TorSentinel
HelpSign inGet started

Products

Stealth VPNStay connected on networks that block VPNsArmorTorrenting VPN with port forwarding + SOCKS5MonitorAlerts if your torrent IP leaksStreaming IPA WireGuard IP in the city you choosePricingHelp center

Free tools

Torrent IP checkIP leak testDNS leak testPort checkerSOCKS5 proxy testMagnet privacyAll free tools
Sign inGet started
GuideArmorWireGuard

Armor: install the app or use the WireGuard config, and use your forwarded port

Armor includes a WireGuard VPN with a forwarded port at every location. Use the Armor app on Windows, macOS or Linux, or download a WireGuard config for any other client, router or Docker stack. Then set your forwarded port as the listening port in your torrent client so peers can reach you.

See Armor All guides FAQ
Updated: 2026-10-23 Difficulty: Easy Read time: 6–8 min

1) Your Armor login

One login covers everything in Armor: the Armor app, your WireGuard configs and the SOCKS5 proxy. It is shown on the order confirmation page, emailed to you, and always available on the service page in your dashboard. If the page says the login is still being set up, wait 1 to 2 minutes and reload; the WireGuard keys and forwarded port are created at that point.

2) Option A: the Armor app

1
Download the Armor app for Windows, macOS or Linux from the downloads page and install it.
2
Open it and sign in with your Armor login.
3
Pick a location and press Connect. The kill switch in the app blocks traffic if the VPN drops, so your real IP is never shown to the swarm.

Your forwarded port is the same at every location, so you can switch locations without changing your torrent client.

3) Option B: a WireGuard config

For the official WireGuard apps, a router, a NAS or a Docker stack such as Gluetun:

1
Sign in to your dashboard, open the Armor service and choose the VPN section.
2
Each location has a Download Config button. Download the config for the location you want. There is also a variant that connects by a server's IP instead of its hostname, for networks with unreliable DNS.
3
Import the file into your WireGuard client (Add tunnel from file), or paste its contents into your router or Gluetun setup, and activate it.

Regenerating keys on the VPN page invalidates the old configs. Download and import the new ones after you do that.

For Docker, the Docker config tool makes a ready-to-run docker-compose.yml for Gluetun with qBittorrent or Deluge, with your config and forwarded port filled in.

4) Find your forwarded port

On the same VPN section of your service page there is a box called Your Forwarded Ports. It lists the port numbers assigned to you, for TCP and UDP, and they apply at every location. Copy the number; you will enter it in your torrent client.

5) Set the port in your torrent client

1
Open your client's connection settings. In qBittorrent: Tools → Options → Connection.
2
Set Listening port to your forwarded port.
3
Turn off UPnP and NAT-PMP, and turn off any random-port option, so the client keeps this port.
4
If your client can bind to a network interface, bind it to the WireGuard interface. Then torrents stop if the VPN is down instead of using your home connection.

Other clients have the same three settings under their connection or network options.

6) Check that the port is open

  • With the VPN connected and a torrent active, open the port checker and test your forwarded port. It should report open.
  • The torrent IP check should show the VPN location, not your home IP.
  • Monitor is included in Armor: add the test torrent from your dashboard and it alerts you if the IP your client shows ever changes.

FAQ and troubleshooting

Do I need the SOCKS5 proxy as well?

No. The VPN protects your whole computer and gives you the forwarded port. The SOCKS5 proxy covers only your torrent client and is useful if you already run another VPN. You can use either or both. Proxy setup guides for each client are in the help center.

The port checker says closed.

Confirm the VPN is connected, the client is running with a torrent active, and the listening port equals your forwarded port. Turn off UPnP and random ports. If you bound the client to an interface, make sure it is the WireGuard one.

Can I use the VPN on more than one device?

Yes, up to 5 VPN devices at once.

Does the port change when I switch location?

No. Your forwarded port is the same at every location.

Prefer to protect only the torrent client?
Armor SOCKS5 setup and test

Still stuck? Open a ticket with your plan, your operating system, the location you chose and what you tried. A real person replies, usually within a few hours and always within 24 hours.