Disclosure: VPNFin is reader-supported. If you buy a VPN through links on this page, we may earn a commission at no extra cost to you. This never affects our ratings — here’s our full disclosure.
ExpressVPN WireGuard support is newer than many guides realise. For years ExpressVPN declined WireGuard and built its own protocol, Lightway, instead. Then, on 6 August 2025, it added post-quantum WireGuard to its Windows, iOS and Android apps, TechRadar reported, with macOS to follow. Salon still found it missing on Mac and Linux in March 2026. Lightway remains the default.
This guide covers where WireGuard is available, how to switch, how it compares with Lightway and why many reviews still say ExpressVPN lacks it.
Where ExpressVPN WireGuard Works
WireGuard is available in ExpressVPN’s apps for Windows, iOS and Android, TechRadar reported at launch, and Salon’s March 2026 review confirmed the same three. Mac and Linux users get Lightway and OpenVPN instead, both of which work well on those systems. TechRadar’s launch report said macOS would follow, so check your app’s protocol list after each update. Our guide to ExpressVPN and OpenVPN covers whether it is supported and how to set it up.
Our ExpressVPN Linux guide covers the protocols on Linux, where WireGuard has not yet arrived.
ExpressVPN’s own older blog post said it would not offer WireGuard, preferring Lightway, and several reviews from this year still repeat that. They predate, or missed, the August 2025 change.
When reading a protocol comparison, check its date. Our tables now record WireGuard on Windows, iOS and Android.
Post-Quantum WireGuard
ExpressVPN’s WireGuard adds post-quantum protection, and its engineers published a white paper, Post-Quantum WireGuard: A Practical Implementation Guide, explaining the approach, TechRadar reported.
Lightway already used a hybrid ML-KEM key exchange by default, so both protocols now resist future quantum decryption of recorded traffic. Our post-quantum VPN guide explains what quantum-resistant key exchange protects against, and why it matters for traffic recorded today.
Switching to WireGuard
Open the app’s settings, choose the protocol option and select WireGuard instead of Automatic or Lightway. Then reconnect to apply it, and check the app shows WireGuard as the active protocol. It sits alongside Lightway on all three, and alongside OpenVPN on Windows and Android.
If WireGuard does not appear, update the app; versions before August 2025 lack it. On a Mac, it will not appear at all yet. Our ExpressVPN Windows guide covers that app’s settings.
WireGuard or Lightway?
Both are modern and fast. Lightway is ExpressVPN’s default, has had four Cure53 audits and runs over UDP or TCP, which helps on networks that block UDP. WireGuard is a widely reviewed open standard that runs over UDP.
Keep Lightway as the everyday choice, and try WireGuard if a network or device behaves better with it. On networks that block UDP, Lightway over TCP or OpenVPN TCP will connect where WireGuard cannot. Our Lightway vs WireGuard guide compares them in depth.
Speed, Battery and Checking It Works
WireGuard is light on battery: TheBestVPN’s 2026 test found it used about 2% over two hours of streaming, against about 7% for OpenVPN over TCP. Cloudwards describes Lightway as similarly light on battery.
On a phone, either modern protocol beats OpenVPN for battery. Our VPN battery guide covers the figures.
After switching, confirm the address changed on our VPN test page and run a DNS leak test.
If speeds drop, switch back to Automatic and let the app choose. Note which protocol each network prefers, since hotel, office and home connections can differ.
Who Should Try WireGuard
Try it if Lightway struggles on a particular network, if you want to compare speeds, or if you prefer a widely reviewed open standard with a small codebase. Users of other WireGuard-based services may find it familiar.
Most people can leave the app on Automatic, which picks Lightway in most cases. Switching costs nothing and takes seconds, so testing both on your own connection is the best guide. Note the speed and stability of each over a few days.
WireGuard Across Providers
WireGuard is now the common default: NordVPN’s NordLynx builds on it, Surfshark and CyberGhost use it, and Mullvad runs nothing else since January 2026, our tables record. ExpressVPN was the notable holdout until 2025. Kape owns ExpressVPN and CyberGhost, and Nord Security owns NordVPN and Surfshark, worth knowing when comparing their reviews.
Our WireGuard vs OpenVPN guide explains why providers moved to it.
IKEv2 Removed, and Routers
While adding WireGuard, ExpressVPN removed IKEv2 from its Windows app, its release notes say, vpnonline reported in 2026. Windows users now choose between Lightway, WireGuard and OpenVPN.
IKEv2 remains useful on some other platforms for quick reconnection when a phone moves between networks. Our VPN protocols guide explains where each protocol fits.
ExpressVPN’s routers, Aircove and the newer Fortify, run its own firmware rather than plain WireGuard configurations. For manual setups on other routers, ExpressVPN provides OpenVPN files, Comparitech notes. A router covers every device behind it as one connection.
Our ExpressVPN router guide covers the router options.
How We Research
This page draws on TechRadar’s August 2025 report on ExpressVPN WireGuard, Salon’s March 2026 review, ExpressVPN’s older WireGuard blog post, vpnonline’s 2026 protocol guide and our ExpressVPN tables. We cross-checked these sources against each other, and where they conflict or something can’t be verified, we say so in the text rather than guessing. We checked time-sensitive figures, including prices in US dollars, on 8 October 2026. The main source we relied on is the report on ExpressVPN’s WireGuard launch. Our full approach lives on the About Us page.
ExpressVPN WireGuard FAQ
On Windows, iOS and Android since August 2025.
Not yet, Salon found in March 2026.
No; it is ExpressVPN’s own protocol.
Lightway by default; WireGuard if it suits your network better.
It is, as launched in August 2025.
The Verdict
ExpressVPN WireGuard is real on Windows, iOS and Android, with post-quantum protection, but Lightway stays the default and the better fit on UDP-blocking networks.