> ## Documentation Index
> Fetch the complete documentation index at: https://tunnelfleet.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Users

> Add, delete, and sync VPN users, and download WireGuard or OpenVPN configs.

Open a server and select the **Users** tab. VPN users are credentials on that server for client apps — not TunnelFleet dashboard logins.

## VPN Users table

| Column        | What it shows                                                            |
| ------------- | ------------------------------------------------------------------------ |
| **Username**  | VPN username (default user shows a **Default** badge)                    |
| **Password**  | Password used for OpenVPN                                                |
| **WireGuard** | Whether a WireGuard peer/config exists                                   |
| **Status**    | pending, active, failed, removing, and similar                           |
| **Notes**     | Optional notes                                                           |
| **Synced**    | Last password sync time, **Not synced**, or `—` when sync does not apply |
| **Actions**   | View credentials, sync, delete                                           |

### Status badges

| Status                 | Meaning                     |
| ---------------------- | --------------------------- |
| **Working…** / pending | Provisioning or syncing     |
| **Active**             | Ready to use                |
| **Failed**             | Hover for the error message |
| **Removing…**          | Delete in progress          |

## Add a user

<Steps>
  <Step title="Click Add User">
    Opens the **Add New User** dialog.
  </Step>

  <Step title="Enter credentials">
    * **Username** — required
    * **Password** — used for OpenVPN (IKEv2 / OpenVPN-style password auth)
  </Step>

  <Step title="Create User">
    TunnelFleet creates the user and provisions it across every **active** protocol: password credentials for OpenVPN, and a generated key pair for WireGuard when WireGuard is active.
  </Step>
</Steps>

A default user named **`tunnelfleet`** is created when the server is first provisioned.

## View credentials (config modal)

Click the **View credentials** (key) action on a user. The modal title is the username.

### Password

Shows the username and password for OpenVPN, with reveal and copy controls.

### OpenVPN config

If OpenVPN TCP and/or UDP is active on the server:

* The same `.ovpn` profile is used for every user
* Clients prompt for this user's username and password
* Download **OpenVPN (UDP)** and/or **OpenVPN (TCP)**
* **Connect link** — `openvpn://import-profile/…` with copy and **Open in OpenVPN Connect**

<Warning>
  Do not paste the plain HTTPS profile URL into OpenVPN Connect’s “Import from URL” field. Use the download buttons or the **Open in OpenVPN Connect** link.
</Warning>

### WireGuard

If this user has a WireGuard config:

* QR code for mobile import
* Client IP
* Full config text with copy
* **Download config** → `{server}-{user}-wg0.conf`

If WireGuard is still provisioning, the modal says to check back shortly. If WireGuard is inactive or the peer is missing, install WireGuard or use **Sync** when appropriate.

## Sync credentials

Click **Sync to all protocols** (refresh icon) on a user when:

* You installed OpenVPN after the user already existed
* Password auth looks out of date (**Not synced**)
* WireGuard is active but the user has no peer keys yet

Sync:

1. Sets status to syncing (`Syncing credentials…`)
2. Creates a WireGuard peer **only if** keys are missing (it does not regenerate an existing peer)
3. Pushes the password to active OpenVPN (password-based) protocols

If no protocols are active, Sync is disabled.

## Delete a user

<Steps>
  <Step title="Click remove">
    Use the trash action on the user row.
  </Step>

  <Step title="Confirm">
    Confirm **Remove user?** — the username is removed from all protocols on this server. This cannot be undone.
  </Step>

  <Step title="Wait for Removing…">
    Status shows **Removing…** until the agent finishes.
  </Step>
</Steps>

<Warning>
  The **default** user cannot be deleted (UI and API both block it).
</Warning>

## Related

* [Download configuration](/docs/getting-started/download-configuration) — client import overview
* [Protocols](/docs/servers/protocols) — install WireGuard or OpenVPN first
* [WireGuard](/docs/wireguard) and [OpenVPN](/docs/openvpn) — platform client guides