Keep it private
The QR can expose the same secrets contained in the configuration text, including the client private key.
Paste a configuration, generate the QR locally, then scan it from a compatible WireGuard client. Nothing in this workflow needs a newsletter, donation button, or another tiny pop-up begging for attention.
A WireGuard QR code usually contains a private key. Avoid sharing screenshots or displaying the code where another device can capture it.
The QR can expose the same secrets contained in the configuration text, including the client private key.
Review Endpoint, AllowedIPs, DNS, and tunnel address before importing the profile into another device.
Generate and display sensitive configurations only on devices and browsers that you control.