How to Install a VPN on a Router?
🔍 Quick answer:
To install a VPN on your router, first check that it supports OpenVPN or WireGuard (AsusWRT-Merlin, DD-WRT, OpenWrt, or GL.iNet all do). Log in to 192.168.1.1 or router.asus.com, go to VPN section, upload the .ovpn or WireGuard config file from your VPN provider, and toggle the connection on. Every device on the network is now protected.
Why install a VPN on a router?
Once installed on a router, the VPN protects every device on the network — no per-device setup needed. Best for:
- Smart TVs, Apple TV, Roku, Fire TV: No native VPN support — gets protection via the router.
- Game consoles: PlayStation, Xbox, Nintendo Switch can't run VPN apps directly.
- IoT devices: Smart speakers, security cameras, smart bulbs — all auto-protected.
- Households with many devices: One setup covers 20+ devices without buying multiple subscriptions.
Step 1: Check router compatibility
Not all routers support VPN. The most compatible options in 2026:
- Asus routers with AsusWRT-Merlin: Best balance of features and ease of use. RT-AX86U, RT-AX88U are popular.
- GL.iNet routers: Pre-flashed with OpenWrt, designed for VPN. GL-MT3000, Flint 2 are top picks.
- OpenWrt: Open-source firmware. Flashes onto many routers. Maximum flexibility.
- DD-WRT: Older but still supported on many Linksys, Netgear models.
- ExpressVPN Aircove / Aircove Go: Routers sold with VPN pre-installed. Easiest option.
Step 2: Download config file from your VPN
- Log in to your VPN provider's website (NordVPN, ExpressVPN, Surfshark, etc.).
- Find the router setup or manual config section.
- Download the
.ovpnfile (OpenVPN) or.conffile (WireGuard) for your preferred server location. - Also note the username/password for OpenVPN (often different from your account password).
Step 3: Upload config to the router (Asus example)
- Open a browser and go to router.asus.com or 192.168.1.1.
- Sign in with your router admin password.
- Go to Advanced Settings → VPN → VPN Client.
- Click Add profile, choose OpenVPN or WireGuard.
- Upload the
.ovpnfile and enter your VPN credentials. - Click Activate. The VPN status will change to "Connected" within 10 seconds.
Step 4: Verify and optimize
- Connect a phone to the router's Wi-Fi and visit whatismyip.com — IP should match the VPN server.
- Run dnsleaktest.com to confirm DNS isn't leaking.
- Speed will drop 10-30% compared to no VPN — this is normal for router-level encryption.
- Enable VPN kill switch in the router settings so traffic drops if VPN disconnects.
Common problems and fixes
- Connection drops after a few minutes: Enable "Persistent tunnel" or reduce MTU to 1420 in advanced settings.
- Slow speeds: Switch to WireGuard (faster than OpenVPN) or pick a closer server.
- Some sites don't load: Enable "Split tunneling" to exclude local traffic (printers, NAS) from the VPN.
- Streaming blocks you: Use a VPN provider that sells pre-flashed routers (ExpressVPN Aircove) — they're optimized for streaming.
💡 Pro tip: If you only want VPN on specific devices (smart TV, console), set up a "dual router" network: one router with VPN for protected devices, the other without VPN for your phone and laptop. Both share the same internet but have different routing rules.
On this page
Top 3 VPNs 2026 Tested
We earn commission if you purchase through links
Similar questions
Terms you'll meet
- IP address
- Your device's public ID online.
- Encryption
- Scrambling data so only you can read it.
- No‑logs policy
- VPN doesn't store your activity.