How to Set Up a VPN on Your Router

Router-level VPN setup has several distinct advantages over per-device VPN apps:

• Whole-home protection — Every device on your home network is automatically routed through the VPN, including smart TVs, streaming sticks, game consoles, smart speakers, and IoT devices that don't support VPN apps
• Avoid connection limits — Most VPN providers count router connection as one device. A router protecting 20 devices in your home only uses one of your VPN's allowed connection slots
• Always-on protection — No need to remember to enable the VPN on each device. The router maintains the VPN connection 24/7
• Device support — Some devices (smart TVs, streaming sticks, gaming consoles) lack native VPN app support entirely. Router VPN protects them with no extra setup
• Guest network support — On compatible routers, you can run separate VPN-protected and VPN-free networks side by side

The trade-off: setup is more complex than installing an app, and changing VPN servers requires logging into the router admin panel rather than tapping a button in an app.

There are three common ways to put a VPN on your router, ranked from easiest to most complex:

1. Buy a Pre-Configured VPN Router (Easiest)

Vendors like FlashRouters and ExpressVPN's own Aircove router ship with VPN clients pre-installed. You enter your VPN credentials in a web interface and you're done in 5 minutes. Cost: roughly the low hundreds to several hundred dollars.

2. Install Your VPN's Native Router App

ExpressVPN and ASUSWRT (Asus's stock firmware) both support native VPN client installation. If you have a compatible router (Asus AX series, certain Netgear models), you can install the VPN provider's app through the router admin interface. Cost: only the VPN subscription if you already own a compatible router.

3. Manual OpenVPN/WireGuard Configuration (Most Flexible)

Download your VPN provider's OpenVPN or WireGuard configuration files and upload them to your router's VPN client section. This works on most routers running DD-WRT, OpenWRT, AsusWRT-Merlin, or pfSense firmware. Cost: verify current pricing if your router supports it; Check current plan terms for a USB-bootable router OS install.

For most households, methods 1 or 2 are recommended — manual configuration is powerful but error-prone, and configuration mistakes can leak traffic outside the VPN tunnel.

These steps walk through setting up a VPN on a router using ExpressVPN's native router app, which is the most beginner-friendly path.

Step 1: Confirm Router Compatibility

Visit ExpressVPN's router compatibility page and check whether your router model is supported. Compatible models include various Asus, Netgear, and Linksys routers, plus ExpressVPN's own Aircove router.

Step 2: Download the Router Firmware

Log into your ExpressVPN account dashboard, select 'Router' from the device list, and download the firmware file matching your router model. Note the activation code displayed — you'll need it later.

Step 3: Install Custom Firmware

Log into your router's admin panel (typically at 192.168.1.1 or 192.168.50.1). Navigate to Firmware Update or Administration > Firmware. Upload the file downloaded in Step 2 and wait 5–10 minutes for the router to reboot.

Step 4: Activate ExpressVPN on the Router

After the router reboots, connect to its Wi-Fi and visit www.expressvpnrouter.com. Enter the activation code from Step 2. The router will configure itself and connect to ExpressVPN automatically.

Step 5: Choose a Server Location

In the router's ExpressVPN admin panel, select the server location you want to connect to. You can also configure split tunneling — letting specific devices bypass the VPN while others remain protected.

Step 6: Test Your Connection

Visit our What Is My IP tool from any device on your home network. Confirm the IP address shown matches the VPN server location, not your real ISP-assigned IP.

If your router supports manual OpenVPN configuration (most DD-WRT, OpenWRT, AsusWRT-Merlin, pfSense, and many stock firmware routers do), follow these steps:

Step 1: Download OpenVPN Configuration Files

Log into your VPN provider's account dashboard and download the OpenVPN configuration files (.ovpn files) for your preferred server locations. Most providers offer ZIP downloads with hundreds of server configurations.

Step 2: Locate Your Router's OpenVPN Client Section

In your router admin panel, navigate to VPN > VPN Client (the exact path varies by firmware). Look for an OpenVPN Client tab.

Step 3: Upload Configuration File

Most router firmware lets you upload .ovpn files directly. Upload one of the files from Step 1. The router will parse the server address, port, and protocol settings automatically.

Step 4: Enter Authentication Credentials

Your VPN provider will give you a service-specific username and password (different from your account login) for OpenVPN authentication. Enter these in the router's OpenVPN Client settings.

Step 5: Enable the VPN Client

Toggle the OpenVPN client to 'On' or 'Connected'. The router should establish a connection within 30–60 seconds. You'll see a status indicator confirming the tunnel is active.

Step 6: Configure Kill Switch and DNS

Under VPN > VPN Client > Settings, enable the option to 'Block Internet Traffic if VPN Drops' (the kill switch equivalent on routers). Also set the DNS servers to your VPN provider's DNS to prevent DNS leaks.

Step 7: Test for Leaks

Use our What Is My IP tool plus dnsleaktest.com from any device on your network to confirm both your IP and DNS queries are routed through the VPN.

Not every router can run a VPN client effectively. VPN encryption is CPU-intensive, and underpowered routers will bottleneck your home internet speed. Public third-party reports indicate the following routers handle VPN traffic well:

• ExpressVPN Aircove (verify current pricing) — Purpose-built for VPN use, handles gigabit speeds with Lightway protocol, plug-and-play setup
• Asus RT-AX86U Pro (verify current pricing) — Powerful 2.0 GHz quad-core CPU handles OpenVPN at 200+ Mbps and WireGuard at strong reported performance
• Asus RT-AX88U Pro (verify current pricing) — Top-tier performance with 8 LAN ports, ideal for busy households
• GL.iNet Beryl AX (GL-MT3000) (verify current pricing) — Compact travel router with built-in VPN client; ideal for travelers needing per-trip VPN protection
• Netgear Nighthawk RAX120 (verify current pricing) — Strong WireGuard performance via custom firmware (DD-WRT)

Avoid budget routers low-cost for VPN use — most lack the CPU power to handle encrypted traffic at modern internet speeds. A verify current pricing router that handles strong reported performance over VPN delivers far better real-world performance than a verify current pricing router that bottlenecks at strong reported performance.

Router VPN setups occasionally hit technical issues. The most common problems and their fixes:

Slow speeds after VPN setup — Router CPU is the most common bottleneck. Check the router CPU usage in the admin panel during a performance reports. If CPU is pegged at varies, you need a more powerful router. Switching from OpenVPN to WireGuard often doubles throughput on the same hardware.

VPN frequently disconnects — Usually caused by MTU (Maximum Transmission Unit) mismatch. Try lowering the MTU in router OpenVPN settings to 1400 or 1380. Also confirm your VPN provider's server is healthy — try a different server location.

Some devices won't connect — Most often a DNS issue. Manually set the DNS servers in router DHCP settings to your VPN provider's DNS, or use 1.1.1.1 (Cloudflare) and 8.8.8.8 (Google) as fallbacks.

Streaming services don't work — Some services aggressively block VPN IPs. Use a different server location, or configure split tunneling to exclude streaming devices from the VPN entirely.

Smart home devices stop working — Some IoT devices (smart locks, security cameras) require local network access that breaks under certain VPN configurations. Use split tunneling to route IoT devices through the regular connection while VPN-protecting other devices.