FlashRouters Support Portal

Prioritizing Privacy

Search Results for: each of

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

· ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

  1. Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
  2. Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
  3. Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.
ASUS VPN Fusion page with Add Profile and Internet Connection
VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

  1. In VPN Fusion, open the VPN profile that should provide the default internet route.
  2. Enable Apply to all devices (or Default Connection in firmware that uses that label).
  3. Click Apply all settings, then enable the VPN profile.
  4. Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.
ASUS VPN Fusion Apply to all devices setting and device count
Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

  1. In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
  2. Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
  3. Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
  4. Enable the VPN profile and verify the selected devices’ public IPs.
  5. For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard
LaptopProton VPN — OpenVPN
Streaming deviceSurfshark — OpenVPN
Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

  1. Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
  2. Enable only the profiles you need and confirm each shows connected.
  3. Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
  4. Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

  1. In VPN Fusion, confirm the target profile’s connection status is active.
  2. Check the device’s assignment in the ASUS VPN Fusion interface.
  3. On that same device, visit IPLeak.net or another public-IP checker.
  4. Compare the reported public IP and location with the VPN server assigned to that device.
  5. If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

  1. Turn off VPN Fusion routing for a test device and confirm ISP internet works.
  2. Turn on just one known-working VPN profile for that device.
  3. Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Related AsusWRT Guides

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

DNS Setup for DD-WRT FlashRouters

· ·

The Domain Name System (DNS) is the phonebook of the Internet. DNS resolves website domain names (www.website.com) to IP Addresses so you don’t have to remember the IP Address of every site you visit.

We setup each FlashRouter with Google DNS (8.8.8.8 , 8.8.4.4) and/or OpenDNS (208.67.220.220 , 208.67.222.222) to prevent your ISP DNS from leaking when connected to the FlashRouter.

By using a trusted DNS server like those listed below, or from your trusted VPN service provider, you can prevent ISP’S from compiling your browsing data and selling it to third parties without your consent.

Recommended DNS servers

GoogleDNS

Primary DNS: 8.8.8.8

Secondary DNS: 8.8.4.4

OpenDNS

Primary DNS: 208.67.220.220

Secondary DNS: 208.67.222.222

Cloudfare

Primary DNS: 1.1.1.1

Secondary DNS: 1.0.0.1

Level 3

Primary DNS: 209.244.0.3

Secondary DNS: 209.244.0.4

How to change the DNS on your FlashRouter

We preset each FlashRouter with GoogleDNS and OpenDNS so there is no need to change the DNS servers unless you have reset the FlashRouter or want to use different DNS servers.

Navigate to Setup > Basic Setup

DNS Setup on DD-WRT FlashRouters
  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of valid DNS servers into Statict DNS fields 1, 2, and 3.
  3. Click Apply Settings at the bottom of the page.
  4. Power cycle your FlashRouter off and back on.

DNS Leak Test

We recommend checking to see if your DNS is leaking when using VPN.

My 2.4GHz network is not showing up

· ·

If you ever have an issue with WiFi, you can always wire directly into the FlashRouter to verify and/or update your current WiFi settings.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page if the 2.4GHz is not showing.

Change the wireless channel

Navigate to Wireless > Basic Settings

Change the wireless channel setting for the 2.4GHz band that is not appearing. The most broadly compatible channels are 6 and 11.

CLICK APPLY SETTINGS

Refresh your device's network adapter

In rare instances the wireless adapter for your device may stop picking up WiFi networks and must be reset. This will be different for each device, that is why the best way to refresh your wireless adapter is to simply reboot any device in question and see if the adapter now picks up your WiFi networks.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

How do I set a Static IP for my device in DD-WRT?

· ·

It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.

Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.

Navigate to Services > Services

Set Static IP by Device MAC Address in FlashRouter DD-WRT Settings
  1. Under Static Leases click Add once.
  2. Fill in the newly appeared fields.
    • MAC Address: Enter the device’s MAC address which can be found on the device itself or on the Status > LAN page.
    • Hostame: Enter a name for the device. Make sure that there are no spaces.
    • IP Address: Enter the desired static IP Address of the device. It should be on the same subnet as the FlashRouter (192.168.11.x)
    • Client Lease Time: Leave this field blank.
  3. Click Apply Settings
  4. Repeat the steps above for each individual static IP address you would like to setup. If you click Add before clicking Apply Settings you will lose the configuration.

If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.

Which DD-WRT wireless extender setup should I be using?

· ·

FlashRouters supports four unique DD-WRT wireless extender setups – options similar to an open source Mesh network. Each different wireless extender configuration serves a different purpose. Read below to see which guide fits your configuration requirements!

Wireless Repeater

Why should I choose Wireless Repeater Setup?

  1. If you have a MiFi wireless only internet connection or other type of WiFi internet where there is no access to any ethernet port for a wired internet connection, then you can setup a wireless repeater network to both extend WiFi and add wired connection capabilities.
  2. If you have a large home or office area that requires additional WiFi coverage can use a wireless repeater setup to extend the existing network.
  3. If you want to create a separate VPN WiFi network in your home without placing the FlashRouter in the same room as your primary router you can use wireless repeater to establish a WiFi internet connection and then connect to VPN on your WiFi repeater network.
  4. If you want a wireless Dual Router setup option where you can have local ISP IP address through your main router WiFi network and your VPN IP address through your FlashRouter Wireless Repeater WiFi network, both available for you to connect at all times. Each network is on a unique subnet.

View the FlashRouter Wireless Repeater Setup Guide.

Wireless Repeater Bridge

Use Cases

Wireless Repeater Bridge Setup

  1. Anyone that needs all their devices connected to the same local network.
  2. Anyone with a MiFi internet connection that does not have an ethernet port and has no need for VPN.
  3. Anyone with a large wireless area that requires additional coverage.

Wireless Client Bridge

Use Cases

Wireless Client Bridge Setup

  1. Anyone with a MiFi internet connection that needs wired access.
  2. Anyone that needs additional wired ports instead of using a switch.
  3. Anyone with wired only devices in their home that are too far from your main router.

Wireless Access Point DHCP Forwarder

Use Cases

Wireless Access Point DHCP Forwarder Setup

  1. Anyone that needs their devices connected to the same local network and wants lossless LAN to LAN speeds via wireless and ethernet connection.
  2. Anyone that wants to use their main router to provide DHCP to their router instead of having an additional DHCP server.

Set a Static IP for your connected devices on Roqos

· ·

By assigning specific Static IP addresses to your devices you can better manage your network and make sure they connect with the same Local IP Address each time they connect to your Roqos.

Login to Roqos Core UI web app in a browser on any computer or smart device.

1. Click the navigation menu and select Basic Settings > LAN Settings.

Roqos Basic Settings - LAN settings

2. Click Static IP Assignments.

Roqos LAN settings - Static IP Assignments

3. Click Add Assignment.

Roqos LAN settings - Add Assignment

4. Toggle the device hat you want to set a Static IP for and then enter 192.168.23.x with x being any number between 2 and 254. Click Save.

Now, every time the device connects to the Roqos network it will be assigned the same Static IP address on the Local network.

Service Plan FAQs

· ·

Service Plan FAQs

Is the service plan a one time purchase or does it renew?

All FR service plans automatically renew on a quarterly or annual basis based on the term initially purchased. A reminder e-mail will be sent one week prior to renewal. In your FlashRouter account panel, you can cancel the plan at any time to stop any further renewals.

What is included with a FlashRouter?

  • On-demand Installation of enhanced firmware and our exclusive FlashRouters VPN Privacy App.
  • Custom setup guide.
  • Power cord and an ethernet cable.
  • Individual VPN Account Setup/Pre-configuration (On Request)
  • 1 year open source hardware warranty.
  • 30 day satisfaction guarantee.
  • Initial basic setup assistance via e-mail. For any advanced setups/configurations, live chat or remote assistance, a service plan purchase is required.

Does the service plan include a VPN subscription?

A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.

Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.

Plug and Play VPN Support

Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

Shows what to look for when you want to preconfigure your router.

To have your router VPN pre-configured:

  1. Select Yes from the “Want Your Router Preconfigured?” on the Payment Page during check out.
  2. Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
  3. Enter your your VPN username and password
  4. For ExpressVPN Firmware Routers there will be an additional box for your activation code.

Please note:  If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Do I have to buy a service plan?

Our routers are priced for the custom upgrades performed at our warehouse, testing expenses and keeping the FlashRouter App update to date.

Our service plan has three levels as an optional add-on with your purchase to get continued direct assistance from our team. This is especially useful to customers who are less tech savvy and want direct access to our support team to make sure their network is running exactly how they desire. Here is how these plans differ

Bronze – Basic E-mail Support
Silver – E-mail and Live Chat Support.
Gold – E-mail, Live Chat, and Remote One-on-One Sessions

Each situation and user has different needs and expertise. Our team of US-based support agents are highly trained specialists in VPN and DD-WRT router setup. From firmware updates to networking configuration/troubleshooting,solutions, the purpose of our Service Plans is to help our customers in whatever level they deem necessary.

Does FlashRouters offer phone support?

At this time, we do not provide phone support with our service plans. We have tested phone support for networking troubleshooting in the past but have found that on average caused us to help less customers in a less efficient manner. However, with a purchase of a Gold Service Plan, customers can schedule 1-on-1 remote support sessions via Teamviewer with our engineers and they will provide a hands-on, personal solution, to any problems you may be facing.

Do I need a Service Plan for a firmware upgrade?

Firmware upgrades are free of charge to any FlashRouter customer!

You can visit our support center and select your specific router model to upgrade your firmware based on the recommendations provided.

If you want the help of our Support Team to assist in this upgrade, you can always sign up for our Gold Service Plan and schedule a 1-on-1 Teamviewer session in which our trained engineers will take care of the upgrade for you!

What does the warranty cover?

Our complimentary 1-year hardware warranty does not include tech support outside. If your router suffers hardware failure within 365 days from the date you received the unit, then we will gladly replace your router with another fully tested one. For more information regarding our warranty and return policy, please check out our warranty and return section.

Can I purchase a router without a service plan and subscribe later?

Yes, you may purchase a service plan at any time. However, we can’t guarantee any pricing, or apply any previously offered discounts or specific features at that later date.

ASUS Guest WiFi With or Without VPN: Setup Guide

· ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

  1. Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
  2. For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
  3. Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

  1. Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
  2. Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
  3. Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
  4. Review any options for local-network access, guest isolation, and bands, then click Apply.
  5. Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

  1. In Guest Network Pro / Network, open the existing Guest Network profile.
  2. Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
  3. Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

  1. Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
  2. Set a clear name such as Home-ISP and secure it with a strong password.
  3. In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
  4. Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
  5. Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

  1. Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
  2. Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
  3. Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
  4. If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

Why is my WiFi signal weak?

· ·

If you find that wireless signal strength is weak while connected to the FlashRouter’s network we recommend that you do the following:

  1. Make sure that you have the external antennas fully connected to the FlashRouter.
  2. “Forget” the wireless network on the device and then rejoin with a fresh connection. This will be different for each device but can be effective.
  3. Make sure you are within an appropriate range for the network you are using. Keep in mind that a 2.4GHz network will always have better range than 5GHz networks. Devices further away from the router should use the 2.4GHz network.
  4. Interference from your wireless environment can also cause this issue. On the Wireless > Basic Settings adjust the Wireless Channel for the network you are experiencing the issue for. Channel interference is a likely cause for weak signal strength.

How do I save and load a backup file?

· ·

Why should I save a backup file?

Save a backup file of your correctly configured DD-WRT settings to ensure you can load the working settings in a few simple clicks instead of manually configuring each setting in the event of a reset.

Save a backup file

Navigate to Administration > Backup

  1. Click Backup and save / download the file.
  2. Name the backup file “FlashRouter Backup”

Load a backup file

Navigate to Administration > Backup

  1. Click Choose File and find the backup file you previously saved.
  2. Click Restore.
How to Load a Backup File in DD-WRT FlashRouter

My 5.0GHz network is not showing up

· ·

Verify the device supports 5GHz

5.0GHz networks are not compatible with all devices so first make sure that you device’s wireless adapter supports 5GHz wireless frequencies.

If you are not sure, find out if your device support 5 GHz via Google search or by looking in the wireless hardware details in the device’s network settings. If you see Wireless a/b/g/n support then you have a compatible device. If you are missing the Wireless a then this means there is no 5 GHz support.

Enter the recommended wireless settings

Our team has tested the wireless functionality for each FlashRouter that we offer and shared our recommended wireless settings in our Wifi Setup area. Replicate the settings for your FlashRouter model found on that page.

Lower the wireless channel

Some devices do support 5.0GHz connections but not the higher channels that DD-WRT firmware offers.

Navigate to Wireless > Basic Settings

Lower the wireless channel setting for the 5.0GHz band that is not showing. Based on our tests the most broadly compatible channels are 36, 48 and 161.

CLICK APPLY SETTINGS

Refresh your device's network adapter

The easiest way to accomplish this is by rebooting your device as the settings to reset your adapter may vary on all types of internet connected devices.

Review wireless Status

Navigate to Status > Wireless

The readouts on this page can help tell if there are errors with the FlashRouter’s wireless. View our article on how to read the Wireless Status page for more information.

Change WiFi name and password on Asus

· ·

Set a custom WiFi network name and password for your devices to join the Asus FlashRouter’s network.

View our guide for more instructions on how to access AsusWRT firmware settings.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Asus WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

Parental Controls on Roqos

· ·

The Roqos Core includes a suite of user access settings which can be used as Parental Controls.
You can create individual user profiles and assign specific devices. Using these profiles you can restrict access, block certain content, or even monitor internet usage if you choose to do so.

Create User Profiles

  1. Using the navigation pane on the left of the screen, select USERS.
  2. Select the ADD USER button at the top of the menu.
  3. Create a name to identify the user. You may also add a photo or picture to associate with this user however this is optional.
  4. Select the SAVE button at the bottom of the menu.

Assign Devices

  1. Once you have created a user, you must assign one or more devices to the user.
  2. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  3. You are now in the USER/GROUP PROFILE menu.
  1. Select DEVICES.
  2. Select ADD DEVICE.
  1. The ADD DEVICES menu lists all devices which are currently or previously connected to the Roqos. You cannot assign a device to a user unless it has been connected to the Roqos. 
  2. Use the check box to select one or more devices and then select the SAVE button to assign the device to the user.

A device can only be assigned to one user. Access restrictions you place on a user such as scheduled internet access or content restriction will apply to all devices assigned to that user regardless of who in your home is actually using the device at that time.

Turn Off Internet Access

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list
  2. You are now in the USER/GROUP PROFILE menu
  3. Use the PAUSE button next to the user’s name to halt all internet access to the devices assigned to this user. Conversely, you can restore internet access by pushing the PLAY button here as well.

Schedule Internet Access

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select SCHEDULE PAUSES. You can create multiple schedules for each user to pause their internet access on a daily recurring basis for every day of the week.

Enable Content Filters

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select FILTER. Use existing category and content filters provided by Roqos and customize with your own blocked and allowed site lists.
  4. Select SAVE.

Monitor Internet Usage

  1. Using the navigation pane on the left of the screen, select USERS. Choose a user from the list.
  2. You are now in the USER/GROUP PROFILE menu.
  3. Select USAGE HISTORY. Access usage data for all devices assigned to this user. This includes websites visited and activity times.

Please note that in order to collect device information, you must enable this functionality on your Roqos. It is disabled by default.

  1. Using the navigation pane on the left of the screen, select ADVANCED SETTINGS.
  2. Select MISCELLANEOUS.
  3. Activate the COLLECT USER INTERNET USAGE and COLLECT DEVICE DATA USAGE options.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How do I change the DHCP range of my FlashRouter?

· ·

Whenever a device joins the FlashRouter network via wired or WiFi connection the DHCP server on the router gives out a local IP address to each device so all these devices can interact on your local network.

Increase the DHCP range to allow more users to automatically be assigned an IP address or decrease the DHCP range to limit the users that are automatically assigned an IP address.

Navigate to Setup > Basic Setup

Change DHCP Range in FlashRouter DD-WRT Settings
  1. Under Network Address Server Settings (DHCP) change the Maximum DHCP Users to your preferred value.
  2. You can edit the Start IP Address to 2 and Maximum DHCP Users to 254 for the most available slots.
  3. Click Apply Settings.

Change WiFi name and password on Merlin

· ·

Set a custom WiFi network name and password for your devices to join the Merlin FlashRouter’s network.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Merlin WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

What are some extra steps I can take to secure my network?

· ·

DD-WRT open source firmware removes many firmware vulnerabilities and backdoor access issues that may cause problems in stock firmware. DD-WRT is also updated more frequently than stock firmware, so be sure to always check with the FlashRouter support team to see which DD-WRT build we recommend for the highest level of security for your router at any time.

Aside from avoiding common issues and flaws with stock firmware, DD-WRT give you more control over the firmware settings and allows you to take some extra steps to really lock down your network security. In this article we highlight additional options for WiFi network security and also preventative measures for remote execution attacks.

Wireless MAC Filtering

Navigate to Wireless > MAC Filter

Access FlashRouters DD-WRT Admin Enable MAC Filtering
  1. Set Use Filter to Enable.
  2. Select either Prevent or Permit
    • Choose Prevent to add MAC addresses that you don’t want to join your network.
    • Choose Permit to add MAC addresses that you do want to join your network, automatically blocking all others.
  3. Select Edit MAC Filter List.
  4. Add the MAC Address of the wireless devices you want to prevent or permit. Be sure to use the xx:xx:xx:xx:xx:xx format. Hint: You can see a list of connected devices MAC Address by clicking Wireless Client MAC List.
  5. Click Save.
  6. Replicate the steps above for each wireless band.
  7. Click Apply Settings.

Disable Remote Access

Navigate to Services > Services

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set SNMP to Disable – this setting disables Simple Network Management Protocol, which prevents software from polling your network for information about connected devices.
  2. Set SSHd to Disable – disabling the Secure Shell is a simple way to prevent root access and brute force attacks on your network.
  3. Set Telnet to Disable – Telnet is a less secure version of SSH to manage your local router network via command line.
  4. Click Apply Settings.

Navigate to Administration > Management

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access 2
  1. Set Web GUI Management to Disable.
  2. Set SSH Management to Disable.
  3. Set Telnet Management to Disable.
  4. Set Allow Any Remote IP to Enable – Even though this setting is set to Enable there is no remote access because Web GUI Management is already set to Disable. 
  5. Click Apply Settings.

Router FAQs

· ·

Router FAQs

What is an IP Address?

An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.

An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.

What is DNS?

DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.

The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.

It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!

What is DNSMasq?

DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.

Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.

What is Throughput and How Do I Improve it?

Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.

In order to improve throughput,  you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.

Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.

What is PPPoE?

PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.

With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.

PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.

What is the Difference Between VPN Encryption and Wireless Network Security?

VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.

Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.

Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.

Are FlashRouters Affected By the Shellshock Bug?

No.

According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.

Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

Warranty and Returns FAQs

· ·

Warranty and Returns FAQs

At FlashRouters, we are confident that every router sold will function as advertised. We open, inspect, upgrade, configure, and then test all FlashRouters before they get shipped out. That is why we guarantee you will receive a working unit and offer our own 1-Year Hardware Warranty included with all New and Refurbished routers purchased from the FlashRouters website.

If you would like to extend the warranty coverage period to 2 years, the option is available during the FlashRouters checkout process.

Since we are so certain you will be happy with your upgraded and super secure network, all routers purchased from FlashRouters.com also come with a 30-day satisfaction guarantee.

Please read the warranty and return section in detail before placing an order or requesting an RMA. Our goal is to make the return process as smooth and transparent as possible for all customers. If the router you purchased does not work out for your needs we still want you to be satisfied with your purchasing experience.

Hardware Warranty and Return Policy

Requesting an RMA

Automated Return Merchant Authorization (RMA) requests are available from within your customer account panel. If you are eligible for a return then your RMA request will be approved. If your RMA request is not valid then it will be denied and you must e-mail FlashRouters Support for any additional information or actions. RMAs are valid for 7 days from the day they are issued. 

The following are the available options when submitting an RMA request. Continue reading for more information on all available RMA options and conditions. 

  1. Hardware Guarantee – available for 7 days after receiving your FlashRouter.
  2. Satisfaction Guarantee – available for 30 days after receiving your FlashRouter.
  3. Hardware Warranty – available for 1 year, or 2 years if upgraded when purchasing a FlashRouter.
  4. Hardware Repair – Anyone with a valid FlashRouters Support subscription is eligible for free Hardware Repair. 

Please note we can only provide prepaid labels for approved Hardware Warranty returns within the USA. Prepaid labels are not available for international customers. All return shipping for 30 Day Satisfaction refunds is paid for by the customer.

Hardware Guarantee

In the rare case you receive a faulty router, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel and we will work to rectify the situation immediately. If it is determined that the power supply you received was faulty, and not the router itself, our team will immediately ship you out a tested power supply at no additional cost.

Rest assured that we individually test and inspect every FlashRouter with great detail before shipment. BUT… if router gremlins (yes they do exist) snuck into your router during the shipping process and it no longer powers on, our team will supply you with a prepaid shipping label to return the unit back to our offices. As soon as we receive verified tracking on your return shipment we will ship out another thoroughly tested unit to you at no additional cost.

You must contact us within 7 days from when you received your FlashRouter to be eligible for a Hardware Guarantee prepaid shipping label from FlashRouters.

30-Day Satisfaction Guarantee

If you are not satisfied with the performance of your router after trying it out for up to 30 days, you can open a ticket to contact FlashRouter Support for an RMA or request an RMA in your customer account panel. Once the RMA is approved, you will then have the option to ship the unit back to FlashRouters.

Once we receive the return, our team inspects and refunds accordingly based on the original purchase price of your FlashRouter. Please note there is a $25 restocking fee and refunds do not include any initial shipping costs associated with your order. All restocking fees are returned as Store Credit. This means if you make another purchase at FlashRouters then your fee is refunded.

The item must also be fully functional and have no signs of cosmetic damage for you to receive the maximum refund. If you do not include the original boxing, or any router accessories you may also be charged an additional fee as indicated.

Ethernet Cable: $5

Power Source: $10 

Antennas: $5 per antenna

Router Stand: $10

Box: $10

Cosmetic Damage: Up to $25

What is covered under the 30-Day Satisfaction Guarantee?

If the VPN speeds or WiFi network speeds are not what you had hoped, if the setup is too complicated, or you just decided on another solution; these are all covered under the 30-Day Satisfaction Guarantee. 

We will not accept any returns of working routers after 30 days from the date you received your router. After 30 days, router returns/replacements will only be processed under the Hardware Warranty. 

Can I get the restocking fee waived?

If you place a new order for a different FlashRouter unit before returning your initial purchase, then we will waive the restocking fee. Otherwise the $25 restocking fee will be applied to your customer account as a store credit. You can then use this $25 store credit on any future FlashRouter purchase.

Rewards Points refunds

If you return your FlashRouter under the 30 day satisfaction guarantee then you will lose any reward points received for your initial purchase.

Hardware Warranty

A 1-year Hardware Warranty is included with the purchase of all New and Refurbished FlashRouters. If your router suffers hardware failure within 365 days from the date you received the unit then we will replace your router with another fully tested unit. You must pay for return shipping of the faulty unit back to our offices located in New Jersey, USA and our team will ship out your replacement at no additional cost.

You must contact the FlashRouter support team for an RMA number or request an RMA from your customer account panel before returning a router for warranty replacement. If you do not receive approval for a return then you will not be eligible for a replacement unit.

There are 2 options for receiving a Hardware Warranty replacement unit:

Option #1: Process another order for immediate shipping and as soon as we receive the returned device back in our offices we will issue you a refund for the initial purchase.

Option #2: Ship your faulty router back to our office, and as soon as we receive the unit our returns department will have a replacement unit shipped out to you at no extra cost.

How long do I have before my RMA expires?

RMA’s are good for 7 days from the date they are issued.

What if I upgraded to a 2 year Hardware Warranty at checkout?

All refund, replacement, RMA details, and options covered by the 1-year Warranty apply in the exact same manner for 2 year warranties over each respective warranty coverage period.

If for any reason the router you purchased is no longer in stock or discontinued then you have the option to replace your router with one of equal value or receive a refund. Hardware warranties are only eligible for refunds if we are unable to provide a replacement unit for you.

What should I do if my router is out of warranty coverage?

If your FlashRouter is out of the warranty coverage period, we are first and foremost apologetic for the passing of your router. Be sure to contact our sales team though and you can receive a special coupon as a return customer for a shiny new wireless networking centerpiece.

What is not covered with a FlashRouter Warranty?

Items that have been clearly damaged either by the customer or during the return process are not eligible for a full refund. This includes routers that have visible dents, scratches, or moving parts inside the router.

Can I upgrade to a 2 year warranty after my FlashRouter purchase?

2 year warranty upgrades are only available at the time of your FlashRouter purchase. Upgrades are not available once a FlashRouter order has been shipped. 

Can I get a Warranty on my router if I purchased a “Flash My Router” plan from FlashRouters?

Routers that have been “flashed” and configured by our support specialists for anyone who has purchased a Flash My Router Plan are not eligible for warranty coverage from FlashRouters. Only routers purchased through the FlashRouters.com website are eligible for warranty replacements or refunds.

Hardware Repair

FlashRouters is proud to offer a free repair and upgrade service for anyone with an active Silver or Gold Service Plan subscription. Any and all shipment costs associated with FlashRouter repairs or upgrade requests are the burden of the customer and will not be paid for by FlashRouters. However, the repair and upgrade service itself is FREE.

If you do choose to ship your router back to our office for repair, then you should include a prepaid shipping label in your package back to your home or office, so our team can send the router back to you whether we are able to repair the unit or not. Router accessories like power supplies, ethernet cable, or antennas do not need to be included when shipping back a unit for repair.

If our team is not able to resurrect your router from a power failure, faulty firmware upgrade, or any other reason then we can return the faulty unit back to you using the return shipping label included with your return package. Alternatively, we can destroy the unit and refund the return shipping costs if that is your preference.

Open Box Routers

What is an Open Box Router?

Open Box routers are fully functional units that have cosmetic flaws and are sold at heavy discounts. These units come with the same Support Plan options as New or RM units, which means you get the same support service with extremely discounted hardware.

Open Box routers are covered under the FlashRouter 30-Day Satisfaction Guarantee BUT come with no Hardware Warranty. We take every measure possible to ensure complete functionality and our team fully load tests these devices before shipment, but you should be very aware that you buy these discounted “open box” devices at your own risk without any Hardware Warranty.

What is the Open Box Router return policy?

Open Box Routers can only be returned within 30 days from the date you received your router. Returns will not be accepted on open box routers after 30-Day Satisfaction Guarantee window has expired. Please note that Open Box Router return shipping costs are not covered by FlashRouters and initial shipping costs are not included in any refunds. 

Accessories Warranty

All Accessories come with manufacturer warranties as listed on the respective product pages. 

FlashRouters will accept returns for refund or replacement of accessories only within 30 days from the date you received your order. After 30 days you must contact the manufacturer for any warranty replacements.

Accessories must be returned with all original packaging and with no cosmetic damage to receive a full refund. A missing box or damage to an item will result in a restocking fee per our discretion.

"Flash My Router" Refund Policy

The “Flash My Router” product offered by FlashRouters is a virtual service provided by the FlashRouters support team. This product includes a remote support session where our support team will flash your router and then complete your internet, WiFi, and VPN setup, and in certain cases support additional router features. 

Once your remote support session is completed there are absolutely no refunds on “Flash My Router” purchases. In the case we are unable to successfully flash your router we will offer a full refund for your “Flash My Router” purchase. “Flash My Router” purchases are fully refundable if you decide you would no longer like to use the service after your purchase is completed.

Service Plan Subscription Refund Policy

All FlashRouter router purchases include a recurring FlashRouters Service Plan subscription. There are 3 levels of support to choose from as either a quarterly or yearly recurring billing plan.

30-Day Satisfaction Guarantee

If you choose to return your FlashRouter under the 30-Day Satisfaction Guarantee, then you are eligible for a full refund on any Service Plan purchased with your FlashRouter.

Cancellation Policy

You may cancel your recurring billing at any time and you will not be charged again. Please note you will not be refunded for unused time from the initial billing/service period of your support plan subscription.

If you choose to cancel your 3 month FlashRouter support plan then you will retain support until the end of the 3 month period. If you choose to cancel your 1 year FlashRouter support plan then you will retain support until the end of the 1 year period. You will not lose time from your existing service plan if you cancel when a plan is active.

There is a 7-day grace period after Service Plan renewals have been charged, where you may request an immediate cancellation and full refund.

How do I change my FlashRouter Support subscription level?

How do I Upgrade my Service Plan?

You can upgrade a Service Plan at any time during a billing cycle. You must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Service Plan, which will then be immediately applied to your new upgraded Service Plan purchase. Your recurring billing will then continue at the new Service Plan level. Your 3 months or 1 year of upgrade service will start again from the date of the upgrade purchase. 

How do I switch from a Quarterly to a Yearly Service Plan?

If you would like to switch to a Yearly plan from a Quarterly plan of the same service level, then you must e-mail or live chat our support team and request an upgrade. Our team will then issue you store credit for any unused time on your existing Quarterly Service Plan, which will then be immediately applied to your new Yearly Service Plan purchase. Your recurring billing will then continue at the Yearly Service Plan level. Your 1 year of service will start again from the date of the upgrade purchase. 

How do I Downgrade my Service Plan?

If you are subscribed a Service Plan, but would like to switch to a lower level Service Plan then you can request that our support team cancel your recurring billing at any time. As soon your existing Service Plan is expired you can make a new purchase for the new Service Plan of your choice.

How do I switch from a Yearly to a Quarterly Service Plan?

If you would like to change the billing cycle from yearly to quarterly, you may cancel your existing subscription plan and then once your year of service has expired, you may purchase a Quarterly Service Plan instead.

If you just purchased a FlashRouter, there is a 7-day grace period from when you receive your unit if you would like an immediate change from Yearly to a Quarterly Service Plan.

How do I cancel my subscription?

You may request a Service Plan subscription cancellation by e-mailing support@flashrouters.com or from within your customer account panel at any time. You will be notified of a successful cancellation and your payment method will not be billed again.

Please note there are no refunds when cancelling your subscription. Cancellation means you will not be billed again for your Service Plan, there are no partial refunds for cancelled Service Plans.

ExpressVPN Setup for Privacy Hero

· ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

  1. Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
  2. In the left navigation, select Set Up Devices.
  3. Under Applications, expand Advanced setup and choose Manual Configuration.
  4. Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

  1. On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
  2. Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section.
  3. Click Change beside the VPN provider and choose Custom.
  4. Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
  5. Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.
Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

  1. If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
  2. Click Save to apply the configuration and establish the VPN connection.
  3. Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.
Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

  1. Connect the testing device to the Privacy Hero WiFi or LAN network.
  2. Disconnect the ExpressVPN app or any other VPN application running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit ExpressVPN What Is My IP.
  5. Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

  1. Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
  2. Check that you selected Custom in Privacy Hero, rather than another VPN provider.
  3. Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
  4. Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
  5. Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
  6. Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

What do the lights on my Roqos Core mean?

· ·

  1. White (looks blueish white on Teal colored Roqos Cores): System startup
  2. Solid Red: System is up, but there is no internet connection. Roqos Core cannot detect a network link either.
  3. Flashing Red: System is up and there is an ethernet cable connected to Internet port, however Roqos Core is unable to reach the internet. Usually happens with bad ethernet cable, or cable modem/ISP modem not giving IP address to Roqos Core due to ISP provisioning issues, or some other type of network setting blocking Roqos Core’s access to the internet. First thing to try in this scenario is to reboot the ISP router/modem upstream of Roqos Core.
  4. Flashing Blue: Roqos Core is up and connected to the internet, but it is not yet activated. Brand new Roqos Cores, or Roqos Cores that are factory reset will show this behavior when they are ready to be activated again.
  5. Blue (deep blue color, different from #1): Roqos Core is up and activated, everything is normal.