How to Set Up a VPN on Your Router

Router VPN vs device VPN: which is better?

Installing a VPN on your router protects every device on your network automatically — including smart TVs, game consoles, and IoT devices that don't support VPN apps. The trade-off: all traffic goes through the VPN (you can't easily exclude specific devices), and router-level VPN setup is more complex than an app.

• Router VPN: One setup covers all devices. Protects smart TVs, consoles, routers. Cannot be switched on/off per-device easily.
• Device VPN app: Easy toggle per device. More flexible. Doesn't cover devices without VPN app support.

For most households, a device VPN app is more practical. Router VPN is best when you specifically need to cover devices that can't run VPN apps (older smart TVs, game consoles, IoT sensors).

Does your router support VPN?

Check before starting. Most ISP-supplied gateways (Xfinity, AT&T, Verizon) do not support OpenVPN or WireGuard client mode. You need a third-party router. Compatible options:

• Asus routers (RT-AX88U, RT-AX86U, etc.) — built-in OpenVPN and WireGuard client in the admin panel. Easiest option.
• Netgear Nighthawk (some models) — built-in OpenVPN client. Check your specific model's specs.
• GL.iNet routers — designed specifically for travel and VPN use. Support WireGuard and OpenVPN natively.
• Any router running DD-WRT or OpenWRT firmware — open-source firmware that adds VPN client capability to most routers.
• TP-Link Deco / Archer (some models) — check the product page; VPN client support varies by model.

Method 1 — Asus router (built-in WireGuard/OpenVPN)

1. Log in to your Asus router admin panel at 192.168.1.1 or router.asus.com.
2. Go to VPN → VPN Client.
3. Click Add profile. Choose WireGuard (preferred — faster) or OpenVPN.
4. Download the configuration file from your VPN provider (NordVPN, ExpressVPN, Mullvad, etc.) — each provider has a "router" or "manual config" section in their account dashboard. Download the WireGuard or OpenVPN config for the server location you want.
5. Import the config file into Asus's VPN Client panel. Name the profile and click OK.
6. Click Activate next to the profile. All traffic now routes through the VPN.

Method 2 — OpenWRT/DD-WRT (any compatible router)

1. Flash your router with OpenWRT or DD-WRT firmware (check compatibility for your specific model first — an incompatible flash can brick the router).
2. In OpenWRT: go to Network → Interfaces → Add new interface. Choose WireGuard or OpenVPN as the protocol.
3. Enter the VPN server details from your provider's manual config page.
4. Set up firewall rules to route all LAN traffic through the VPN interface.
5. OpenWRT has detailed documentation at openwrt.org for each VPN protocol — follow the WireGuard guide for the best performance.

Which VPN providers support router setup?

• NordVPN — supports router setup via NordLynx (WireGuard) and OpenVPN. Has a dedicated router guide in their help centre.
• ExpressVPN — supports some Asus and Netgear models natively. Has a router app for compatible models.
• Mullvad — excellent WireGuard support. Config files downloadable for any router.
• ProtonVPN — supports OpenVPN and WireGuard router setup. Free tier available (slow, limited servers).
• Surfshark — supports OpenVPN and WireGuard on routers.

Speed impact on router VPN

Router-level VPN adds CPU overhead on the router's processor. Older routers with slow CPUs may cap VPN throughput at 50–100 Mbps even on a fast internet plan. Modern routers with hardware AES acceleration (most routers from 2019+) handle WireGuard at near-full speeds. Check your router's spec sheet for VPN throughput rating before relying on it for high-speed connections.