Connect Apple TV to Surfshark

Before you begin

You need an active Surfshark subscription, an Apple TV with the WaveSocket app and a phone or computer on the same network as the TV.

Surfshark also offers its own Apple TV app for tvOS 17 or later. WaveSocket uses a manual WireGuard configuration instead, so you can keep a Surfshark location in the same profile library as your other VPN profiles.

Create the configuration

These steps follow Surfshark’s manual WireGuard setup guide.

1. Sign in to your Surfshark account and go to VPN → Manual setup. Choose Desktop or mobile, then WireGuard.
2. Choose I don’t have a key pair, enter a name such as Apple TV, select Next, then Generate a new key pair.
3. Store the keys somewhere private. Surfshark does not show them again.
4. Select Choose a location, pick a server and select Download.

Generate the key pair before you download a location’s file. Surfshark’s router guide warns that a file downloaded before you generate keys does not contain them.

Import on Apple TV

1. On Apple TV, open WaveSocket and choose Profiles → Add VPN profile → Upload from your browser, then select Start upload session. If a VPN is connected, disconnect first.
2. On the phone or computer with the file, scan the QR code on the TV or open the address shown. Enter the code shown on the TV in the 4-digit code field.
3. Select Choose file, pick the .conf file and select Send to Apple TV.
4. Review the profile on Apple TV. Choose Rename to give it a clear name such as Surfshark London, then choose Save profile.

If the upload page says a private or public key is invalid, or that the configuration is incomplete or invalid, check the PrivateKey line in the file’s [Interface] section. If it is empty or holds placeholder text, download the location’s file again after generating keys. Or open the file in a text editor, replace the value after PrivateKey = with the private key you saved, and send the file again. WaveSocket cannot add a key to a saved profile.

Use a trusted home network for this step. The import guide explains the transfer and the other import methods.

Connect and check

WaveSocket selects the saved profile and opens Connection. Choose Connect. The first time, allow Apple TV to add the VPN configuration. Look for Server verified and a recent time next to Oldest peer handshake age.

Every WaveSocket feature is free for three minutes per connection, so you can try your Surfshark setup before choosing WaveSocket’s Lifetime access, which removes the time limit.

Locations and app features

Each file connects to one location. For another location, download its file and import it as a separate profile: disconnect, start a new upload session and save it. If the new file has no private key, add the one you saved to its PrivateKey line before sending it, as described above. To switch later, disconnect, open the other profile in Profiles and choose Use profile.

Surfshark’s manual setup guides cover only the WireGuard connection. Features of Surfshark’s own apps are not part of this configuration.

If it does not connect

• Check that your Surfshark subscription is active.
• If there is no handshake, check that the file contains the private key you generated.
• Try another location if one server does not respond.

Then follow the order of checks in connection troubleshooting.

These steps are based on Surfshark’s published documentation as checked on 16 October 2026, not on WaveSocket’s own testing with Surfshark. Labels in your Surfshark account can change; if they do, follow Surfshark’s current help pages. Surfshark is a trademark of its owner. WaveSocket is an independent app, not affiliated with or endorsed by Surfshark.