website/docs/desktop/platform-notes.md

sidebar_position

sidebar_position
2

Platform & Security Notes

A few facts about the desktop app worth knowing, that aren't settings you configure.

Encrypted at Rest

Tunnel configs and other sensitive data are stored encrypted (AES-256-GCM) in the local database, with the encryption key kept in the OS keychain/credential store.

Wayland and Linux Desktop Support

WG Tunnel's desktop UI natively supports Wayland (with automatic X11 fallback if Wayland isn't available), ships as a GraalVM native image with no bundled JDK, and requires nftables or iptables-nft. The daemon starts automatically at boot on systemd-based distributions. On other init systems it installs but needs to be started manually. See the FAQ for details, and the Download page for install instructions per distro.