FlashRouters Support Portal

Prioritizing Privacy

Search Results for: devices

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

Warranty and Returns FAQs

· ·

Warranty and Returns FAQs

At FlashRouters, we are confident that every router sold will function as advertised. We open, inspect, upgrade, configure, and then test all FlashRouters before they get shipped out. That is why we guarantee you will receive a working unit and offer our own 1-Year Hardware Warranty included with all New and Refurbished routers purchased from the FlashRouters website.

If you would like to extend the warranty coverage period to 2 years, the option is available during the FlashRouters checkout process.

Since we are so certain you will be happy with your upgraded and super secure network, all routers purchased from FlashRouters.com also come with a 30-day satisfaction guarantee.

Please read the warranty and return section in detail before placing an order or requesting an RMA. Our goal is to make the return process as smooth and transparent as possible for all customers. If the router you purchased does not work out for your needs we still want you to be satisfied with your purchasing experience.

Hardware Warranty and Return Policy

Requesting an RMA

Automated Return Merchant Authorization (RMA) requests are available from within your customer account panel. If you are eligible for a return then your RMA request will be approved. If your RMA request is not valid then it will be denied and you must e-mail FlashRouters Support for any additional information or actions. RMAs are valid for 7 days from the day they are issued. 

The following are the available options when submitting an RMA request. Continue reading for more information on all available RMA options and conditions. 

  1. Hardware Guarantee – available for 7 days after receiving your FlashRouter.
  2. Satisfaction Guarantee – available for 30 days after receiving your FlashRouter.
  3. Hardware Warranty – available for 1 year, or 2 years if upgraded when purchasing a FlashRouter.
  4. Hardware Repair – Anyone with a valid FlashRouters Support subscription is eligible for free Hardware Repair. 

Please note we can only provide prepaid labels for approved Hardware Warranty returns within the USA. Prepaid labels are not available for international customers. All return shipping for 30 Day Satisfaction refunds is paid for by the customer.

Hardware Guarantee

In the rare case you receive a faulty router, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel and we will work to rectify the situation immediately. If it is determined that the power supply you received was faulty, and not the router itself, our team will immediately ship you out a tested power supply at no additional cost.

Rest assured that we individually test and inspect every FlashRouter with great detail before shipment. BUT… if router gremlins (yes they do exist) snuck into your router during the shipping process and it no longer powers on, our team will supply you with a prepaid shipping label to return the unit back to our offices. As soon as we receive verified tracking on your return shipment we will ship out another thoroughly tested unit to you at no additional cost.

You must contact us within 7 days from when you received your FlashRouter to be eligible for a Hardware Guarantee prepaid shipping label from FlashRouters.

30-Day Satisfaction Guarantee

If you are not satisfied with the performance of your router after trying it out for up to 30 days, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel. Once the RMA is approved, you will then have the option to ship the unit back to FlashRouters.

Once we receive the return, our team inspects and refunds accordingly based on the original purchase price of your FlashRouter. Please note there is a $25 restocking fee and refunds do not include any initial shipping costs associated with your order. All restocking fees are returned as Store Credit. This means if you make another purchase at FlashRouters then your fee is refunded.

The item must also be fully functional and have no signs of cosmetic damage for you to receive the maximum refund. If you do not include the original boxing, or any router accessories you may also be charged an additional fee as indicated.

Ethernet Cable: $5

Power Source: $10 

Antennas: $5 per antenna

Router Stand: $10

Box: $10

Cosmetic Damage: Up to $25

What is covered under the 30-Day Satisfaction Guarantee?

If the VPN speeds or WiFi network speeds are not what you had hoped, if the setup is too complicated, or you just decided on another solution; these are all covered under the 30-Day Satisfaction Guarantee. 

We will not accept any returns of working routers after 30 days from the date you received your router. After 30 days, router returns/replacements will only be processed under the Hardware Warranty. 

Can I get the restocking fee waived?

If you place a new order for a different FlashRouter unit before returning your initial purchase, then we will waive the restocking fee. Otherwise the $25 restocking fee will be applied to your customer account as a store credit. You can then use this $25 store credit on any future FlashRouter purchase.

Rewards Points refunds

If you return your FlashRouter under the 30 day satisfaction guarantee then you will lose any reward points received for your initial purchase.

Hardware Warranty

A 1-year Hardware Warranty is included with the purchase of all New and Refurbished FlashRouters. If your router suffers hardware failure within 365 days from the date you received the unit then we will replace your router with another fully tested unit. You must pay for return shipping of the faulty unit back to our offices located in New Jersey, USA and our team will ship out your replacement at no additional cost.

You must contact the FlashRouter support team for an RMA number or request an RMA from your customer account panel before returning a router for warranty replacement. If you do not receive approval for a return then you will not be eligible for a replacement unit.

There are 2 options for receiving a Hardware Warranty replacement unit:

Option #1: Process another order for immediate shipping and as soon as we receive the returned device back in our offices we will issue you a refund for the initial purchase.

Option #2: Ship your faulty router back to our office, and as soon as we receive the unit our returns department will have a replacement unit shipped out to you at no extra cost.

How long do I have before my RMA expires?

RMA’s are good for 7 days from the date they are issued.

What if I upgraded to a 2 year Hardware Warranty at checkout?

All refund, replacement, RMA details, and options covered by the 1-year Warranty apply in the exact same manner for 2 year warranties over each respective warranty coverage period.

If for any reason the router you purchased is no longer in stock or discontinued then you have the option to replace your router with one of equal value or receive a refund. Hardware warranties are only eligible for refunds if we are unable to provide a replacement unit for you.

What should I do if my router is out of warranty coverage?

If your FlashRouter is out of the warranty coverage period, we are first and foremost apologetic for the passing of your router. Be sure to contact our sales team though and you can receive a special coupon as a return customer for a shiny new wireless networking centerpiece.

What is not covered with a FlashRouter Warranty?

Items that have been clearly damaged either by the customer or during the return process are not eligible for a full refund. This includes routers that have visible dents, scratches, or moving parts inside the router.

Can I upgrade to a 2 year warranty after my FlashRouter purchase?

2 year warranty upgrades are only available at the time of your FlashRouter purchase. Upgrades are not available once a FlashRouter order has been shipped. 

Can I get a Warranty on my router if I purchased a “Flash My Router” plan from FlashRouters?

Routers that have been “flashed” and configured by our support specialists for anyone who has purchased a Flash My Router Plan are not eligible for warranty coverage from FlashRouters. Only routers purchased through the FlashRouters.com website are eligible for warranty replacements or refunds.

Hardware Repair

FlashRouters is proud to offer a free repair and upgrade service for anyone with an active Silver or Gold Service Plan subscription. Any and all shipment costs associated with FlashRouter repairs or upgrade requests are the burden of the customer and will not be paid for by FlashRouters. However, the repair and upgrade service itself is FREE.

If you do choose to ship your router back to our office for repair, then you should include a prepaid shipping label in your package back to your home or office, so our team can send the router back to you whether we are able to repair the unit or not. Router accessories like power supplies, ethernet cable, or antennas do not need to be included when shipping back a unit for repair.

If our team is not able to resurrect your router from a power failure, faulty firmware upgrade, or any other reason then we can return the faulty unit back to you using the return shipping label included with your return package. Alternatively, we can destroy the unit and refund the return shipping costs if that is your preference.

Open Box Routers

What is an Open Box Router?

Open Box routers are fully functional units that have cosmetic flaws and are sold at heavy discounts. These units come with the same Support Plan options as New or RM units, which means you get the same support service with extremely discounted hardware.

Open Box routers are covered under the FlashRouter 30-Day Satisfaction Guarantee BUT come with no Hardware Warranty. We take every measure possible to ensure complete functionality and our team fully load tests these devices before shipment, but you should be very aware that you buy these discounted “open box” devices at your own risk without any Hardware Warranty.

What is the Open Box Router return policy?

Open Box Routers can only be returned within 30 days from the date you received your router. Returns will not be accepted on open box routers after 30-Day Satisfaction Guarantee window has expired. Please note that Open Box Router return shipping costs are not covered by FlashRouters and initial shipping costs are not included in any refunds. 

Accessories Warranty

All Accessories come with manufacturer warranties as listed on the respective product pages. 

FlashRouters will accept returns for refund or replacement of accessories only within 30 days from the date you received your order. After 30 days you must contact the manufacturer for any warranty replacements.

Accessories must be returned with all original packaging and with no cosmetic damage to receive a full refund. A missing box or damage to an item will result in a restocking fee per our discretion.

"Flash My Router" Refund Policy

The “Flash My Router” product offered by FlashRouters is a virtual service provided by the FlashRouters support team. This product includes a remote support session where our support team will flash your router and then complete your internet, WiFi, and VPN setup, and in certain cases support additional router features. 

Once your remote support session is completed there are absolutely no refunds on “Flash My Router” purchases. In the case we are unable to successfully flash your router we will offer a full refund for your “Flash My Router” purchase. “Flash My Router” purchases are fully refundable if you decide you would no longer like to use the service after your purchase is completed.

Service Plan Subscription Refund Policy

All FlashRouter router purchases include a recurring FlashRouters Service Plan subscription. There are 3 levels of support to choose from as either a quarterly or yearly recurring billing plan.

30-Day Satisfaction Guarantee

If you choose to return your FlashRouter under the 30-Day Satisfaction Guarantee, then you are eligible for a full refund on any Service Plan purchased with your FlashRouter.

Cancellation Policy

You may cancel your recurring billing at any time and you will not be charged again. Please note you will not be refunded for unused time from the initial billing/service period of your support plan subscription.

If you choose to cancel your 3 month FlashRouter support plan then you will retain support until the end of the 3 month period. If you choose to cancel your 1 year FlashRouter support plan then you will retain support until the end of the 1 year period. You will not lose time from your existing service plan if you cancel when a plan is active.

There is a 7-day grace period after Service Plan renewals have been charged, where you may request an immediate cancellation and full refund.

How do I change my FlashRouter Support subscription level?

How do I Upgrade my Service Plan?

You can upgrade a Service Plan at any time during a billing cycle. You must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Service Plan, which will then be immediately applied to your new upgraded Service Plan purchase. Your recurring billing will then continue at the new Service Plan level. Your 3 months or 1 year of upgrade service will start again from the date of the upgrade purchase. 

How do I switch from a Quarterly to a Yearly Service Plan?

If you would like to switch to a Yearly plan from a Quarterly plan of the same service level, then you must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Quarterly Service Plan, which will then be immediately applied to your new Yearly Service Plan purchase. Your recurring billing will then continue at the Yearly Service Plan level. Your 1 year of service will start again from the date of the upgrade purchase. 

How do I Downgrade my Service Plan?

If you are subscribed a Service Plan, but would like to switch to a lower level Service Plan then you can request that our support team cancel your recurring billing at any time. As soon your existing Service Plan is expired you can make a new purchase for the new Service Plan of your choice.

How do I switch from a Yearly to a Quarterly Service Plan?

If you would like to change the billing cycle from yearly to quarterly, you may cancel your existing subscription plan and then once your year of service has expired, you may purchase a Quarterly Service Plan instead.

If you just purchased a FlashRouter, there is a 7-day grace period from when you receive your unit if you would like an immediate change from Yearly to a Quarterly Service Plan.

How do I cancel my subscription?

You may request a Service Plan subscription cancellation by e-mailing support@flashrouters.com or from within your customer account panel at any time. You will be notified of a successful cancellation and your payment method will not be billed again.

Please note there are no refunds when cancelling your subscription. Cancellation means you will not be billed again for your Service Plan, there are no partial refunds for cancelled Service Plans.

Privacy Hero VPN Kill Switch Setup

· ·

The Privacy Hero VPN Kill Switch prevents regular internet traffic from passing through your router if its VPN disconnects or fails to connect. This helps prevent devices from using your normal ISP connection without VPN protection.

Before enabling: Make sure your VPN is already Connected and that internet access works through the VPN. The Kill Switch is optional, but useful if you prefer internet access to stop rather than continue unprotected when the VPN goes down.

Privacy Hero is managed at app.privacyhero.com. You can make changes using a computer, phone, or tablet.

How to Enable the VPN Kill Switch

  1. Open app.privacyhero.com and sign in using your Privacy Hero account. If the router has not been activated yet, follow the Privacy Hero Activation and Setup guide first.
  2. Open the VPN section of your Privacy Hero settings.
  3. Confirm that your selected VPN provider is active and its connection status shows Connected. If the VPN is failing, fix the connection before proceeding.
  4. Find VPN Killswitch (VPN Kill Switch) and move its toggle to On (orange). The setting is enabled when its toggle is On.
  5. Keep a device connected to the Privacy Hero WiFi or LAN and confirm that ordinary websites work with the VPN connected.
Privacy Hero Security and Privacy VPN Killswitch toggle enabled, highlighted on the right side of the settings page
In Privacy Hero, the VPN Killswitch toggle is shown directly below the VPN provider setting.

Tip: To check the router’s VPN IP address, use a browser on a device connected to Privacy Hero, not on a phone using cellular data or another WiFi network. Disable any separate VPN app on the test device so you can verify the router VPN independently.

What Happens When the Kill Switch Is On?

VPN status Kill Switch Normal internet traffic
Connected On Allowed through the VPN
Disconnected or Failed On Blocked until the VPN reconnects or you turn the Kill Switch off
Disconnected or Failed Off May use the normal ISP connection without VPN protection

The Kill Switch does not turn off the WiFi network. Your device may stay connected to Privacy Hero WiFi but report No Internet when the VPN is unavailable. Some phones and computers may automatically switch to cellular data or another saved WiFi network.

Access Privacy Hero Even When the Kill Switch Is Blocking Internet

Important: Privacy Hero includes a built-in exception for its cloud management dashboard. If the VPN is down and the Kill Switch blocks normal internet traffic, you can still access app.privacyhero.com while connected to the Privacy Hero WiFi or LAN network, provided the router itself still has its upstream/cloud connection.

This means you can sign in, check the VPN status, change the server or protocol, or switch off the Kill Switch without first leaving the Privacy Hero network.

You can also access the cloud dashboard through another working WiFi connection or cellular data. If the router shows Offline in the dashboard, that indicates a separate WAN or cloud-connectivity problem rather than normal Kill Switch behavior.

How to Turn Off the Kill Switch or Restore Internet

If your VPN has stopped connecting and you need to restore ordinary internet access temporarily:

  1. Open app.privacyhero.com, including from the Privacy Hero network if the Kill Switch is blocking regular internet.
  2. Open VPN and check the current VPN status.
  3. Move VPN Killswitch to Off.
  4. If the VPN remains Failed or Disconnected, temporarily switch the VPN connection Off and test internet access using a device on the Privacy Hero network.
  5. Repair the VPN connection, confirm Connected, and verify that ordinary internet traffic works through the VPN before turning the Kill Switch back On.

Security note: With the Kill Switch off, devices may access the internet without VPN protection if the VPN is disconnected. Re-enable it after testing if preventing non-VPN traffic is your goal.

VPN showing Failed? Privacy Hero includes a Reset option that removes all saved third-party VPN settings. With an active Privacy Premium subscription, the router reconnects using the built-in Privacy Hero VPN. With Privacy Core, it returns to your normal ISP connection without a router VPN.

Before using Reset, see our How to Reset a Failed VPN Connection on Privacy Hero guide.

For a complete diagnosis of WiFi connected but no internet, VPN failures, and router Offline status, follow the Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Related Privacy Hero Guides

Privacy Hero Router Setup Guide

Privacy Hero Routers

Quick Start Guide for Privacy Hero FlashRouters

Find setup guides, FAQs and troubleshooting tips for Privacy Hero FlashRouters.

Privacy Hero 2

Internet Setup

WiFi Setup

VPN Setup

Privacy Hero Features

Search Support Articles

Troubleshooting

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

Ad blocking on Roqos

· ·

Enable Ad blocking on your Roqos Core so you are not inundated with ads across the internet.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select Cybersecurity > Ad blocker.

Roqos Cybersecurity - Ad blocker

2. Toggle the Enable slider and select if you want to apply Ad blocking to all devices or only select profiles and click Save.

Roqos Cybersecurity - Enable Ad blocker

How do I change the DHCP range of my FlashRouter?

· ·

Whenever a device joins the FlashRouter network via wired or WiFi connection the DHCP server on the router gives out a local IP address to each device so all these devices can interact on your local network.

Increase the DHCP range to allow more users to automatically be assigned an IP address or decrease the DHCP range to limit the users that are automatically assigned an IP address.

Navigate to Setup > Basic Setup

Change DHCP Range in FlashRouter DD-WRT Settings
  1. Under Network Address Server Settings (DHCP) change the Maximum DHCP Users to your preferred value.
  2. You can edit the Start IP Address to 2 and Maximum DHCP Users to 254 for the most available slots.
  3. Click Apply Settings.

Separate 2.4GHz and 5GHz Wi-Fi bands on ExpressVPN/Aircove firmware

· ·

By default ExpressVPN firmware bonds the 2.4GHz and 5GHz wireless networks to a single wireless network name. Your device will automatically choose which one will provide the best connection. You can separate these networks to have unique Wi-Fi names so you can control which network your devices will use.

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Login with your ExpressVPN FlashRouter admin password.

ExpressVPN Router admin login

4. Select Network Settings on the left hand side of the menu.

ExpressVPN Network Settings

5. Select Wi-Fi Settings on the left hand side of the menu.

ExpressVPN WiFi Settings

6. Click the toggle for Separate 2.4GHz and 5GHz Wi-Fi.

ExpressVPN Separate 2.4GHz and 5GHz

7. Separate Wi-Fi details for the 5GHz band will now display. You can change the name and password if you so choose or leave it with the default name and password with “-5GHz” added to the name. Click Save. Click Continue.

ExpressVPN 5GHz added

Asus RT-AC68U B1 / C1 / AC1900 DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Asus RT-AC68U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC68U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC68U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC68U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC68U DD-WRT Wireless Security

The preset RT-AC68U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC68U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC68U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Surfshark Setup for Privacy Hero

· ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.

Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Asus RT-AC66U DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Asus RT-AC66U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC66U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC66U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC66U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC66U DD-WRT Wireless Security

The preset RT-AC66U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC66U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC66U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC56U DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Asus RT-AC56U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC56U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC56U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC56U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC56U DD-WRT Wireless Security

The preset RT-AC56U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

ViewAC56U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC56U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

How do I find my router local IP address?

· ·

The Local IP Address is the address that you can use to access a router’s firmware settings. Use the below instructions to find the local IP Address of the router you are connected to.

Make sure you are connected to the FlashRouter’s network via ethernet or WiFi. Keep in mind these instructions may vary based on your current software version.

Find IP Address in Windows

1.  Open the Window search box, and search “command prompt”

How to Find IP Address using Windows Command Prompt

2. Type “ipconfig” and press Enter.

3. Your router’s local IP address will be listed next to Default Gateway.

How to Find IP Address using Windows Command Prompt 2

Find IP Address in Apple / Mac

1. Open System Preferences, and select Network.

Find Static DNS settings for FlashRouter DD-WRT Using a MAC Computer

2. Select the adapter that is connected via ethernet or wireless. This will vary based on your current connection.

3. Select Advanced.

How to Find IP Address using a MAC Computer 2

4. Select the TCP/IP tab.

5. Your router’s local IP address will be listed next to Router.

Find IP Address in iOS

1.  Open Settings

2. Select WiFi, and select the blue icon next to your current connection.

Select FlashRouters DD-WRT Wireless Network in order to Check Static IP Network Settings on iOS Mobile Device

3. Your router’s local IP address will be listed next to Router.

How to Find IP Address on IOS 2

Find IP Address in Android

1. From the top of the screen, swipe down to display settings.

2. Select WiFi.

WiFi Icon and Settings in Android Mobile Device

3. Select your current network.

How to Find IP Address on Android Device

4. Click on the gear next to Network Name (note this may be different on varying Android devices)
5. Click Advanced
6. Your router’s local IP address will be listed as the Gateway under Network Details.

Find Router IP on Android

Once you have followed these instructions to find the Local IP Address of the router you can enter the Local IP address in your web browsers URL to access the router’s firmware settings.

Flint/Slate GL.iNet Change Wi-Fi name and password

· ·

Follow this guide to change the Wi-Fi name and password on your GL.iNet FlashRouter.

1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1

GL.iNet router access

3. Enter openwrt as the admin password to access the GL.iNet firmware settings.

GL.iNet admin password enter

4. Click Wireless.

GL.iNet Click Wireless

5. Click Modify under the 5GHz or 2.4GHz band.

GL.iNet Modify Wifi

The 5GHz and 2.4GHz information must be changed at separate times. Keep in mind that if you are connected to wireless when changing one band you may need to reconnect with the new info you set to be on the network again to make changes to the other band.

6. Change the Wi-Fi Name (SSID) and Wi-Fi Password fields to what you want to use. The SSID should be unique and NOT a duplicate of an existing network. Click Apply.

GL.iNet change Wifi name and password

7. Connect your devices to the new wireless network.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

My WiFi password is not working

· ·

Keep in mind that passwords are case sensitive.

The preset DD-WRT FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Verify wireless password

Connect an ethernet cable from a numbered port on the FlashRouter to a computer and access the FlashRouter’s settings.

Navigate to Wireless > Wireless Security

Check the Unmask box and note the wireless password that is entered.

Verify the wireless settings

Make sure that you have WPA2 Personal / AES set as the security settings for all bands. For some router models make sure the CCMP-128 (AES) box is checked for all bands.

Forget network on your device

Wireless devices usually offer a “forget” network feature to remove a wireless network from the saved information of the wireless adapter. If you have updated your WiFi password and are trying to connect on a device that previously used the old WiFi password then removing the wireless network and then trying to connect fresh can help with this issue.

Why is my WiFi signal weak?

· ·

If you find that wireless signal strength is weak while connected to the FlashRouter’s network we recommend that you do the following:

  1. Make sure that you have the external antennas fully connected to the FlashRouter.
  2. “Forget” the wireless network on the device and then rejoin with a fresh connection. This will be different for each device but can be effective.
  3. Make sure you are within an appropriate range for the network you are using. Keep in mind that a 2.4GHz network will always have better range than 5GHz networks. Devices further away from the router should use the 2.4GHz network.
  4. Interference from your wireless environment can also cause this issue. On the Wireless > Basic Settings adjust the Wireless Channel for the network you are experiencing the issue for. Channel interference is a likely cause for weak signal strength.

Access FlashRouter DD-WRT firmware settings

· ·

You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.

Why do I need to access my FlashRouter's settings?

It is important to understand how to access your router if you want to:
  • Change WiFi or admin passwords
  • Switch VPN server locations
  • Attempt custom setups
  • Troubleshoot your network

Connect your device to the FlashRouter network

We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.

Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.

via Ethernet

Connect an Ethernet cable to your device’s Ethernet port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 1

Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 2

Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.

via Wireless

Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).

Access the FlashRouter settings

We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.

Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.

DD-WRT - Firmware GUI

Local IP Address: 192.168.11.1

Username: flashrouter

Password: ddwrt

Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.

If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.

Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How do I read my Wireless status?

· ·

The wireless status page is very helpful in diagnosing where a wireless issue stems from. Make sure the settings displayed on this page match the actual settings you have set in the DD-WRT Wireless settings. Review our recommended wireless settings for your FlashRouter if you are not getting accurate readouts.

Navigate to Status > Wireless

Interface

Select from the wireless interface that you want to view the readouts for.

MAC Address

Used to identify the wireless interface.

Chipset

Displays the wireless hardware that your FlashRouter uses.

Radio

Should always be set to Radio is On unless you have intentionally disabled the wireless on the FlashRouter. If this is displaying Radio is Off for certain wireless interfaces we recommend adjusting the Wireless Channel on the Wireless > Basic Settings page.

Mode

This should read as AP unless you are using an Advanced Wireless setup such as a Repeater, Client, or Repeater Bridge.

Network

Displays the wireless network mode that you have set for a specific wireless interface.

SSID

Displays the wireless network name that you have set for a specific wireless interface.

Channel

Displays the channel that you have set for a specific wireless interface. If this reads as Unknown it is best to select a new wireless channel or reboot the FlashRouter and check again.

TX Power

Displays the wireless transmit power that you have set for a specific wireless interface. If this reads as Unknown it is best reboot the FlashRouter and check again.

Rate

Displays an approximation of the max wireless speed available on a wireless band.

ACK Timing

Displays the ACK Timing that you have set for a specific wireless interface. If this reads as Unknown it is best reboot the FlashRouter and check again.

Encryption

Should always read as Enabled, WPA2 Personal.

Received (RX)

If this appears as 0% and there are no errors then it means that no devices have connected to the wireless interface yet. If this appears as 0% and the errors match the amount of OK packets you will need to adjust the wireless settings on the Wireless > Basic Settings page.

Transmitted (TX)

If this appears as 0% you will need to adjust the wireless settings on the Wireless > Basic Settings page.

ProtonVPN Setup Guide for GL.iNet Routers

· ·

You can connect to ProtonVPN on your GL.iNet router using Wireguard or OpenVPN.

Quick Options

  • Wireguard: Download your preferred server .conf configuration file from the ProtonVPN website.

  • OpenVPN: Download your preferred server .ovpn configuration file from the ProtonVPN website.

:point_right: If you are not already a ProtonVPN user Sign Up Now.

ProtonVPN Wireguard Setup for GLiNet (Recommended)

1. Login to your ProtonVPN account and go to the Downloads section of your ProtonVPN account page

2. Scroll down to find the WireGuard configuration section. Name your configuration and then select Router as the platform, and select Standard server configs.

3. Click Create button to choose the recommended server or scroll down to choose and Download any of the available server files from the list.

4.  Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select WireGuard Client then click + New Group and name your connection and click the check to save.

6. Upload the configuration file and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

ProtonVPN OpenVPN Setup for GLiNet

1. Log in to your ProtonVPN account and navigate to the Account tab. Scroll down to find your OpenVPN specific Username and Password.

2. Go to the Downloads section of your ProtonVPN account page

ProtonVPN Downloads

3. Scroll down to find the OpenVPN configuration Files. Select Router as the platform, UDP as the protocol, and select Standard server configs. Choose your preferred country and download the configuration file.

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select OpenVPN Client.

GL.iNet VPN OpenVPN Client

6. Select Add Manually then click + New Group and name your connection and click the check to save.

7. Upload the configuration file and input your username and password, click Apply.

8. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

9. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

  1. You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
  2. Visit ProtonVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.

🚫📱Do not run ProtonVPN apps on devices connected to your ProtonVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.

Still having issues?

Feel free to submit a ticket and we will get back to you as soon as possible.

Number test

· ·

  1. Visit ExpressVPN’s website login page
    ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard
  2. Successfully log in with your account information. Select Setup on More Devices.
    ExpressVPN on FlashRouters Privacy App Setup - Setup On More Devices
  3. Select Manual Config and copy the Username and Password that are displayed on the right hand side of the screen.
    ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password

Linksys WRT1200AC DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Linksys WRT1200AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1200AC with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT1200AC DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View WRT1900AC DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

WRT1200AC DD-WRT Wireless Security

The preset WRT1200AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View WRT1200AC DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Linksys WRT1200AC WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

IPv6 Internet Setup

· ·

Most ISPs only support IPv4. Unless your ISP supports IPv6 then enabling it on the FlashRouter will not enable it across your network.

For most VPN users IPv6 should remain disabled as the VPN connection was designed to operate under IPv4 addresses only. Enabling IPv6 in this instance may compromise the security of the VPN tunnel.

We typically only recommend enabling IPv6 if you are not using VPN or if your VPN provider requires that IPv6 be enabled.

Enable IPv6

Navigate to Setup > IPv6

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set IPv6 to Enable.
  2. Select Native IPv6 from ISP in the dropdown.
  3. If you have specific IPv6 DNS servers you would like to add you can add them in the Static DNS fields or leave those fields blank.
  4. Click Apply Settings.

Power cycle your FlashRouter

Power your FlashRouter off and then power it back on by unplugging and then plugging it back in or using the button on the back of the FlashRouter.

Verify a successful IPv6 connection

Once the FlashRouter is finished powering back up, connect one of your devices to the FlashRouter via Ethernet or Wireless.

Visit  http://ipv6-test.com/ where you should see Supported under IPv6 connectivity if your ISP supports IPv6 and your modem is setup to passthrough IPv6.

Please be aware that we can not replicate ISP specific IPv6 issues, which makes them challenging to troubleshoot. We recommend contacting your ISP as the first step of troubleshooting.

Why are streaming services blocked while connected to VPN?

· ·

Streaming services and VPN

Most popular streaming services such as Netflix, Hulu, and Amazon Prime block incoming VPN connections. This does not mean the VPN is not working, it simply means they have recognized you are connecting to a VPN server and filtered that server from being able to stream.

Below are several options for you to follow if you encounter this issue while connected to a VPN on your FlashRouter.

VPN provider server recommendation

Contact your VPN provider for a server recommendation that is not blocked by popular streaming services. Be sure to mention that you are connecting to VPN via a router instead of the computer client. If your VPN provider does not have a helpful suggestion or server recommendation please try the below options or contact us for a solution.

Bypass VPN by device

The FlashRouters Privacy App has a VPN bypass by device feature that can be used on devices dedicated to streaming.

Use SmartDNS

If access to streaming services not in your region is a higher priority for you then VPN encryption we recommend using a SmartDNS service on your FlashRouter to access the content you desire.

ExpressVPN MediaStreamer SmartDNS Setup

· ·

ExpressVPN offers a SmartDNS service known as MediaStreamer for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.

SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.

SmartDNS and VPN should not both be configured at the same time. When using a SmartDNS connection make sure to disable your VPN connection on the FlashRouter.

Login to ExpressVPN

If you are not already a ExpressVPN user Sign Up Now.

Visit ExpressVPN website login page and successfully login.

Register your IP with ExpressVPN

Navigate to the DNS Settings tab on top right of the ExpressVPN Dashboard.

ExpressVPN MediaStreamer DNS Settings

Click on Register my IP address.

Register IP for ExpressVPN MediaStreamer use on FlashRouter DD-WRT

Navigate to the ExpressVPN Dashboard.

Finding ExpressVPN MediaStreamer Specific DNS Servers in ExpressVPN Dashboard

Click on Set Up on More Devices.

Finding ExpressVPN MediaStreamer Specific DNS Servers

Scroll down and click on MediaStreamer and note the DNS servers that appear on the right side of the page.

ExpressVPN MediaStreamer Specific DNS servers

Enter MediaStreamer SmartDNS servers on your FlashRouter

Navigate to Setup > Basic Setup

  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in the MediaStreamer SmartDNS servers you noted into Static DNS fields 1 and 2.
  3. Click Apply Settings at the bottom of the page.
  4. Reboot the FlashRouter.

Once the FlashRouter has fully rebooted, you can now access your desired regional content on any device that connects to the FlashRouter’s network.

NordVPN Setup for GL.iNet Routers

· ·

You can connect to NordVPN on your GL.iNet router using NordLynx, OpenVPN, or a Dedicated IP.

Quick Options

  • NordLynx: Choose your preferred city or country from NordVPN’s server list

  • OpenVPN: Choose your preferred city or country from NordVPN’s server list.

  • Dedicated IP (optional): Enter your unique configuration file if you’ve been assigned a static NordVPN IP.

:point_right: If you are not already a NordVPN user Sign Up Now.

NordVPN NordLynx Setup for GLiNet

1. Get your NordVPN Access Token for NordLynx connections. Log in to your NordVPN account and select NordVPN from your list of Services.

NordVPN Services Section

2. At the bottom of the page click Get Access token and you will receive a code via email. Enter this code to proceed.

NordVPN Access Token

3. After you enter the email code select Generate new token and set it to Doesn’t expire. Copy this token.

NordVPN Generate new token
NordVPN Copy Token

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select Wireguard Client then choose NordVPN. Enter your Token then click Save and Continue

GLiNet NordVPN Wireguard

6. Select your preferred server locations, and click Apply.

GLiNet Select NordLynx Servers

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

GLiNet NordLynx Start

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

GLiNet NordLynx Connected

NordVPN OpenVPN Setup for GLiNet

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

NordVPN Service

2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.

NordVPN Manual OpenVPN
NordVPN Service Credentials

3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

4. Navigate to the VPN tab and select OpenVPN Client.

GL.iNet VPN OpenVPN Client

5. Select the NordVPN group, enter your manual credentials, then click Save Credentials & Get Servers.

GL.iNet NordVPN Group
GL.iNet NordVPN Login

6. Choose UDP (recommended), select your preferred server locations, and click Apply.

GL.iNet NordVPN select servers

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

NordVPN GLiNet OpenVPN Start

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

GLiNet VPN Dashboard

NordVPN Dedicated IP Setup for GLiNet

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

NordVPN Service

2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.

NordVPN Manual OpenVPN
NordVPN Service Credentials

3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

4. Navigate to the VPN tab and select OpenVPN Client.

GLiNet VPN Dashboard

5. Download your Dedicated IP configuration file from the NordVPN website.

6. Click +New Group and name your NordVPN Dedicated IP connection, then upload the configuration file, enter your manual service credentials and click Apply.

GLiNet Dedicated IP Address Load

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

GLiNet Dedicated IP

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

GLiNet Dedicated IP Dashboard
  1. You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
  2. Visit NordVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.

🚫📱Do not run NordVPN apps on devices connected to your NordVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.

Still having issues?

Feel free to submit a ticket and we will get back to you as soon as possible.

VPN Kill Switch on Roqos

· ·

The VPN Kill Switch disables the Internet connection on your Roqos Core in the even that your VPN disconnects. Internet access of all your devices will be blocked when the kill switch is enabled – except for the ones you have excluded from VPN Out.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select VPN  > VPN Out.

Roqos VPN - VPN Out

2. Toggle the VPN Kill Switch to enable this feature.

Roqos VPN - VPN Kill Switch

ExpressVPN Router App Support

· ·

ExpressVPN Router App Setup Guides

Asus RT-AC68U, RT-AC87U, RT-AC56R, RT-AC56S, RT-AC56U

How to set up the ExpressVPN router app for Asus RT-AC68U, RT-AC87U, RT-AC56R, RT-AC56S, and RT-AC56U

ExpressVPN router app with MediaStreamer

How to use MediaStreamer on the ExpressVPN router app

Linksys EA6200

How to configure the ExpressVPN router app for Linksys EA6200

Linksys WRT1200AC

How to configure the ExpressVPN router app for Linksys WRT1200AC

Linksys WRT1900AC(S or V2)

How to configure the ExpressVPN router app for Linksys WRT1900AC(S)

Linksys WRT3200ACM

How to configure the ExpressVPN router app for Linksys WRT3200ACM

Netgear R6300v2, Netgear R6700v3, Netgear Nighthawk R7000, and Netgear Nighthawk R7000P

How to set up the ExpressVPN router app for Netgear R6300v2, Netgear R6700v3, Netgear Nighthawk R7000, and Netgear Nighthawk R7000P

Set up ExpressVPN app on existing Linksys router

Set up the ExpressVPN app for router on your existing Linksys router

ExpressVPN Router App Troubleshooting

Bridge devices to your network via an ExpressVPN router

How to bridge devices to your wireless network via an ExpressVPN router

ExpressVPN router app FAQs

ExpressVPN router app FAQs

ExpressVPN router app setting changes

Additional ExpressVPN router app setting changes

Finding the default passwords for the ExpressVPN router app

Finding the default passwords for the ExpressVPN Router App

Identify which Linksys router you have

How to identify which Linksys router you have

NOT connected to the ExpressVPN router correctly

Seeing the “NOT connected to the ExpressVPN router correctly” page

Reflash Linksys router back to factory image

How to reflash your Linksys router back to factory image

Reset your ExpressVPN router to the original firmware

How to reset your ExpressVPN routers to the original firmware

Set up remote access for your router

How to use port forwarding to remotely access your router

Share a USB drive over your router’s network

How to share a USB drive over your router’s network

Upgrade the ExpressVPN router firmware

How to upgrade the ExpressVPN router firmware

How do I reset and reconfigure my ExpressVPN/Aircove FlashRouter?

· ·

When is a router reset needed?

A reset of the FlashRouter should only be performed in the following instances:

  • You have exhausted all other troubleshooting methods and cannot access your router settings.
  • Password to access the FlashRouter’s settings are not working.
  • Power light on the router is blinking steadily.
  • Router is not accessible after upgrading the firmware

Reset Router

Asus FlashRouters:

  1. While the router is powered off press and hold the WPS button on the back or side of the router. Power up the router while continuing to hold the WPS. Continue to hold for 15 seconds as the router powers on (note this could be up to 45 seconds on some models before lights flash).
  2. You will see the lights on the router flashing steadily and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Aircove, Linksys and Netgear FlashRouters:

  1. While the router is plugged in, find the reset button located on the back of the router. You will need a pin or pencil to hold down the button for 15 seconds.
  2. You will see the lights on the back of the router flash simultaneously and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Click Get Started on the ExpressVPN page that is displayed.

ExpressVPN Get Started

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

ExpressVPN Activation Code

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

ExpressVPN Wiring

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

ExpressVPN Share Crash Report

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

ExpressVPN Set WiFi Name and Password

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

ExpressVPN admin password

8. Your ExpressVPN FlashRouter is now fully setup!

ExpressVPN Connected

Why is the internet LED red on my router?

· ·

Upon flashing the router from stock manufacturer firmware to DD-WRT firmware many buttons and lights on the router may have altered functionality. With DD-WRT firmware on certain devices a red internet/WAN light means a successful connection. While in factory firmware a red light denotes an issue with your internet connection. For anyone with DD-WRT firmware, this is not something you need to worry about as long as the internet functionality is in fact working.

ExpressVPN/Aircove FlashRouter Internet Setup and Activation

· ·

Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.

Obtain your ExpressVPN Activation Code

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard

2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Click Get Started on the ExpressVPN page that is displayed.

ExpressVPN Get Started

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

ExpressVPN Activation Code

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

ExpressVPN Wiring

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

ExpressVPN Share Crash Report

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

ExpressVPN Set WiFi Name and Password

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

ExpressVPN admin password

8. Your ExpressVPN FlashRouter is now fully setup!

ExpressVPN Connected

VPN Director for Asus Merlin

· ·

Once you have OpenVPN connected on your Merlin FlashRouter you can manage your VPN connections by device or by VPN servers or even VPN providers. This is a major advantage of Asus Merlin firmware as it allows up to 5 VPN connections at the same.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

Setup multiple VPN clients

1. Under Advanced Settings select VPN.

2. Click the VPN Client tab.

3. In the Select Client instance dropdown select a new client instance to setup and follow your VPN providers setup guide.

VPN Director select client instance

4. Name the client in the Description field for more clarity for which server or provider is being setup.

VPN Director Description

5. Set the Redirect Internet traffic through tunnel dropdown to VPN Director.

VPN Director Policy

Start or Stop VPN Client

1. Under Advanced Settings select VPN.

2. Click the VPN Director tab.

Merlin VPN Director

3. With multiple VPN clients connected you can start and stop them as needed from this page.

VPN Director

Assign a device to a specific VPN client

1. On the VPN Director page click the + symbol next to Add new rule.

VPN direct add new rule

2. Select the Interface that you want to add the device to.

VPN director select interface

3. Click the Local IP dropdown and a full list of devices connected to the Merlin FlashRouter should appear. Select the device you want to assign to this VPN client.

VPN director select device

4. Click OK and click Apply.