The default setting is for the WireGuard configuration generator to create keys automatically for you. The private key is never transmitted to our servers and is protected since it's generated automatically in your browser. The public key is always stored on our servers as it it used to authenticate you when connecting.
However, you might want to generate the keys yourself in case:
The configuration generator allows you to enter a public key. If you do that, you will need to edit the downloaded configuration files manually to enter your private key. A downloaded configuration file might look as follows:
Address = 126.96.36.199/32, fd00:0000:0000:0000:1111:1111:2e41:7214/128
DNS = 188.8.131.52, 184.108.40.206
PublicKey = JwXrcvj+GT0/OgeYZxFfHoBPhY3CmVX4jKYI21VdNS0=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn84.prd.sundsvall.ovpn.com:9929
Note that the PrivateKey is empty. You will need to input your private key there, so it looks as follows:
PrivateKey = kB3vUVXnt70LGaSX9P0Amz2T7sS9NntoT74oRflXtlo=
There needs to be a space between = and the private key.