Help

Get started in five minutes

Create an account, download the app for your device, connect. Below: a guide per platform, plus corporate mesh and self-hosting.

Create your account

  1. Go to netweave.app and click Log in → Sign up (email + password, or Continue with Google, or your company SSO).
  2. Open your account panel (your email, top right) and either top up a balance or start a subscription — paid in crypto via BTCPay, no card.
  3. Download the app for your device on the download page.
Personal VPN is pay-as-you-go ($0.10/hour connected) or $5/month unlimited. Teams plans are per-seat — see pricing.

macOS available

macOS 13+ · Apple Silicon & Intel (universal build).

  1. Download the .zip from the download page and unzip it.
  2. Move netweave.app to Applications. First launch: right-click → Open (it's an unsigned beta), then confirm.
  3. The shield icon appears in your menu bar. Click it, log in with your account.
  4. Pick a country and click Connect. The first connect installs a small helper (one macOS password prompt); after that it's one click.
  5. Click Disconnect to stop. Your real IP returns immediately.
Connected = your traffic exits the country you picked, with a fresh dedicated IP. The server is destroyed when you disconnect.

Windows available

Windows 10/11 · x64.

  1. Download the installer from the download page and run it. On the SmartScreen prompt (unsigned beta): More info → Run anyway.
  2. Launch netweave from the Start menu / system tray and log in.
  3. Pick a country and click Connect (the tunnel uses a wintun adapter; allow the elevation prompt). Disconnect stops it.
Same on-demand model as macOS: a fresh dedicated exit server boots for your session and is destroyed when you disconnect.

Linux available (CLI)

x86_64 · needs root for the tunnel device.

  1. Download and unpack:
    tar xzf netweave-linux-x86_64.tar.gz
    sudo install -m755 netweave /usr/local/bin/netweave
  2. Connect (personal exit-VPN), pointing at your assigned server + join code from the app's region info:
    sudo NETWEAVE_SERVER=http://<server>:50051 \
         NETWEAVE_JOIN_CODE=<your-code> \
         NETWEAVE_WG_BACKEND=boringtun \
         NETWEAVE_TUN=1 \
         netweave up
  3. Check state: netweave status (lists peers, mesh IPs, connection type). Stop: netweave down.
For a corporate mesh device, use the network's join code (Console → your network → Access). The agent only routes the mesh range (100.64.0.0/10) — your normal internet stays direct (split tunnel).

iOS & Android beta soon

Native apps (on-demand VPN via NetworkExtension on iOS, VpnService on Android) are coming. The flow mirrors macOS: log in, pick a region, one tap to connect. Join the beta list and we'll send you the TestFlight / Play link.

Corporate mesh (Teams)

A private WireGuard network connecting your team's devices and services — internet stays direct, private services are reachable only by members.

As an admin (web console):

  1. Log in on netweave.appNetworks (admin dashboard).
  2. Create network, name it. You see totals, members, machines and your plan at a glance.
  3. Members tab: add people by email (single or bulk). Unknown emails get an invite that's claimed on first login; promote to admin to delegate.
  4. Access tab: copy the join code to enroll machines, add auto-join domains (anyone with a matching work email joins automatically), and edit the access policy (groups + rules) to control who reaches what.
  5. Machines tab: see enrolled devices and their mesh IPs.

As a member (join a device): install the agent (any platform above) and run it with the network's join code — the device gets a mesh IP and sees only the peers your admin's policy allows.

Self-host

netweave is open infrastructure — run the whole stack yourself.

  1. Build the workspace (Rust): cargo build --release for netweave-control-plane, netweave-relay, and the netweave agent.
  2. Provide Postgres + Redis; set NETWEAVE_DATABASE_URL, NETWEAVE_REDIS_URL, NETWEAVE_JOIN_CODE (required — no default), NETWEAVE_TRUST_BUNDLE (the relay needs it or it refuses to start).
  3. Run the control plane (:50051) and relay (:3478/udp), then point agents at them.
Security defaults are fail-closed: the relay won't run unauthenticated, demo seeding is off, and join codes have no public default. See the repo's docs/ for the architecture + security audit.

Troubleshooting

  • macOS won't open the app — right-click → Open (unsigned beta), or System Settings → Privacy & Security → Open Anyway.
  • Connected but no internet — disconnect and reconnect; if it persists, quit the app (the tunnel tears down) and relaunch.
  • "invalid join code" — your code is wrong or expired; copy it again from the app / console Access tab.
  • Linux: tunnel didn't come up — you must run with sudo and NETWEAVE_TUN=1; check netweave status.
  • Billing / payment stuck — crypto settlement takes a confirmation or two; the balance updates automatically. Still stuck? ask support.