You can run your own VPN, and it is not as hard as it looks. The hard part is keeping it running month after month. We run servers at hosting providers ourselves, so here is what you take on together with a server of your own — and when it is the right choice and when it is not.
In short. Your own VPN is a rented server on which you install AmneziaWG or WireGuard, plus an app on your phone with your configuration file. With the server you take on a payment to the host every month, updates and troubleshooting, the host's rules and one address in one country with no fallback path. If you just want it to work, a ready network is simpler: you pick a country with a button, and the app finds the path to the server by itself.
We make Mayak — a private network for people who do not want to run a server themselves. Several countries, AmneziaWG 3.1 on every exit, and the Android app finds the path that gets through on your network by itself. 3 days free after you confirm your email, no card needed. The trial is free and needs no card; without an email it is 1 day.
🍎 On iPhone, Mayak works through the subscription link from your account page. The real Happ (publisher Flyfrog LLC) is not in the Russian App Store — searching that word there brings up look-alike apps from other publishers. INCY (publisher LLC ITDEV) works instead: checked on 22 September 2026.
What your own VPN is
It is three things, and all three are yours:
- A server. Usually a rented virtual server (VPS) at a host in the country whose address you need. Your own hardware at home works too, but then the address is your home one.
- A protocol on the server. Most often WireGuard or AmneziaWG — its variant with changed first packets (how they differ).
- An app on your phone with the configuration file your server issued.
The main difference from a service is not the technology — it is the same. The difference is who is responsible when it stops working. With your own server, that is you.
How to set up your own VPN server: five steps
- Rent a server running Linux in the country you need. The smallest plan is enough. Read the host's rules before you pay (more on that below).
- Get SSH access — the host sends the address, user name and password or key after payment.
- Install the protocol. The easiest way is the Amnezia app: it logs in to the server and installs AmneziaWG without terminal commands (steps from the Amnezia documentation). By hand — the WireGuard package from your Linux repository.
- Make a configuration file for each device. One file on two phones at once will not do: they knock each other off (why).
- Import the file into the app on your phone — AmneziaWG or WireGuard — and check that your address has changed (IP check).
If everything goes smoothly, that is an evening's work. If not, troubleshooting step by step is described here.
WireGuard or AmneziaWG on your own server
On a phone this is not a matter of taste. On 28 July 2026 we measured in Moscow on MegaFon, changing exactly one thing at a time. A connection with an ordinary first packet did not come up at all — neither on its own port nor on 443. With a changed first packet it came up on both (the measurement table). The advice "use port 443" did not help; the shape of the packet did.
Hence the practical conclusion: on your own server for a phone, install AmneziaWG 3.1, not plain WireGuard. And watch the versions: configs of 1.5, 2.0 and 3.1 are not compatible with each other, and an old app will not open a new file (which fields in which version).
What your own VPN really costs
Money. The server is paid for every month, whether you use it or not. For reference: the plan two of our own exits run on cost 1,620 ₽ a month per server in the Netherlands or Germany in the catalogue of a Russian cloud host on 21 October 2026. Smaller hosts can be cheaper. A foreign host usually cannot be paid with a card from a Russian bank — one more step before you set anything up.
Time. Setup happens once. After that come system and protocol updates, renewals and checking that the server is alive. If you gave the file to your family, you are their support too.
The host's rules. Some hosts do not allow VPNs and proxies in their rules, or limit them. Breaking the rules means risking losing the server overnight, and the host will forward complaints about traffic from your address to you. Read the rules before you pay, not after.
One address, one country. Your own server usually has one address and one path to it. Another country means a second server and a second payment. If some network stops reaching the address, there is nowhere to switch to: there is no fallback path until you build one.
A data-centre address. A rented server's address belongs to a data centre, not a home connection. Some sites treat such addresses more strictly and ask for an "I am not a robot" check more often (why that happens).
Your own VPN on a phone: what changes
On a phone your own server works like any other — through the AmneziaWG or WireGuard app. How to choose a VPN for a phone in general is in a separate article; here are the details of your own server that surface later:
- The network changes all day. Wi-Fi at home, mobile data outside, someone else's Wi-Fi in a café. On one network the path to your server may get through, on another not, and an app with a single configuration file will just show "Connecting…".
- The phone saves battery. The system may put the app to sleep, and the connection drops by itself — that is not the server (breakdown).
- One connection per phone. Android holds only one such connection; a second app takes the first one's place (what it looks like).
Your own server or a ready network: a comparison
| What | Your own server | Mayak |
|---|---|---|
| Payment | to the host, every month, for each server | a subscription for the account; Start is 300 ₽ a month |
| Countries | one per server | several, chosen with a button |
| A path does not get through | you look for the cause | the app tries the next path itself |
| Protocol updates | yours | ours; the server hands out the parameters |
| Devices | a file for each, made by you | one account: 3, 5 or 10 devices |
| Exit address | yours only | shared by everyone on that line |
| Who controls the server | you | we do |
The last two rows are an honest advantage of your own server, and we do not hide it: what we keep is written in the privacy policy. The rest is what you pay a service for: so that someone else's work does not become yours. How the app tries paths is in a separate write-up.
Do not want to run a server? Install Mayak on Android and create an account right in the app: the country is chosen with one button, and no config is assembled by hand. We do not ask for payment details for the trial. A confirmed email opens the access — 3 free days. An email is optional: without one the trial is 1 day.
When your own server is the right choice
- You need a permanent personal address. For example, a work system only lets in pre-registered addresses. Mayak has no dedicated address for one person: the exit address is shared by everyone on the line. Here your own server is the honest choice.
- You need a country the service does not have. You can put your own server wherever there is a host.
- You need nobody but you to control the server. That is a trust argument, and a weighty one: what a service operator sees we covered separately.
- You enjoy doing it. Then everything above is not a cost but a pleasure.
If none of this is about you, and you need things to just work on your phone and TV, your own server will give you work rather than a result.
What we tested
- First packet versus port — our measurement on 28 July 2026 in Moscow on MegaFon (full write-up).
- Server price — the catalogue of the host two of our exits run at, 21 October 2026.
- AmneziaWG version incompatibility — by the config fields of 1.5, 2.0 and 3.1 (breakdown).
What we do not know
- How your server will behave on your network. We do not measure other people's servers; it can only be checked on the spot.
- A particular host's rules. They differ and change; read them at the host, not in retellings.
- Installing Amnezia by hand we describe from its documentation; we have not repeated those steps on a live server.
Short answers
Can I make my own VPN for free? A server costs money every month. Only your own hardware at home is free — but then the exit address is your home one.
What to install on my own server: WireGuard or AmneziaWG? For a phone, AmneziaWG 3.1: in our measurement on MegaFon an ordinary first packet did not get through on any port.
Do I need to know the terminal? Not necessarily: the Amnezia app sets up the server by itself from the address and password. But fixing things when they break is easier with a terminal.
Can I share my own VPN with my family? Yes, a file for each device. You will be the one answering "it does not work".
Does Mayak offer a dedicated server or an address of my own? No. The exit address is shared by everyone on the line; if you need a personal address, you need your own server.
How is Mayak better than my own server? Not better, simpler: several countries, fallback paths and updates are our concern, not yours. How to choose a service if you decide not to run a server.