Go live with confidence
Preflight checks, tunnel verification, profile health and a quick speed test. Choose balanced hotspot protection or strict VPN-only protection.
Windows 10 / 11 · Open source
Your hotspot, through your VPN.
Turn your Windows laptop into a Wi-Fi hotspot that routes connected devices through a WireGuard profile or the NordVPN desktop app. Your phone, console or tablet shares the VPN connection.
Version 0.5.0 · one file, 30 MB, installs itself · WireGuard or NordVPN desktop app
WireSpotHomeDevicesProfilesHotspot
live
WireSpot · VPN × Mobile Hotspot
You're live.
WireSpot-4F2A is sharing NL-FREE#12 · Netherlands. Phones and consoles that join use the VPN.
Disconnect Pause 15 minutesStatus
VPNNL-FREE#12
Exit IP185.107.56.40
Modebalanced · DNS locked
Devices1 connected
Devices
iPhone
wants to join · 192.168.137.61
AllowBlock
01 / The route
One path out.
WireSpot starts Windows Mobile Hotspot from a validated VPN connection. Use a WireSpot-managed WireGuard profile or connect in the NordVPN desktop app.
Windows laptopWi-Fi, Ethernet or USB uplink
VPN tunnelA WireGuard profile or the NordVPN app
Mobile HotspotWindows shares the tunnel
Your devicesPhone, tablet, console
WireSpot verifies the hotspot source and watches for a path around the VPN. If protection fails, its guard stops the hotspot.
02 / Built for control
Everything in one place.
Use the desktop app, its tray icon or the CLI. They share live state and one activity journal.
Approve devices
New devices wait for your decision before they get internet access. Allow, block and remember devices from the app, a pop-up or the CLI.
Keep DNS on the tunnel
DNS lock and a fail-closed guard help keep hotspot traffic on the intended route as connections change.
Choose your VPN mode
Import WireGuard .conf files, or enable Profile-less Mode to detect and validate NordVPN. WireSpot never asks for NordVPN credentials.
App and CLI in sync
Use the window or a command shell with autocomplete. Actions, pause timers, guard state and device approvals stay aligned.
Fits your routine
Pause and auto-resume, start with Windows without a logon UAC prompt, pick a theme, and uninstall with a choice to keep or delete your data.
03 / Device approval
You decide who joins.
When approval is on, a new device appears as a request, even while WireSpot is in the tray. WireSpot blocks its network access until you allow it by pinning its hotspot IP to a sink MAC address on the laptop.
The block is applied after the device's first packet, so there can be about a one-second window. A device that rejoins with a randomized MAC address asks again. Approval is enforced only while WireSpot runs.
New device · waiting
iPhone wants to joiniPhone · 192.168.137.61. It has no network until you allow it.
Allow Block
04 / What it changes
Know what runs.
WireSpot runs as administrator and starts Windows Mobile Hotspot. In profile mode it creates a WireGuard tunnel service. In NordVPN mode it validates the external tunnel and installs forwarding protection; NordVPN remains managed by its own app. WireSpot removes its own changes when hosting stops.
Settings and profiles stay on your PC. The hotspot password is stored in plain text in your local settings file, so use a unique one.
Before you install
Windows 10 or 11
WireGuard or the NordVPN desktop app
A Wi-Fi adapter that supports Mobile Hotspot
Administrator access
05 / Get started
From download to online.
1
Choose a VPN
Install WireGuard for Windows for .conf profiles, or connect in the NordVPN desktop app.
2
Run WireSpot.exe
It shows a short installer: agree to the Terms, choose your shortcuts and Start with Windows. Or run it without installing.
3
Set up and go live
Import a WireGuard .conf, or enable Profile-less Mode for NordVPN. Set a hotspot name and password, then press Go live.
06 / Your VPN profile
Get a Proton .conf.
You can bring a WireGuard profile from any compatible provider. Here's the Proton VPN path, step by step.
- Create a Proton VPN account or sign in.Open the Proton VPN account site. WireSpot never asks for your account password.
- Go to Downloads → WireGuard configuration.Choose Windows as the platform, give the config a name, and pick the VPN options available on your plan.
- Choose a server in the country you want.Proton also offers a recommended server. Click Create, then Download to save the
.conffile. - Import it into WireSpot.Open Profiles → Import a .conf, review the details, then choose Go live. Keep the file private: it contains a VPN key.
Need the exact screens?
Proton's official guide shows each step. Server choices and options can vary by plan.
Open Proton's guide07 / Questions
Good to know.
Do I need Proton VPN?
No. WireSpot accepts WireGuard .conf profiles from compatible providers and supports an externally connected NordVPN desktop app in Profile-less Mode.
Can I use Ethernet or USB for my laptop's internet?
Yes. WireSpot detects the uplink from Windows routing. Your Wi-Fi radio still hosts Mobile Hotspot.
Does it send my VPN keys anywhere?
No. Configuration files stay on your PC. WireSpot checks its exit IP through ipify while connected. A speed test contacts Cloudflare only when you start it; it sends generated bytes, never your VPN keys.
Can I check a profile before connecting?
Yes. Check resolves and pings its server. Some servers ignore ping, so a missing response doesn't mean the VPN is broken. Once connected, WireSpot can verify a recent WireGuard handshake.
What happens if the VPN drops?
WireSpot monitors the VPN route and stops hosting if protection fails. NordVPN mode also keeps persistent forwarding rules in place until the hotspot is confirmed off.
How do I update?
Download the new WireSpot.exe and run it. A running WireSpot hands over to it, and its installer updates your copy; your settings and profiles stay.
Open source / GPL-3.0-only
See how it works.
The source, tests and build instructions are on GitHub. WireSpot is unofficial and not affiliated with Nord Security, Proton AG, WireGuard LLC, Jason A. Donenfeld or Microsoft.