Core concepts
How accounts, networks, devices, links, paths and prepaid credit relate.
Account
An account manages its own networks, credit and billing records. Inviting other members to manage the account is not currently supported. Switching networks does not change account settings or balances.
Network
A network is an isolated overlay. An account can create several networks; their devices, links and configuration are mutually invisible.
Each network has:
- Name: a changeable display name.
- Internal IP range: the private CIDR from which overlay IPs are allocated; it must not overlap another network on the account.
- Network ID: 12 lowercase letters and digits, used to register devices.
The network ID is an identifier, not a secret. Possession allows a device to request registration, but the device cannot join the network until you approve it in the console.
Device
A device is a host with the client installed and registered to a network. One installation can belong to only one network at a time.
The main console states are:
| State | Meaning |
|---|---|
| Pending | Registered but not authorised to communicate |
| Approved | Participates normally in networking and path selection |
| Blocked | Access is suspended while the device record remains |
| Removing | Going offline and restoring local network configuration |
Link
A link is the logical connection between two approved devices in one network. When a device is approved, links to the other devices are created automatically; you do not create or name them manually.
A link holds the current path, quality and transport optimization policy. The console shows these under Configuration → Links.
The three path types
The system considers paths in this order and changes them automatically as quality changes:
| Path | Description | Cost |
|---|---|---|
direct |
An end-to-end encrypted connection between the devices | Free |
peer_relay |
Forwarded through another device in the same network | Free |
cloud_relay |
Forwarded over WideWired's backbone | Metered by successfully forwarded traffic |
A disabled path is not considered. Traffic remains end-to-end encrypted on every path; a relay forwards encrypted packets and cannot read their contents.
Prepaid credit
Credit is an account-level balance with two buckets:
- Granted credit: issued once after initial account verification.
- Purchased credit: added by a top-up.
Cloud relay usage draws on granted credit first, then purchased credit. Exhaustion blocks only new cloud relay forwarding; accounts, devices, direct connections and peer relay continue to work. See the billing model.
The client
On Linux, macOS and Windows, the client keeps the connection running in the background. Use the wwnet command to inspect status, update or uninstall it. Android, iOS and HarmonyOS connect through the mobile app.
Network and policy settings live in the console. See the command-line reference under Devices for desktop and server commands.
Scope
WideWired connects devices and sites that you own or operate. It is not a public VPN or proxy service, does not provide a new public internet exit, and does not proxy access to third-party sites.
Quick troubleshooting
| Symptom | Relevant concept and action |
|---|---|
| A registered device cannot communicate | Check whether it is still Pending; see managing devices |
| Direct failed but the link still works | The system may be using peer relay or cloud relay; see connectivity and paths |
| Cloud relay is unavailable | Check credit, schedule and account state; see the billing model |
| A device must join another network | Run wwnet leave, then use the new network's install command |