, so they’d simply give up.

How to Set Up AWG 2.0 for AmneziaVPN

Installing AmneziaWG 2.0 on your server is just as easy as the previous version. Let’s go through it. To connect using AmneziaWG 2.0, first install the protocol on your server:

1. Update the AmneziaVPN app to version 4.8.12.9 or later from the official download page.
2. In the app, select any connection.
3. Click the gear icon next to your server connection to see the list of available protocols.
4. Click the download icon next to AmneziaWG, then “Install”.
5. Done! The updated AmneziaWG will appear on the list of available protocols — you can share access using it and connect right away.

In AmneziaVPN versions 4.8.12.9 and later, AmneziaWG 1.0 appears as AmneziaWG Legacy, but you’ll need separate configuration files and keys to set it up. We recommend gradually migrating your users to AWG 2.0.

Note that previous versions of the protocol are not compatible with AmneziaWG 2.0. To connect using the new protocol, you’ll need to generate fresh guest configuration files. Meanwhile, any new servers you create will use AWG 2.0 by default, and you won’t be able to roll them back to AmneziaWG Legacy.

We strongly recommend reviewing the installation and configuration details in our guide for AmneziaWG 2.0.

Free the Internet

AWG 2.0 is a major step forward for us. Day in and day out, we work to ensure that our users have reliable access to the internet — even where it’s restricted. Information, like our users, loves freedom.

Use AmneziaWG 2.0, share it with those close to you, and stay connected.