How to Set Up a VPN on Your Router (Protect Every Device)
Protect Every Device on Your Network With a Router-Level VPN
Installing a VPN on your router protects every device that connects to your network — smart TVs, gaming consoles, streaming sticks, IoT devices, and guest devices — without installing VPN apps on each one. This is the most comprehensive way to secure your household.
Difficulty: Advanced | Estimated time: 45 minutes
Step 1: Check If Your Router Supports VPN
Not all routers can run a VPN client. You need a router that supports OpenVPN client or WireGuard client configuration. Here is how to check:
Routers that support VPN (most common):
- Asus routers with AsusWRT or Merlin firmware — the easiest and most recommended option
- GL.iNet travel routers ($30-80) — plug-and-play VPN routers, best for beginners
- Routers running DD-WRT firmware — popular open-source firmware with VPN support
- Routers running OpenWRT — advanced open-source firmware with full VPN support
- Netgear Nighthawk routers — select models support OpenVPN client
- ISP-provided routers (the one from your internet company)
- Most basic consumer routers from TP-Link, D-Link under $80
- Mesh systems (Google Wifi, Eero) — most do not support VPN client mode
If your router does not support VPN: The easiest solution is a GL.iNet travel router ($30-50). Connect it to your existing router via ethernet, configure VPN on the GL.iNet, and connect devices to the GL.iNet's WiFi for VPN protection.
Step 2: Log In to Your Router Admin Panel
Open a browser and enter your router's admin address:
- Most Asus routers: 192.168.1.1 or router.asus.com
- Most Netgear routers: 192.168.1.1 or routerlogin.net
- Most TP-Link routers: 192.168.0.1 or tplinkwifi.net
- GL.iNet routers: 192.168.8.1
Important: The router admin password is different from your WiFi password. If you cannot access the admin panel, you may need to reset the router to factory defaults — but this erases all settings.
Step 3: Download VPN Router Config Files
You need your VPN provider's OpenVPN configuration files for the server you want to connect to.
For NordVPN: 1. Log into your NordVPN account at nordvpn.com 2. Go to the manual setup page (Settings > Manual Setup) 3. Note your service credentials (different from your login credentials) 4. Go to NordVPN's server recommendation tool 5. Download the OpenVPN UDP configuration file (.ovpn) for your preferred server
For Surfshark: 1. Log into your Surfshark account 2. Go to VPN > Manual Setup > Router 3. Choose OpenVPN credentials 4. Download the .ovpn config file for your preferred server
Which server to choose: Pick a server close to your physical location for the best speeds. If you want to access content from a specific country, choose a server in that country — but be aware this affects all devices on your network.
Get NordVPN — Best Router VPN → Try Surfshark — Unlimited Devices →Step 4: Upload Config and Enter Credentials
The exact steps vary by router. Here are instructions for the most common setups:
Asus Routers (AsusWRT / Merlin Firmware)
1. In the admin panel, go to VPN > VPN Client 2. Click Add profile 3. Select the OpenVPN tab 4. Enter a description (e.g., "NordVPN Netherlands") 5. Enter your VPN service username and password (from Step 3) 6. Click Choose File and upload the .ovpn configuration file 7. Click OK to save 8. Click Activate to connect
The router will connect to the VPN server. A green checkmark or "Connected" status confirms success.
GL.iNet Routers
1. In the admin panel, go to VPN > OpenVPN Client 2. Click Add a New OpenVPN Configuration 3. Upload the .ovpn file 4. Enter your VPN service credentials 5. Click Apply 6. Toggle the VPN connection to On
GL.iNet routers also support WireGuard — if your VPN provides WireGuard configs, use those instead for faster speeds.
DD-WRT Routers
1. Go to Services > VPN 2. Enable OpenVPN Client 3. Enter the server address, port, and encryption settings from the .ovpn file 4. Paste the certificate content into the appropriate fields 5. Enter your VPN credentials 6. Click Save then Apply Settings
DD-WRT requires more manual configuration than Asus or GL.iNet. Refer to your VPN provider's DD-WRT setup guide for model-specific instructions.
Step 5: Test — Verify IP Changed on a Connected Device
After the router connects to the VPN, every device on your network should show the VPN server's IP address.
To verify: 1. Connect a device (phone, laptop) to your router's WiFi 2. Open a browser and go to ipleak.net 3. Check that the IP address shows the VPN server's location, not your real location 4. Check that DNS servers belong to your VPN provider, not your ISP
Test multiple devices: Check at least two different devices — a phone and a computer — to confirm all traffic routes through the VPN.
If the IP still shows your real location:
- Verify the VPN connection is active in the router admin panel
- Reboot the router
- Try a different VPN server config file
- Clear DNS cache on your test device (Windows: ipconfig /flushdns)
Important Considerations
Speed impact: A router-level VPN encrypts all traffic, which adds processing overhead. Expect 20-40% speed reduction on most consumer routers. Higher-end routers with faster processors handle VPN better.
All-or-nothing: When VPN is on the router, all devices are protected — but all devices also appear to be in the VPN server's country. This can affect banking apps, local services, and smart home devices that rely on your real location.
Split tunneling alternative: Some routers (Asus with Merlin firmware) support policy-based routing — you can configure specific devices to use the VPN while others connect directly. This is the ideal setup.
Updating the server: To change VPN servers, you need to upload a new config file in the router admin panel. It is less convenient than switching servers in an app.
Read our [NordVPN review](/journal/nordvpn-review-2026) or [Surfshark review](/journal/surfshark-review-2026) for more details. Browse the [VPN for Business category](/categories/vpn-for-business) if you need router VPN for an office setup.
Reviewed by Thomas & Øyvind — NorwegianSpark. All tutorials are independently written and regularly updated. We test every step ourselves before publishing.