Windows GUI Client

The Windows GUI Client is designed for Windows computers where a user is present to authenticate with your identity provider interactively.

If you're looking for a headless client suitable for server or workstation use cases where a user is not physically present, see the Windows Headless Client user guide instead, which uses a long-lived Service Account token for authentication.

Prerequisites

  • Windows 10 version 21H2 (build 19044) or later, or Windows 11
  • x86-64 CPU
  • WebView2 (The installer will install this automatically if needed)

Installation

Download the .msi installer from our changelog page or from the direct link below:

After downloading, run the .msi to install the Firezone GUI Client.

Usage

Signing in

  1. Run Firezone
  2. At the Welcome screen, click Sign in. This will open the Firezone sign-in page in your default web browser.
  3. Sign in using your account slug and identity provider.
  4. If your browser asks whether it should open Firezone links, check Always allow and open the link.
  5. When you see the Firezone connected notification, Firezone is running.

The Welcome screen only appears during your first sign-in. After that, you can click on the Firezone icon in the system tray to open the tray menu and sign in.

Accessing a Resource

When Firezone is signed in, web browsers and other programs will automatically use it to securely connect to Resources.

To copy-paste the address of a Resource:

  1. Right-click on the Firezone tray icon to open the menu.
  2. Open a Resource's submenu and click on its address to copy it.
  3. Paste the address into your browser's URL bar and press Enter.

Quitting

  1. Right-click on the Firezone tray icon to open the menu.
  2. Click Disconnect and Quit or Quit.

When Firezone is not running, you can't access private Resources, and the computer will use its normal DNS and Internet behavior.

If you were signed in, then you will still be signed in the next time you start Firezone.

Signing out

  1. Right-click on the Firezone tray icon to open the menu.
  2. Click Sign out.

When you're signed out, you can't access private Resources, and the computer will use its normal DNS and Internet behavior.

Upgrading

See Upgrade Firezone to keep the Client up to date.

Diagnostic logs

See Diagnostic logs for where logs are stored and how to export them.

Uninstalling

To remove the Firezone Client, see Uninstall Firezone.

Troubleshooting

For Client troubleshooting, see the troubleshooting guide and select the Windows tab.

Known issues

  • If a search domain is applied, DNS suffix search list of other adapters are ignored. #8430.
  • Firezone does not register itself with Windows as a VPN #2875
  • The Windows client is not yet available for Arm64 devices #2992

Need help? See all support options.

Found a problem with this page? Open an issue
Last updated: July 01, 2026