diff --git a/pkgs/tools/networking/wireguard-vanity-address/default.nix b/pkgs/tools/networking/wireguard-vanity-address/default.nix
new file mode 100644
index 00000000000..74975e52b63
--- /dev/null
+++ b/pkgs/tools/networking/wireguard-vanity-address/default.nix
@@ -0,0 +1,24 @@
+{ lib, stdenv, fetchFromGitHub, rustPlatform, Security }:
+
+rustPlatform.buildRustPackage rec {
+  pname = "wireguard-vanity-address";
+  version = "0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "warner";
+    repo = pname;
+    rev = "v${version}";
+    sha256 = "sha256-SjzcVIQ9HwhP6Y/uCwXGSdZgrYcUQ9kE/Bow8pyOKNo=";
+  };
+
+  buildInputs = lib.optionals stdenv.isDarwin [ Security ];
+
+  cargoHash = "sha256-0bkyopkssqH0vfaWkFC3dV2o7Q3EuDEOM8JvRB9ekLU=";
+
+  meta = with lib; {
+    description = "Find Wireguard VPN keypairs with a specific readable string";
+    homepage = "https://github.com/warner/wireguard-vanity-address";
+    license = licenses.mit;
+    maintainers = with maintainers; [ bcc32 ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index c6827e87d82..f0b4af17c35 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -13458,6 +13458,10 @@ with pkgs;
 
   wireguard-tools = callPackage ../tools/networking/wireguard-tools { };
 
+  wireguard-vanity-address = callPackage ../tools/networking/wireguard-vanity-address {
+    inherit (darwin.apple_sdk.frameworks) Security;
+  };
+
   wireproxy = callPackage ../tools/networking/wireproxy { };
 
   wiringpi = callPackage ../os-specific/linux/wiringpi { };