# VaultLine VPN - User Guide

**Version:** 2.0.0 | **Platform:** Windows 10 / 11

---

## Getting Started

VaultLine VPN is a secure, lightweight VPN client built on WireGuard - one of the fastest and most modern VPN protocols available. This guide covers everything you need to know to use VaultLine VPN effectively.

### Prerequisites

Before using VaultLine VPN, ensure:

- VaultLine VPN is installed (see **INSTALLATION_GUIDE.md**)
- You have a valid `.conf` configuration file from your VPN administrator
- You have an active internet connection

---

## Launching VaultLine VPN

Open VaultLine VPN using any of these methods:

| Method | How |
|--------|-----|
| **Desktop shortcut** | Double-click the VaultLine VPN icon on your Desktop |
| **Start Menu** | Start Menu > VaultLine VPN > VaultLine VPN |
| **Windows Search** | Press `Win` key, type "VaultLine", press Enter |

> **First launch:** The application may take a few seconds to load on its first run while it initializes.

---

## Importing a VPN Configuration

Before you can connect, you need to import a WireGuard configuration file (`.conf`).

### How to Import

1. Launch VaultLine VPN
2. Click **"Import Tunnel"** or the **"+"** button in the tunnel list
3. In the file browser, navigate to your `.conf` file
4. Select the file and click **"Open"**
5. The tunnel will appear in your tunnel list with the filename as its name

### Managing Multiple Configurations

You can import multiple `.conf` files for different VPN servers or networks:

- **Work VPN** - For accessing office resources
- **Travel VPN** - For secure browsing on public Wi-Fi
- **Home VPN** - For connecting to your home network remotely

Each imported tunnel appears as a separate entry in the tunnel list.

> **Tip:** Name your `.conf` files descriptively before importing (e.g., `Work_London.conf`, `Travel_EU.conf`) since the filename becomes the tunnel name in the app.

---

## Connecting to the VPN

### Step-by-Step

1. **Select a tunnel** from the tunnel list on the left side of the app
2. Click the **"Connect"** button (or **"Activate"**)
3. Wait for the status to change to **"Connected"**
4. A green indicator confirms you're connected

### What Happens When You Connect

When you activate a VPN tunnel:

1. **Encrypted tunnel** is established between your device and the VPN server
2. **Your IP address** is masked - websites see the VPN server's IP instead of yours
3. **All traffic** is routed through the encrypted tunnel (if `AllowedIPs = 0.0.0.0/0`)
4. **DNS queries** are routed through the VPN's DNS server for privacy

> **Connection time:** WireGuard typically connects in under 1 second. If it takes longer than 10 seconds, check your internet connection and configuration.

---

## Disconnecting from the VPN

### How to Disconnect

1. In VaultLine VPN, select the active tunnel
2. Click the **"Disconnect"** button (or **"Deactivate"**)
3. The status will change to **"Disconnected"**
4. Your traffic now flows through your normal internet connection

### When to Disconnect

- **Local network access** - Some local devices (printers, NAS) may not be reachable through the VPN
- **Speed-sensitive tasks** - Large downloads or streaming may be faster without VPN (depending on server location)
- **Trusted networks** - On your home network where VPN isn't needed
- **Troubleshooting** - If you're experiencing connectivity issues

> **Security reminder:** Always keep VPN connected on public or untrusted Wi-Fi networks (cafes, airports, hotels).

---

## Managing Configurations

### Viewing Configuration Details

1. Select a tunnel from the list
2. The right panel shows tunnel details:
   - Tunnel name
   - Interface settings (your VPN address)
   - Peer settings (server endpoint)

### Adding a New Configuration

1. Click **"Import Tunnel"** or **"+"**
2. Select a new `.conf` file
3. The tunnel is added to your list

### Removing a Configuration

1. Select the tunnel you want to remove
2. Click **"Remove"** or the **trash icon**
3. Confirm the deletion when prompted

> **Note:** Removing a tunnel from VaultLine VPN only removes the local copy. Your VPN administrator can provide the `.conf` file again if needed.

### Switching Between Configurations

1. **Disconnect** from the current tunnel (if connected)
2. **Select** a different tunnel from the list
3. **Connect** to the new tunnel

> **Important:** Only one tunnel can be active at a time. Connecting to a new tunnel will automatically disconnect the current one.

---

## Status Indicators

### Connection States

| Status | Indicator | Meaning |
|--------|-----------|---------|
| **Disconnected** | Grey / Inactive | No VPN connection active. Traffic uses your normal internet. |
| **Connecting** | Yellow / Pulsing | Establishing encrypted tunnel with the server. |
| **Connected** | Green / Active | VPN is active. All configured traffic is encrypted. |
| **Error** | Red / Alert | Connection failed. Check configuration and internet access. |

### Connection Details (When Connected)

When a tunnel is active, the app displays:

| Detail | Description |
|--------|-------------|
| **Tunnel Name** | The name of the active configuration |
| **Endpoint** | The VPN server address you're connected to |
| **VPN IP Address** | Your assigned IP address within the VPN network |
| **Data Transferred** | Bytes sent and received through the tunnel |
| **Latest Handshake** | Time of the last successful cryptographic handshake |
| **Uptime** | How long the current connection has been active |

### Understanding the Handshake

WireGuard performs periodic handshakes (every 2 minutes) to maintain the connection:

- **Recent handshake** (< 3 minutes ago) = Connection is healthy
- **Stale handshake** (> 5 minutes ago) = Possible connectivity issue
- **No handshake** = Connection may not be established; check your configuration

---

## System Tray Behaviour

VaultLine VPN may minimize to the system tray (notification area):

- **Tray icon** shows connection status at a glance
- **Right-click** the tray icon for quick connect/disconnect options
- **Double-click** the tray icon to restore the main window
- The VPN remains active even when the window is minimized

---

## Tips and Best Practices

### Security

- **Keep `.conf` files private** - They contain your encryption keys
- **Use unique configurations** per device - Don't share the same `.conf` across multiple devices
- **Back up configurations** securely - Store copies in an encrypted location
- **Report compromises** immediately to your VPN administrator if you suspect a key leak

### Performance

- **Choose the nearest server** for the best speed and lowest latency
- **Full tunnel vs. split tunnel:**
  - `AllowedIPs = 0.0.0.0/0` routes ALL traffic through VPN (most secure)
  - `AllowedIPs = 10.0.0.0/8` routes only specific network traffic (better for speed)
- **WireGuard is fast** - Performance impact is typically minimal compared to other VPN protocols

### Connectivity

- **Firewall:** Ensure UDP port **51820** (default WireGuard port) is not blocked
- **Corporate networks:** Some networks block VPN traffic. Contact your IT department.
- **Public Wi-Fi:** Always use VPN on public networks for security
- **Mobile hotspot:** VPN works normally over mobile data connections

---

## Frequently Asked Questions

### Do I need to install WireGuard separately?

No. The VaultLine VPN installer automatically installs WireGuard if it's not already present on your system.

### Can I use VaultLine VPN on multiple devices?

Yes, but each device should have its own unique `.conf` file with a different key pair. Contact your VPN administrator for additional configurations.

### My internet stops working when connected to VPN

This usually means the VPN server is unreachable. Check:
1. Your internet connection (try disconnecting VPN and browsing)
2. The VPN server status with your administrator
3. The `DNS` setting in your `.conf` file

### How do I make VaultLine VPN start automatically?

You can add VaultLine VPN to your Windows startup:
1. Press `Win + R`, type `shell:startup`, press Enter
2. Create a shortcut to `vaultline_vpn.exe` in this folder

### Does VaultLine VPN log my activity?

No. VaultLine VPN does not log your browsing activity, connection history, or traffic data. WireGuard is designed with privacy as a core principle.

### How do I update VaultLine VPN?

Download the latest installer from your VPN administrator or the VaultLine website. Run the new installer - it will update the existing installation.

### What port does WireGuard use?

WireGuard uses **UDP port 51820** by default. The actual port is specified in the `Endpoint` line of your `.conf` file.

### How do I verify my VPN IP address?

While connected, visit [https://whatismyipaddress.com](https://whatismyipaddress.com). The displayed IP should be the VPN server's IP, not your real IP.

---

## Getting Help

| Resource | Details |
|----------|---------|
| **Installation issues** | See **INSTALLATION_GUIDE.md** |
| **Configuration details** | Contact your VPN administrator |
| **Email support** | support@vaultline.example.com |
| **Website** | https://www.vaultline.example.com/support |
| **Support hours** | Monday - Friday, 09:00 - 17:00 GMT |

When contacting support, please include:
- Your VaultLine VPN version (shown in the About section)
- Your Windows version (Settings > System > About)
- A description of the issue and any error messages
- Steps to reproduce the problem

---

**Copyright (c) 2026 VaultLine Technologies. All rights reserved.**
