Core concepts
How accounts, networks, devices, links, paths and prepaid credit relate.
Account
An account manages its own networks, credit and billing records. Inviting other members to manage the account is not currently supported. Switching networks does not change account settings or balances.
Network
A network is an isolated overlay. An account can create several networks; their devices, links and configuration are mutually invisible.
Each network has:
- Name: a changeable display name.
- Internal IP range: the private CIDR from which overlay IPs are allocated; it must not overlap another network on the account.
- Network ID: 12 lowercase letters and digits, used to register devices.
The network ID is an identifier, not a secret. Possession allows a device to request registration, but the device cannot join the network until you approve it in the console.
Device
A device is a host with the client installed and registered to a network. One installation can belong to only one network at a time.
Manage approval and access under Configuration → Devices. The main states are:
| State | Meaning |
|---|---|
| Pending | Registered but not authorised to communicate |
| Approved | Participates normally in networking and path selection |
| Blocked | Access is suspended while the device record remains |
Link
A link is the logical connection between two approved devices in one network. When a device is approved, links to the other devices are created automatically; you do not create or name them manually.
Use Configuration → Links to adjust allowed connection types and switching sensitivity. View the current path in Overview and historical trends in Insights → Transmission.
The three path types
The system considers paths in this order and changes them automatically as quality changes:
| Path | Description | Cost |
|---|---|---|
direct |
An end-to-end encrypted connection between the devices | Free |
peer_relay |
Forwarded through another device in the same network | Free |
cloud_relay |
Forwarded over WideWired's backbone | Metered by successfully forwarded traffic |
A disabled path is not considered. Traffic remains end-to-end encrypted on every path; a relay forwards encrypted packets and cannot read their contents.
Prepaid credit
Open Account → Billing to view the account balance. It has two credit types:
- Granted credit: $2 after initial account verification, plus $2 on the first day of each month (UTC) when an approved device was online in the previous month, once per account per month; at the time of the grant the account needs at least one link between two approved devices with Global Dedicated Transmission turned on. Posted campaign rewards also count as granted credit.
- Purchased credit: added by a top-up.
Global Dedicated Transmission usage draws on granted credit first, then purchased credit. Exhaustion blocks only new Global Dedicated Transmission forwarding; accounts, devices, direct connections and In-Network Device Forwarding continue to work. See Pricing.
The client
On Linux and Windows, the client keeps the connection running in the background. Use the wwnet command to inspect status, update or uninstall it. macOS uses the app from the App Store, and Android and iOS connect through the mobile app. macOS and mobile devices do not act as forwarding exits and do not run device automation scripts. In-Network Device Forwarding can be turned on or off on every platform; it is on by default on Linux, Windows and macOS, and off by default on iPhone and Android.
Network and policy settings live in the console. See the command-line reference under Devices for desktop and server commands.
Scope
WideWired connects devices and sites that you own or operate. Use your own Linux or Windows device when an exit is needed. WideWired does not provide a public proxy exit.
Quick troubleshooting
| Symptom | Relevant concept and action |
|---|---|
| A registered device cannot communicate | Check whether it is still Pending; see Devices |
| Direct failed but the link still works | The system may be using In-Network Device Forwarding or Global Dedicated Transmission; see Links |
| Global Dedicated Transmission is unavailable | Check credit, working hours and account state; see Pricing |
| A device must join another network | Run wwnet leave, then use the new network's install command |