Reach the LAN behind any PC — with a simple code
Duowire is a secure, WireGuard-based bridge between two machines. Share a connection code, type it in, and reach RDP, SSH, SAP GUI, and other TCP services — no VPN configuration, no admin rights, no drivers.
Windows · Android · Linux (Pro) · Free tier — share unlimited, forever
Host — Share this network
Connection code
my-home-lab
Give the code to your Remote — done.
Simple to set up. Serious about security.
Everything you need to reach a remote LAN safely — nothing you don't.
No VPN configuration
No routing tables, no key exchange, no IT ticket. Share a code on one PC, type it on the other.
No admin rights, no drivers
WireGuard runs entirely in userspace. Never any UAC prompt, no elevation, no kernel driver.
Automatic P2P upgrade
Connections start via a relay and silently upgrade to a direct, peer-to-peer tunnel whenever NAT allows it.
Share with your whole team at once
One connection code, any number of remotes. Every remote gets its own overlay address and keys — the status line just reads "N of M remotes online."
Stays connected through Wi-Fi switches and sleep
Undock, change networks, or wake from sleep — Duowire rebinds, re-punches a direct P2P link, and keeps your forwards, with no reconnect click. Same behavior on Android.
Works on restricted networks
UDP blocked? Duowire falls back to WireGuard-over-TLS on port 443, with HTTP CONNECT proxy support for locked-down corporate Wi-Fi.
Built for SAP GUI
Dedicated loopback IP per SAP application server, with direct logon and SAProuter support out of the box.
Self-hostable relay
Bring your own $5/mo VPS as your relay — unlimited and unmetered, forever, with no vendor lock-in.
How it works
Two machines, one code, done in under a minute.
Host shares a code
The Host clicks "Share this network" and gets a connection code — random by default, or a memorable permanent one.
Remote types it in
The Remote enters the code and connects. A local SOCKS5 proxy is ready instantly; port-forwards for specific services take one quick setup step.
Upgrades to direct P2P
Within seconds, both machines attempt a direct UDP hole-punch. Once it succeeds, traffic flows PC-to-PC, off the relay entirely.
Falls back automatically
If direct P2P can't form — symmetric NAT, locked-down Wi-Fi — the relay carries the tunnel instead. Switch networks, dock, or wake from sleep mid-session and it reconnects on its own.
See it in action
Real screen recordings — one code links two machines, then real tools just work.
Share a code, connect in seconds
The Host shares a code, the Remote types it in, and the link silently upgrades to a direct peer-to-peer connection.
Connect to SAP GUI
A dedicated loopback IP per app server — logon pad just works.
Reach a self-hosted app
Forward any port and open it locally, as if you were on the LAN.
Security by design, not by promise
Duowire is built entirely on WireGuard's proven cryptography. No custom protocols, no vendor-controlled backdoors — just a well-understood, auditable foundation.
- Industry-standard crypto
- Curve25519 + ChaCha20-Poly1305 — the standard WireGuard cipher suite. We don't invent our own protocol or crypto.
- Keys never leave your device
- Private keys are generated locally and never transmitted. At rest they're encrypted with DPAPI (Windows), Android Keystore, or 0600 files (Linux).
- Private connection codes, opt-in
- Restrict a code to devices on your own subscription with one toggle. On a self-hosted relay every user is already the only tenant, so this is there when you need multi-tenant control.
- Every remote gets its own keys
- When several remotes share one host code, each negotiates its own pre-shared key and overlay address. One session ending never exposes or disturbs any other.
- The relay never sees plaintext
- Even in TCP/443 fallback mode, WireGuard frames are wrapped in TLS — the relay terminates only the transport wrapper, never your traffic.
- Least privilege, always
- No elevation, no service, no kernel driver. The app never asks for more access than an ordinary desktop program.
Simple, honest pricing
Direct peer-to-peer traffic is always free and unmetered on every plan — you only pay for relay-forwarded fallback traffic.
Personal
For individuals reaching a home or personal LAN.
$6/mo
- Full Remote + Host access
- 20 GB relay quota per month
- 1 concurrent share
Pro
For consultants and small teams reaching multiple sites.
$19/mo
- Full Remote + Host access
- 100 GB relay quota per month
- 3 concurrent shares
BYO Relay
Bring your own relay VPS — unlimited, no lock-in.
$39/mo
- Full Remote + Host access
- Unlimited relay traffic on your own VPS
- 10 concurrent shares
Ready to connect?
Free to download for Windows and Android. Linux (headless host) requires a Pro plan.