• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

FlashRouters Support Portal

Prioritizing Privacy

  • SETUP GUIDES
    • Privacy Hero Router Setup Guide
    • ASUS-WRT Router Setup Guide
    • AsusWRT-Merlin Router Setup Guide
    • DD-WRT Router Setup Guide
    • ExpressVPN Router Setup Guide
    • GL.iNet Router Setup Guide
    • Roqos Core Router Setup Guide
  • TROUBLESHOOTING
    • Router Access
    • WiFi Connectivity
    • Internet Connection Issues
    • General VPN Issues
    • DD-WRT Firmware
    • TeamViewer Remote Support
  • FAQs
    • Router FAQs
    • VPN FAQs
    • Warranty and Returns FAQs
    • Sales FAQs
    • Shipping FAQs
    • Service Plan FAQs
  • Show Search
Hide Search

Search Results for: important crypt

Privacy Hero NordVPN Not Connecting or Showing Timeout Errors

Dave · Sep 22, 2026 ·

If NordVPN will not connect on Privacy Hero, shows a timeout error, remains stuck on Connecting, or displays Failed, the Privacy Hero router itself may still be working normally.

NordVPN connections can occasionally stop working when servers are placed into maintenance, removed or cycled out of service, account credentials change, or a previously saved NordVPN access token or manual service credential is no longer valid.

Start by confirming that Privacy Hero has normal internet access, then troubleshoot the NordVPN connection.


Jump to a Section

  • Confirm Privacy Hero Has Internet
  • Reconnect NordVPN
  • Try Another NordVPN Server
  • Update Your NordLynx Token
  • Update OpenVPN Credentials
  • Recent NordVPN Account Changes
  • Verify the VPN Connection

First: Confirm Privacy Hero Has Internet

Before changing your NordVPN settings, confirm that Privacy Hero itself has normal internet access.

  1. Open app.privacyhero.com.
  2. Open the VPN section.
  3. If the VPN Kill Switch is enabled, temporarily turn it Off.
  4. Turn the failed NordVPN connection off.
  5. Connect a device to the Privacy Hero network.
  6. Test normal internet access.

If internet access works normally with NordVPN and the Kill Switch disabled, the underlying Privacy Hero internet connection is working. Continue troubleshooting the NordVPN connection.

If your internet stopped working because NordVPN failed while the VPN Kill Switch was enabled, follow our Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Reconnect NordVPN

A temporary NordVPN server or connection issue may resolve without changing your account information.

  1. Open the VPN section at app.privacyhero.com.
  2. Turn the NordVPN connection off.
  3. Wait a few seconds.
  4. Turn NordVPN back on.
  5. Allow the connection time to establish.
  6. Check whether the VPN status changes to Connected.

If NordVPN still shows Failed, Connecting, or a timeout error, continue with the steps below.

Try Another NordVPN Server

NordVPN regularly maintains, replaces, and cycles servers in its network. A specific NordVPN server that worked previously may eventually be taken offline, removed, or temporarily unavailable.

If your Privacy Hero NordVPN connection is configured to use a specific server and suddenly stops working, try another server or return to the normal country selection.

  1. Open app.privacyhero.com.
  2. Open the VPN section.
  3. Select your NordVPN connection.
  4. If you previously entered a specific NordVPN server under Advanced Options, remove or replace that server.
  5. Select the country or location you want to use.
  6. Save the settings.
  7. Reconnect NordVPN.
  8. Check whether the status changes to Connected.

If you specifically need to use an individual NordVPN server, make sure that server is still active before continuing to use it.

Important: A previously working specific server should not be assumed to remain available indefinitely. NordVPN may change its server network over time.

Update Your NordVPN Token for NordLynx

Privacy Hero uses a NordVPN access token to authenticate NordLynx connections.

If the saved token is expired, revoked, replaced, or otherwise no longer valid, NordLynx may show Failed, Connecting, or a timeout error.

Generating a new token is a good troubleshooting step if your NordVPN account information has changed or the existing token is no longer working.

  1. Sign in to your NordVPN account.
  2. Open the NordVPN Access Tokens page.
  3. Generate a new access token.
  4. Select Doesn’t expire if NordVPN provides that option.
  5. Copy the new token.
  6. Open app.privacyhero.com.
  7. Open the NordVPN settings.
  8. Confirm that NordLynx is the selected protocol.
  9. Replace the existing token with the newly generated token.
  10. Save the settings.
  11. Reconnect NordVPN.

Important: NordVPN access tokens are sensitive account credentials. Do not post or share your token publicly.

For complete setup instructions, see Privacy Hero NordVPN / NordLynx Setup.

Update NordVPN Manual Service Credentials for OpenVPN

If you are using OpenVPN instead of NordLynx, Privacy Hero uses NordVPN’s Manual Service Credentials.

These are different from the email address and password you normally use to sign in to the NordVPN website or application.

If the saved credentials are no longer valid, update them:

  1. Sign in to your NordVPN account.
  2. Open NordVPN Manual Service Credentials.
  3. Copy the current service username and password.
  4. Open app.privacyhero.com.
  5. Open your NordVPN settings.
  6. Confirm that OpenVPN is the selected protocol.
  7. Replace the existing manual service credentials with the current credentials from NordVPN.
  8. Save the settings.
  9. Reconnect NordVPN.

Do not enter your regular NordVPN website email address and password in place of the manual service credentials.

Did You Recently Change Your NordVPN Account Information?

If NordVPN stopped connecting after an account change, update the authentication information stored in Privacy Hero.

This is especially important after changes such as:

  • Changing your NordVPN account password.
  • Changing or updating NordVPN account security settings.
  • Generating or replacing NordVPN access tokens.
  • Changes to NordVPN manual service credentials.
  • Renewing, changing, or restoring your NordVPN subscription.

The credentials used by Privacy Hero depend on the VPN protocol:

  • NordLynx: Uses a NordVPN access token.
  • OpenVPN: Uses NordVPN manual service credentials.

Your regular NordVPN website login should not be entered as the router’s OpenVPN credentials.

If you are unsure whether the existing authentication information is still valid, retrieve current credentials directly from your NordVPN account and update Privacy Hero.

Confirm Your NordVPN Subscription Is Active

Privacy Hero cannot establish a NordVPN connection if the NordVPN account being used no longer has active VPN service.

Sign in to your NordVPN account and confirm that your subscription is active before continuing with server, token, or credential troubleshooting.

Try Another VPN Protocol

If your NordVPN account, credentials, and server selection are correct but the connection still fails, try another NordVPN protocol available in Privacy Hero.

For example, if NordLynx is not connecting, testing OpenVPN can help determine whether the issue is specific to the protocol or authentication method.

Remember that changing protocols also changes the required NordVPN authentication:

  • NordLynx requires a NordVPN access token.
  • OpenVPN requires NordVPN manual service credentials.

Important: Do Not Run Two VPNs at Once

Do not leave the NordVPN application connected directly on your phone or computer while testing the Privacy Hero VPN.

Running a VPN application on the device while also routing that device through the Privacy Hero VPN creates a double-VPN connection and can cause routing, connectivity, or IP-location problems.

Disconnect the device-level NordVPN app before testing the router VPN.

Verify the NordVPN Connection

Once Privacy Hero displays NordVPN as Connected:

  1. Connect your device to the Privacy Hero WiFi.
  2. Make sure the NordVPN app on the device is disconnected.
  3. Open a fresh private/incognito browser window.
  4. Visit NordVPN What Is My IP.
  5. Confirm that the public IP address and location correspond to your selected NordVPN location.
  6. Test several websites or applications.

If you use the Privacy Hero VPN Kill Switch, enable it only after confirming that NordVPN is connected and working.

NordVPN Is Connected but One Device Shows the Wrong IP

If Privacy Hero shows NordVPN as Connected and other devices display the correct VPN IP, the NordVPN connection itself is likely working.

Check the affected device’s Privacy Hero VPN assignment and review any VPN, privacy, DNS, browser, antivirus, firewall, or security settings running directly on that device.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting
  • Privacy Hero VPN Kill Switch Setup
  • Privacy Hero NordVPN / NordLynx Setup
  • Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN

IPVanish Manual OpenVPN Setup

TeamFlashRouters · Apr 5, 2019 ·

Preparing for Manual IPVanish Setup

Verify your IPVanish login information

If you are not already an IPVanish user Sign Up Now.

Log in to your account on the IPVanish website.

IPVanish Server Addresses

View a full list of IPVanish servers.

America

Ashburn:
iad-a01.ipvanish.com
through
iad-a78.ipvanish.com

Atlanta:
atl-a01.ipvanish.com
through
atl-a88.ipvanish.com

Boston:
bos-c01.ipvanish.com
through
bos-c27.ipvanish.com

Chicago:
chi-a01.ipvanish.com
through
chi-a58.ivpanish.com

Cleveland:
cle-c01.ipvanish.com
through
cle-c20.ipvanish.com

Dallas:
dal-a01.ipvanish.com
through
dal-a79.ipvanish.com

Denver:
den-c01.ipvanish.com
through
den-c13.ipvanish.com

Jackson:
jan-c01.ipvanish.com
through
jan-c15.ipvanish.com

Las Vegas:
las-c11.ipvanish.com
through
las-c20.ipvanish.com

Los Angeles:
lax-a01.ipvanish.com
through
lax-a60.ipvanish.com

Miami:
mia-a01.ipvanish.com
through
mia-a34.ipvanish.com

Milwaukee:
mke-c01.ipvanish.com
through
mke-c19.ipvanish.com

New York:
nyc-a01.ipvanish.com
through
nyc-a51.ipvanish.com

Phoenix:
phx-a01.ipvanish.com
through
phx-a24.ipvanish.com

Salt Lake City:
slc-c01.ipvanish.com
through
slc-c12.ipvanish.com

San Jose:
sjc-a01.ipvanish.com
through
sjc-a27.ipvanish.com

Seattle:
sea-a01-ipvanish.com
through
sea-a41.ipvanish.com

St. Louis:
stl-c01.ipvanish.com
through
stl-c18.ipvanish.com

United Kingdom

London:
lon-a01.ipvanish.com
through
lon-a69.ipvanish.com

lon-c01.ipvanish.com
through
lon-c58.ipvanish.com

Manchester:
man-c01.ipvanish.com
through
man-c09.ipvanish.com

DD-WRT Router Setup for IPVanish

Navigate to Services > VPN

Enter IPVanish settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change IPVanish connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you successfully logged in to your IPVanish account with.

Password

Enter the Password you successfully logged in to your IPVanish account with.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

persist-key
persist-tun
persist-remote-ip
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful IPVanish connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit IPVanish’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.

Back up your settings

Navigate to Administration > Backup.

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the IPVanish server

  1. Copy the new IPVanish server address from the above server list.
  2. Paste the server into the Server IP/Name field.
  3. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

CyberGhost Manual OpenVPN Setup

TeamFlashRouters · Apr 9, 2019 ·

Preparing for Manual CyberGhost Setup

Obtain your CyberGhost OpenVPN Information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

CyberGhost Website Login

2. Select My Devices.

3. Select Other and then Configure New Device.

CyberGhost Website OpenVPN Configuration Files Generator Cyberghost - Website Screen CyberGhost Website OpenVPN Configuration Files Generator

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 3

5. Press View configuration.

CyberGhost Website OpenVPN Configuration Files Generator 2

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the ca.crt, client.crt, and client.key files. All CyberGhost servers have different keys and certificates.

DD-WRT Router Setup for CyberGhost

Navigate to Services > VPN

Enter CyberGhost settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your CyberGhost account.

Password

Enter the Password you obtained in your CyberGhost account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

tun-mtu 1500
fragment 1300
mssfix 1300

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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==
—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents of the client.crt file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents of the client.key file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful CyberGhost connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit CyberGhost’s website to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to CyberGhost.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the CyberGhost server

  1. Follow the instructions for obtaining the OpenVPN information from above.
  2. Enter the new Server Address in the Server IP/Name field.
  3. Enter the new Username and Password.
  4. Enter the new ca.crt, client.crt, and client.key
  5. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports NordVPN using both NordLynx and OpenVPN.

NordLynx is recommended for most users. OpenVPN is also available and may be required for NordVPN Dedicated IP connections. Some Dedicated IP configurations require a private OpenVPN file imported as a Custom VPN.

Privacy Hero is cloud-managed, so you can complete the setup from any device with an internet connection. You do not need to be connected to Privacy Hero WiFi to change these settings.

Choose Your NordVPN Setup

Jump straight to the setup or troubleshooting instructions you need.

NordLynx Setup →Recommended · Access token
OpenVPN Setup →Manual service credentials
Country & Server →Select a location or server hostname
Dedicated IP →Advanced Options or Custom .ovpn
Verify Connection →Confirm your VPN IP and location
Troubleshooting →Connection errors and next steps

NordVPN NordLynx Setup

NordLynx uses a NordVPN access token, not your regular NordVPN website email and password.

Open Privacy Hero and Select NordLynx

  1. From a computer, smartphone, or tablet, open app.privacyhero.com.
  2. Sign in with your Privacy Hero account email and password.
  3. Open the VPN section.
  4. Click Change and select NordVPN.
  5. Choose NordLynx.
NordVPN Protocol Privacy Hero

Generate Your NordVPN Access Token

  1. In another browser tab, open NordVPN Access Tokens and sign in to your NordVPN account.
  2. Complete any account or email verification requested by NordVPN.
  3. Select Generate new token; choose Doesn’t expire if available, then copy the token.

Important: Treat your NordVPN token as a password. Do not share it publicly.

Connect Privacy Hero to NordVPN

  1. Return to Privacy Hero, paste the token into the NordLynx token field, and click Save. The default country selection automatically chooses an available NordVPN server for that location.
  2. Wait for the VPN status to show Connected.
NordVPN Protocols Privacy Hero

NordVPN OpenVPN Setup

Use OpenVPN if you prefer the OpenVPN protocol or if your configuration requires it. OpenVPN requires NordVPN Manual Service Credentials, which are different from your website login email and password.

Select OpenVPN in Privacy Hero

  1. Open app.privacyhero.com and sign in.
  2. Open the VPN section.
  3. Click Change and select NordVPN.
  4. Select OpenVPN.
NordVPN Protocol Privacy Hero

Get Your Manual Service Credentials

  1. Open NordVPN Manual Service Credentials and sign in.
  2. Complete NordVPN’s verification if prompted, then copy the current Service Username and Service Password.

Important: Do not enter your normal NordVPN website email and password into Privacy Hero’s OpenVPN fields.

Save Your OpenVPN Connection

  1. Return to Privacy Hero and enter the manual service username and password in the OpenVPN credential fields. Click Save.
  2. Confirm Privacy Hero shows the connection as Connected.

Choose a NordVPN Country or Specific Server

Privacy Hero can select a NordVPN server automatically, or you can choose a country or specify a server hostname.

Choose a Country

  1. Open your NordVPN connection in Privacy Hero.
  2. Open the Country dropdown.
  3. Search for and select your preferred country.
  4. Click Save. Privacy Hero will use an available NordVPN server for the selected country.

Use a Specific NordVPN Server

  1. Open your NordVPN connection in Privacy Hero.
  2. Open Advanced Options.
  3. Enter the NordVPN server hostname, for example us12286.nordvpn.com.
  4. Click Save.

Use NordVPN’s server recommendation tool if you need a hostname. NordVPN servers can be retired or taken offline for maintenance; if your specific server stops working, choose another server or return to country selection.


NordVPN Dedicated IP Setup

NordVPN Dedicated IP can require either the regular NordVPN OpenVPN connection or a private .ovpn file imported as a Custom VPN.

Method 1: OpenVPN Advanced Options

Try this first if your Dedicated IP works with the standard NordVPN OpenVPN setup.

  1. Set up NordVPN → OpenVPN using your NordVPN Manual Service Credentials as described above.
  2. Open Advanced Options.
  3. Enter the Dedicated IP server hostname assigned to your account.
  4. Click Save and check whether the VPN connects.
  5. Verify that your public IP matches your assigned Dedicated IP.
Nord US Dedicated OpenVPN

If connected and the public IP matches, no additional configuration is needed.

Method 2: Custom VPN With a Private OpenVPN File

Some Dedicated IP servers require a private OpenVPN configuration file. If Method 1 does not connect, follow NordVPN’s Manual Dedicated IP Server Setup instructions.

Download Your Dedicated IP Configuration

  1. Sign in to the NordVPN account associated with the Dedicated IP.
  2. Locate your assigned Dedicated IP server using NordVPN’s manual setup instructions.
  3. Download its OpenVPN UDP configuration file.
  4. Save the .ovpn file to your computer or device.

Important: Use the private configuration file for your actual Dedicated IP, not a public NordVPN server file.

Upload the File as a Custom VPN

  1. Open app.privacyhero.com and select VPN → Change.
  2. Select Custom from the VPN provider dropdown, not NordVPN.
  3. Upload your Dedicated IP UDP .ovpn file.
  4. Enter your NordVPN Manual Service Username and Password.
  5. Save the configuration, enable the VPN, and wait for Connected.
  6. Verify the public IP matches your NordVPN Dedicated IP.

These are NordVPN’s separate manual service credentials, not your regular website login.


Verify Your NordVPN Connection

  1. Connect your testing device to the Privacy Hero WiFi.
  2. Disconnect any NordVPN or other VPN app running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit NordVPN What Is My IP.
  5. Confirm the public IP and location match your selected NordVPN server (or assigned Dedicated IP).

Running a VPN application directly on the device at the same time as the router VPN can produce double-VPN conflicts and unexpected IP or location results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation region instead of your VPN server region. See Privacy Hero Streaming Relocation.


NordVPN Not Connecting?

If the VPN displays Failed, Connecting, or a timeout error, check for:

  • A server undergoing maintenance or no longer available.
  • An expired, revoked, or outdated NordLynx access token.
  • Incorrect or changed OpenVPN Manual Service Credentials.
  • Recent account changes or an inactive NordVPN subscription.
  • A protocol-specific issue.
  • A Dedicated IP that requires a private .ovpn file and Custom provider selection.

Follow Privacy Hero NordVPN Not Connecting or Showing Timeout Errors for troubleshooting.

No Internet After NordVPN Disconnects?

If internet access stops when the VPN disconnects, the VPN Kill Switch may be blocking normal traffic as intended. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, Private Relay, Private DNS, antivirus, and browser settings. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • NordVPN Not Connecting / Timeout
  • Privacy Hero VPN Kill Switch Setup
  • VPN Kill Switch: No Internet or WiFi
  • Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN

ExpressVPN Setup for Privacy Hero

TeamFlashRouters · Aug 14, 2025 ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Choose Your ExpressVPN Setup Step

Jump directly to the instructions you need.

Manual Credentials →Find your ExpressVPN OpenVPN username and passwordDownload .ovpn File →Choose a server location and download its UDP fileCustom VPN Setup →Upload the file and enter credentials in Privacy HeroUDP Configuration →Check the OpenVPN protocol and save your connectionVerify Connection →Confirm your VPN IP address and server locationTroubleshooting →Connection errors, timeouts, and no internet

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

  1. Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
  2. In the left navigation, select Set Up Devices.
  3. Under Applications, expand Advanced setup and choose Manual Configuration.
  4. Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.


Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

  1. On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
  2. Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.


Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section.
  3. Click Change beside the VPN provider and choose Custom.
  4. Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
  5. Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.
Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

  1. If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
  2. Click Save to apply the configuration and establish the VPN connection.
  3. Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.
Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

  1. Connect the testing device to the Privacy Hero WiFi or LAN network.
  2. Disconnect the ExpressVPN app or any other VPN application running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit ExpressVPN What Is My IP.
  5. Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.


ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

  1. Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
  2. Check that you selected Custom in Privacy Hero, rather than another VPN provider.
  3. Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
  4. Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
  5. Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
  6. Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

Surfshark Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Choose Your Surfshark Setup

Select the connection method or instructions you need.

WireGuard Setup →Recommended · Key pair and server fileOpenVPN Setup →Manual credentials and UDP .ovpn fileUpload WireGuard →Import your configuration into Privacy HeroUpload OpenVPN →Add the file and service credentialsVerify Connection →Check your VPN IP and locationTroubleshooting →Fix connection failures and no internet

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.


Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • VPN Kill Switch: No Internet or WiFi
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

How do I boost my Wireless Transmission power?

Dave · Apr 29, 2019 ·

Boost the wireless transmission power if you need to increase the wireless range of the FlashRouter.

Important Information

We recommend reading the entry in the DD-WRT Wiki to familiarize yourself with what TX Power values represent.

Broadcom routers

  • Netgear R8500
  • Netgear R7000
  • Netgear R6400 V2
  • Netgear R6300 V2
  • Asus RT-AC5300
  • Asus RT-AC66U
  • Asus RT-AC56U

Navigate to Wireless > WL# or ath# Advanced

  1. Set the TX Power to the desired value.
  2. Click Apply Settings.
Boost TX Power in DD-WRT Advanced Wireless Settings page to Increase Wireless Transmission

Atheros routers

  • Netgear R9000
  • Netgear R7800
  • Linksys WRT3200ACM
  • LinksysWRT32X
  • Linksys WRT1900AC/v2/ACS
  • LinksysWRT1200AC

Navigate to Wireless > Basic Settings

  1. Check Advanced Settings under the wireless interface you would like to boost.
  2. Set the TX Power to the desired value.
  3. Click Apply Settings.
Boost TX Power in DD-WRT Advanced Wireless Settings page to Increase Wireless Transmission

We advise to proceed with caution when setting the TX Power. This has been known to negatively effect the hardware if set too high.

Privacy Hero VPN Kill Switch Troubleshooting: No Internet or WiFi

Dave · Oct 8, 2026 ·

If your Privacy Hero router suddenly loses internet access, devices report that WiFi has no internet, or devices will not stay connected after a VPN failure, the VPN Kill Switch may be blocking normal internet traffic.

The VPN Kill Switch is designed to prevent traffic from passing through Privacy Hero without VPN protection. If the VPN disconnects or fails while the Kill Switch is enabled, normal internet access is intentionally blocked.

Important: You can still access app.privacyhero.com to manage Privacy Hero, turn off the Kill Switch, or repair the VPN connection.

Privacy Hero is cloud-managed, so you do not need to be connected to the Privacy Hero WiFi to change these settings. You can also access the dashboard using cellular data, your main router’s WiFi, or another internet connection as long as Privacy Hero remains connected to the internet and Privacy Hero cloud.


Jump to a Section

  • Common Kill Switch Symptoms
  • Restore Internet Access
  • VPN Still Fails to Connect
  • Privacy Hero Appears Offline
  • Kill Switch, WiFi, or WAN Problem?
  • Frequently Asked Questions

Common Privacy Hero Kill Switch Symptoms

A failed VPN connection combined with an enabled Kill Switch can make the Privacy Hero network appear unavailable even though the router itself may still be functioning.

Common symptoms include:

  1. Your device connects to Privacy Hero WiFi but websites and apps will not load.
  2. Your phone, computer, television, or streaming device reports that WiFi has no internet.
  3. A device refuses to remain connected because it detects that the WiFi network does not currently provide normal internet access.
  4. Your phone automatically switches from Privacy Hero WiFi to cellular data or another saved WiFi network.
  5. Your computer displays “No Internet” or “Connected without Internet.”
  6. The VPN displays Failed, Disconnected, Connecting, or a timeout error.
  7. Privacy Hero was working normally and suddenly stopped providing internet access.

If the Privacy Hero WiFi network itself is completely missing and cannot be detected by any device, that is different from normal Kill Switch behavior. Continue with WiFi or router connectivity troubleshooting instead.

Restore Internet Access

The fastest way to determine whether the Kill Switch is responsible is to temporarily disable it and test Privacy Hero without VPN.

  1. Open app.privacyhero.com.
  2. Sign in to your Privacy Hero account.
  3. Open the VPN section.
  4. Check the current VPN status.
  5. If the VPN shows Failed or Disconnected, turn the VPN Kill Switch Off.
  6. Turn the failed VPN connection off.
  7. Connect a device to the Privacy Hero network.
  8. Test normal internet access.

If internet access returns with the VPN and Kill Switch disabled, Privacy Hero’s basic internet connection is working and the problem is isolated to the VPN connection.

Important: Disabling the Kill Switch allows normal non-VPN internet traffic through Privacy Hero. Leave it disabled only while troubleshooting if continuous VPN protection is required.

VPN Still Fails to Connect

Do not turn the Kill Switch back on until the VPN is connected and working.

If you are using NordVPN and the VPN shows Failed, Connecting, or a timeout error, continue with our dedicated Privacy Hero NordVPN Not Connecting or Showing Timeout Errors guide.

That guide covers:

  • Selecting a different NordVPN server.
  • Replacing a failed Auto Country connection with a specific NordVPN server.
  • Generating a new NordVPN NordLynx access token.
  • Verifying NordVPN OpenVPN manual service credentials.
  • Avoiding double-VPN conflicts while testing.

If you use another VPN provider, try another available VPN server or protocol and verify that your VPN account and credentials remain active.

Verify the VPN Before Re-Enabling the Kill Switch

Once the VPN reconnects:

  1. Confirm Privacy Hero displays the VPN as Connected.
  2. Connect a device to the Privacy Hero WiFi.
  3. Make sure a separate VPN application is not connected directly on the testing device.
  4. Check your public IP address.
  5. Confirm the IP address and location reflect the VPN server you selected.
  6. Test normal websites and applications.
  7. Return to Privacy Hero and enable the VPN Kill Switch.

If you enable the Kill Switch while the VPN is still failing, normal internet access will be blocked again.

What If Privacy Hero Appears Offline?

If Privacy Hero shows Offline in the dashboard, the router may not currently be communicating with the Privacy Hero cloud.

  1. Confirm Privacy Hero is powered on.
  2. Confirm the Ethernet cable from your ISP gateway or primary router is connected to the Privacy Hero WAN/Internet port.
  3. Confirm your ISP gateway or primary router has working internet access.
  4. Restart Privacy Hero and allow it to finish booting.
  5. Using another internet connection, open app.privacyhero.com.
  6. Check whether Privacy Hero returns online.

If the router returns online, check the VPN and Kill Switch status before enabling the VPN again.

Privacy Hero Has a WAN IP but Devices Have No Internet

Privacy Hero can receive an IP address from your ISP gateway while the Kill Switch is still blocking normal internet traffic.

Before changing IP Passthrough, bridge mode, firewall settings, or other ISP gateway settings:

  1. Check the VPN status.
  2. Check whether the Kill Switch is enabled.
  3. Disable the VPN and Kill Switch temporarily.
  4. Test internet access again.

If internet access returns, troubleshoot the VPN connection rather than changing the ISP gateway configuration.

Kill Switch, WiFi, or WAN Problem?

WiFi Connects but There Is No Internet

If the VPN shows Failed or Disconnected and the Kill Switch is enabled, the Kill Switch is likely blocking normal internet traffic.

Device Will Not Stay Connected to Privacy Hero WiFi

Some devices automatically leave a WiFi network when they detect that it does not provide internet access. Use cellular data or another internet connection to access app.privacyhero.com and check the VPN and Kill Switch.

Privacy Hero WiFi Is Completely Missing

The Kill Switch does not normally cause the WiFi network itself to stop broadcasting. If no devices can detect the Privacy Hero WiFi network, troubleshoot the WiFi or router connection separately.

Privacy Hero Is Not Receiving a WAN IP Address

Check the Ethernet connection between Privacy Hero and your ISP gateway or primary router and confirm the upstream internet connection is working.

VPN Shows Connected but One Device Has the Wrong IP

If the VPN works correctly on other devices, the Kill Switch is probably not the issue. Check that device’s Privacy Hero VPN assignment and its own VPN, privacy, DNS, or security settings.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Frequently Asked Questions

Why does Privacy Hero WiFi say no internet?

If the VPN has failed while the Kill Switch is enabled, normal internet traffic is intentionally blocked. Your device may therefore report that Privacy Hero WiFi has no internet.

Can I access Privacy Hero settings while the Kill Switch is blocking internet?

Yes. Open app.privacyhero.com. You can use the Privacy Hero network, cellular data, your main router’s WiFi, or another internet connection.

Do I have to be connected to Privacy Hero WiFi to change the settings?

No. Privacy Hero is cloud-managed and can be managed remotely while the router remains connected to the Privacy Hero cloud.

Why does my phone keep leaving the Privacy Hero WiFi?

Some phones automatically switch to cellular data or another saved WiFi network when the current WiFi connection does not provide normal internet access.

Should I turn the Kill Switch back on immediately?

Only after the VPN is connected and you have confirmed that your internet traffic is using the VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • Privacy Hero NordVPN Not Connecting or Showing Timeout Errors
  • Privacy Hero NordVPN / NordLynx Setup
  • Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN
  • Privacy Hero Router Setup Guide

Router FAQs

admin · Jan 29, 2019 ·

Router FAQs

What is an IP Address?

An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.

An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.

What is DNS?

DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.

The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.

It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!

What is DNSMasq?

DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.

Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.

What is Throughput and How Do I Improve it?

Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.

In order to improve throughput,  you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.

Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.

What is PPPoE?

PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.

With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.

PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.

What is the Difference Between VPN Encryption and Wireless Network Security?

VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.

Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.

Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.

Are FlashRouters Affected By the Shellshock Bug?

No.

According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.

Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.

ProtonVPN Setup for Privacy Hero

TeamFlashRouters · Sep 17, 2025 ·

Privacy Hero supports Proton VPN through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It uses a downloadable .conf configuration file. OpenVPN uses a downloadable .ovpn file and a separate Proton VPN OpenVPN username and password (not your regular Proton Account login).

Privacy Hero is cloud-managed. You can configure the VPN from a computer, smartphone, or tablet connected to any internet network; you do not need to be on the Privacy Hero WiFi to change settings.

Choose Your Proton VPN Setup

Jump directly to the connection method or instructions you need.

WireGuard Setup →Recommended · Generate your .conf fileOpenVPN Setup →Manual credentials and .ovpn fileUpload WireGuard →Add a Custom WireGuard connectionUpload OpenVPN →Add the file and service credentialsVerify Connection →Confirm VPN IP address and locationTroubleshooting →Fix connection failures and no internet

Proton VPN WireGuard Setup (Recommended)

WireGuard uses a configuration file generated by Proton VPN. You do not need an OpenVPN username and password for this method.

Generate Your Proton VPN WireGuard Configuration

  1. Open your Proton VPN account and sign in.
  2. Go to Downloads → WireGuard configuration.
  3. Enter a recognizable configuration name and select Router as the platform.
  4. Choose your preferred VPN options and an available server or country. For a straightforward setup, select a standard server configuration.
  5. Click Create, then Download to save the generated WireGuard .conf file to your device.

Important: A WireGuard configuration contains a private key. Keep the downloaded file private; do not paste its contents into public posts or unprotected support messages. For detailed Proton account instructions, see Proton VPN: Download WireGuard Configuration Files.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change beside the VPN provider, and choose Custom.
  3. Select WireGuard and upload the Proton VPN .conf file you downloaded.
  4. Click Save to apply the configuration and connect. Confirm that Privacy Hero reports Connected.
Privacy Hero Custom WireGuard configuration screen showing the configuration file upload

Proton VPN OpenVPN Setup

OpenVPN is an alternative to WireGuard. You need a Proton VPN OpenVPN-specific username and password and a server .ovpn configuration file.

Get Your Proton VPN OpenVPN Credentials

  1. Sign in to your Proton VPN account.
  2. Open Account → OpenVPN username to find your separate OpenVPN username and password.
  3. Copy these credentials or keep the page open. Do not use your usual Proton Account email and password for the manual OpenVPN connection.

For help locating these credentials, see Proton VPN: How to Sign In / OpenVPN Credentials.

Download Your Proton VPN OpenVPN Server File

  1. In your Proton VPN account, go to Downloads → OpenVPN configuration files.
  2. Select Router as the platform and UDP as the protocol (recommended starting point). If UDP does not work on your network, you can try a TCP configuration later.
  3. Select an available country or individual server from the standard configuration list, then click Download to save its .ovpn file.

For additional details about the file download options, see Proton VPN: Download OpenVPN Configuration Files.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section, click Change, and select Custom as the VPN provider.
  3. Choose OpenVPN and upload the Proton VPN .ovpn file you downloaded.
  4. Enter your separate Proton VPN OpenVPN username and password into the Custom VPN fields.
  5. Click Save, then confirm Privacy Hero displays Connected.
Privacy Hero Custom OpenVPN setup with configuration file upload and separate VPN username and password fields

Verify Your Proton VPN Connection

After Privacy Hero reports Connected, confirm that a device on the router network is using your Proton VPN connection.

  1. Connect your testing device to the Privacy Hero WiFi or LAN network.
  2. Disable any Proton VPN app or other VPN application running directly on that device, so it does not create a second VPN connection.
  3. Open a private/incognito browser window.
  4. Visit Proton VPN’s IP Address Checker.
  5. Verify that the public IP address and approximate location correspond to the Proton VPN server configured in Privacy Hero.

Important: You can manage Privacy Hero from another WiFi network or cellular data. However, the device performing the VPN IP test must be connected to the Privacy Hero network.

Streaming Relocation and VPN Location

If Privacy Hero Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation location rather than the country selected in your Proton VPN configuration. See Privacy Hero Streaming Relocation.


Proton VPN Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, work through these checks:

  1. Confirm that you selected Custom as the VPN provider in Privacy Hero and chose the protocol that matches your configuration file.
  2. For WireGuard, create and download a fresh Proton VPN .conf file for an available server, then upload it again. Do not use an OpenVPN .ovpn file in the WireGuard section.
  3. For OpenVPN, verify that you entered Proton VPN’s separate OpenVPN username and password, not your regular Proton Account login.
  4. Download a fresh configuration for a different Proton VPN server and reconnect. Proton VPN occasionally changes server configurations.
  5. If using OpenVPN UDP and the connection still fails, download and try a TCP .ovpn configuration file to test for a protocol-related issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet works without the VPN. Re-enable your preferred Kill Switch setting once testing is complete.

VPN Disconnects and Devices Have No Internet?

The VPN Kill Switch may be intentionally blocking normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

Check the affected device for a second VPN app, iCloud Private Relay, Private DNS, browser proxy settings, or filtering software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • VPN Kill Switch: No Internet or WiFi
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

Hotspot Shield Manual OpenVPN Setup

TeamFlashRouters · Jul 15, 2020 ·

Preparing for Manual Hotspot Shield Setup

Obtain your Hotspot Shield OpenVPN Information

If you are not already a Hotspot Shield user Sign Up Now.

1. Log in to your account on the Hotspot Shield website.

2. Click Hotspot Shield on the left side navigation.

Hotspot Shield - Website Admin

3. Under Choose your device click Router.

Hotspot Shield - Select Router

4. In the Set up your router section Select your desired virtual location and then click Download file.

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the <cert> and <key> from the .ovpn file. All Hotspot Shield servers have different keys and certificates.

Hotspot Shield - Download Configuration File

5. Copy the VPN Username, and Password that appear under Step 2 to a notepad, you will need this information later in the setup process.

Hotspot Shield - OpenVPN username and password

DD-WRT Router Setup for Hotspot Shield

Navigate to Services > VPN

Enter Hotspot Shield settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote universitycalendar.us 8041
universitycalendar.us is your Hotspot Shield server name. Enter the server name in this field.

Port

8041

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-128-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your Hotspot Shield account.

Password

Enter the Password you obtained in your Hotspot Shield account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

No

NAT

Enable

Firewall Protection

Enable

Additional Config

resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
reneg-sec 0
remote-cert-tls server

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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=
—–END CERTIFICATE—–
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

In the .ovpn file Copy and Paste all contents in between the <cert> and </cert> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

In the .ovpn file Copy and Paste all contents in between the <key> and </key> lines from your .ovpn file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Hotspot Shield connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit Hotspot Shield’s website to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Hotspot Shield.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Hotspot Shield server

  1. Follow the instructions for obtaining the OpenVPN information from above.
  2. Enter the new Server Address in the Server IP/Name field.
  3. Enter the new Username and Password.
  4. Enter the new Public Client Cert and Private Client Key.
  5. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Asus RT-AC68U B1 / C1 / AC1900 DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC68U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC68U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC68U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC68U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC68U DD-WRT Wireless Security

The preset RT-AC68U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC68U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC68U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC66U DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC66U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC66U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC66U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC66U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC66U DD-WRT Wireless Security

The preset RT-AC66U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC66U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC66U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC56U DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC56U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC56U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC56U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC56U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC56U DD-WRT Wireless Security

The preset RT-AC56U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

ViewAC56U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC56U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Linksys WRT1200AC DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Linksys WRT1200AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1200AC with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT1200AC DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View WRT1900AC DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

WRT1200AC DD-WRT Wireless Security

The preset WRT1200AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View WRT1200AC DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Linksys WRT1200AC WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC5300 DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC5300 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC5300 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC5300 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC #1

View AC5300 DD-WRT FlashRouter 5GHz #1 Settings

5.0 GHz - Wireless-AC #2

View AC5300 DD-WRT FlashRouter 5GHz #2 Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC5300 DD-WRT Wireless Security

The preset Asus RT-AC5300 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View RT-AC5300 DD-WRT FlashRouter WiFi Seucirty Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC5300 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R9000 Nighthawk X10 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R9000 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R9000 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View R9000 DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View R9000 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AD

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R9000 DD-WRT Wireless Security

The preset R9000 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

TROUBLESHOOTING

Trouble with your Netgear R9000 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Linksys WRT1900ACS / ACV2 / ACV1 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Linksys WRT1900AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1900AC with DD-WRT firmware.

Please note there are many versions of the WRT1900AC with the same recommended settings, including WRT1900ACv1, WRT1900ACv2, WRT1900ACS, and WRT1900ACSv2.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT1900ACS DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View WRT1900ACS DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

WRT1900AC DD-WRT Wireless Security

The preset WRT1900AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 6038E07E70A8 then your WiFi password is Wireless#6038E

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View WRT1900AC DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Linksys WRT1900ACS WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R6300V2 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R6300V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R6300V2 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R6300 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R6300 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R6300V2 DD-WRT Wireless Security

The preset R6300V2 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R6300 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R6300 V2 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R7800 Nighthawk X4S DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R7800 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7800 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View R7800 DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View R7800 DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R7800 DD-WRT Wireless Security

The preset R7800 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7800 DD-WRT FlashRouter WiFi SecuritySettings

TROUBLESHOOTING

Trouble with your Netgear R7800 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R7000 Nighthawk DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R7000 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7000 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R7000 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R7000 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R7000 DD-WRT Wireless Security

The preset R7000 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7000 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R7000 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R8500 Nighthawk X8 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R8500 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R8500 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC #1

View R8500 DD-WRT FlashRouter 5GHz #1 Settings

2.4 GHz - Wireless-N

View R8500 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC #2

View R8500 DD-WRT FlashRouter 5GHz #2 Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R8500 DD-WRT Wireless Security

The preset Netgear R8500 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

TROUBLESHOOTING

Trouble with your Netgear R8500 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

How to Reset a Failed VPN Connection on Privacy Hero

Dave · Oct 24, 2026 ·

If your Privacy Hero VPN connection shows Failed, you can use the new Reset button to clear the saved third-party VPN settings and return the router to its available default connection. This is useful when a VPN setup is stuck or you want to start again without manually removing the existing third-party VPN configuration.

Important: A VPN reset removes all saved third-party VPN settings from Privacy Hero. You will need to configure that provider again if you want to use it later. The connection Privacy Hero uses after resetting depends on your subscription plan.

Reset a Failed VPN Connection

Follow the reset instructions, then check which connection your plan restores.

When to Use Reset →Know when a VPN reset is appropriate
Reset the Failed VPN →Clear third-party VPN settings in the dashboard
Premium vs. Core →Understand which connection returns afterward
What Gets Removed →Know what you will need to set up again
Verify Your Connection →Check the dashboard and public IP address
Still No Internet? →Check Kill Switch, WAN, and WiFi separately

When Should You Use the VPN Reset Button?

Use Reset when the current VPN connection is in a Failed state and you want to remove the third-party VPN setup and restore a working default connection. It is a more complete action than simply retrying the same VPN server.

  • Use it if the third-party VPN settings are no longer working and you want to start over.
  • Use it if you no longer want the saved third-party VPN configuration.
  • Do not use it if you need to preserve the existing VPN configuration. First try reconnecting or choosing a different VPN server or protocol.

The Reset action addresses the VPN configuration. It does not repair a disconnected WAN cable, an ISP outage, or a router that cannot reach the Privacy Hero cloud.


How to Reset a Failed VPN Connection

  1. Open app.privacyhero.com in a browser and sign in to your Privacy Hero account.
  2. Select your Privacy Hero router, then open its VPN settings.
  3. Confirm the existing VPN connection is showing Failed.
  4. Find the new Reset button in the failed VPN connection area. Before clicking, be aware that this action will remove all third-party VPN settings saved on the router.
  5. Click Reset. If a confirmation message appears, review it before confirming. Allow the dashboard to apply the reset and update the VPN connection status.
  6. Check the resulting connection using the subscription comparison below, then verify internet access from a device connected to Privacy Hero.

Dashboard access during a Kill Switch block: Privacy Hero permits access to app.privacyhero.com over its WiFi or LAN even when the VPN Kill Switch blocks ordinary internet traffic, as long as the router maintains its upstream/cloud connection. You can also manage the router from cellular data or another working internet connection.


What Happens After Reset? Privacy Premium vs. Privacy Core

VPN Reset: Side-by-Side Plan Comparison
Privacy Premium Active subscription Privacy Core
Third-party VPN settingsRemoved Third-party VPN settingsRemoved
Connection after resetBuilt-in Privacy Hero VPN Connection after resetNormal ISP internet
VPN protection afterwardYes, when the built-in VPN is connected VPN protection afterwardNo router VPN is active

Privacy Core users: After resetting, your normal internet access is not VPN-protected by Privacy Hero. If you want a third-party VPN again, you must configure it again in Privacy Hero.

Privacy Premium users: Check that the built-in Privacy Hero VPN shows Connected before assuming your traffic is going through the VPN. A working upstream internet connection and active Premium subscription are still required.


What Information Does the Reset Remove?

The VPN Reset button clears the third-party VPN configuration stored in Privacy Hero. This means any saved third-party provider details will need to be entered or imported again before that provider can be used.

Depending on the provider and protocol you had configured, this may include the saved VPN provider selection, server details, credentials or tokens, and custom OpenVPN or WireGuard settings. Have your provider login or configuration materials available if you plan to set up that VPN again.

This is a VPN configuration reset, not a request to cancel your third-party VPN subscription. It should not be confused with a full router factory reset.


How to Verify Internet and VPN Status After Reset

  1. Refresh the Privacy Hero dashboard and reopen VPN.
  2. If you have Privacy Premium, verify that the built-in Privacy Hero VPN is selected and shows Connected.
  3. If you have Privacy Core, verify that the third-party VPN configuration is gone and ordinary internet access is available through your ISP connection.
  4. Connect a computer or phone to the Privacy Hero WiFi or LAN. To test the router by itself, turn off any VPN application running directly on that device.
  5. Load a regular website, then check your public IP address using ipleak.net. Premium should show a VPN IP if its built-in VPN is connected; Core will normally show your ISP public IP.

If you have Streaming Relocation enabled, some streaming services may use their separately selected location; that is not necessarily the same location shown by a general public IP check.


Reset Complete but Still No Internet?

  1. Check the VPN Kill Switch. If it is still enabled while there is no working VPN connection, it may block ordinary internet traffic. Review the Kill Switch setting before assuming the router has lost WiFi.
  2. Check the connection status. A router listed as Offline may have a WAN, ISP, or cloud-communication problem. The VPN reset cannot fix an upstream internet outage.
  3. Check the network wiring. Confirm your main router or ISP gateway has internet access and the cable is connected to the Privacy Hero WAN/Internet port.
  4. Check a device on Privacy Hero WiFi or LAN. Make sure you are testing the Privacy Hero network rather than another WiFi or cellular connection.
  5. Check your subscription. An active Privacy Premium subscription is required for the built-in Privacy Hero VPN fallback described above. Privacy Core returns to ordinary ISP internet access.

For Kill Switch behavior and restoring internet, see Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting. To learn when to enable the feature, see Privacy Hero VPN Kill Switch Setup.

Related Privacy Hero Articles

  • VPN Kill Switch: No Internet or WiFi Troubleshooting
  • How to Enable the Privacy Hero VPN Kill Switch
  • Privacy Hero VPN Setup Guides

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

In This Guide

Before You Start →Connect and open VPN FusionApply VPN to All Devices →Default VPN routeAssign Selected Devices →Per-device VPN or ISPMultiple VPN Profiles →WireGuard and OpenVPNVerify & Troubleshoot →Check each device’s public IPGuest Network Routing →VPN WiFi and ISP WiFi

Open VPN Fusion

  1. Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
  2. Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
  3. Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.
ASUS VPN Fusion page with Add Profile and Internet Connection
VPN Fusion displays your saved VPN profiles and the Add Profile option.

The exact menu names, profile limits, and available VPN types depend on your ASUS model and firmware. Some older ASUS routers use a different VPN Client interface and do not have the full VPN Fusion controls.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

  1. In VPN Fusion, open the VPN profile that should provide the default internet route.
  2. Enable Apply to all devices (or Default Connection in firmware that uses that label).
  3. Click Apply all settings, then enable the VPN profile.
  4. Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.
ASUS VPN Fusion Apply to all devices setting and device count
Enable Apply to all devices to use the selected VPN as the default connection.

Do not assume every active VPN profile applies to every device. The default route and any device-specific policies determine which connection a device uses.

Method 2: Send Only Selected Devices Through a VPN

  1. In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
  2. Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
  3. Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
  4. Enable the VPN profile and verify the selected devices’ public IPs.
  5. For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard
LaptopProton VPN — OpenVPN
Streaming deviceSurfshark — OpenVPN
Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

  1. Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
  2. Enable only the profiles you need and confirm each shows connected.
  3. Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
  4. Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

  1. In VPN Fusion, confirm the target profile’s connection status is active.
  2. Check the device’s assignment in the ASUS VPN Fusion interface.
  3. On that same device, visit IPLeak.net or another public-IP checker.
  4. Compare the reported public IP and location with the VPN server assigned to that device.
  5. If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

  1. Turn off VPN Fusion routing for a test device and confirm ISP internet works.
  2. Turn on just one known-working VPN profile for that device.
  3. Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Related AsusWRT Guides

  • NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN
  • ASUS Guest WiFi With or Without VPN: Setup Guide
  • Device Settings That Can Interfere With Your Router VPN
  • How to Access Your AsusWRT FlashRouter Settings

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

PPPoE Internet Setup

TeamFlashRouters · Mar 21, 2019 ·

Most ISPs do not require PPPoE credentials. If you are certain this is an ISP requirement in your setup, we kindly ask that you get in touch with your ISP to verify that they do in fact require PPPoE authentication and to provide you with the correct credentials to enter into your FlashRouter.

Before you enter your PPPoE credentials, you should have already setup your FlashRouter in a Single Router Setup with correct wiring. Once you enter PPPoE credentials you should then be able to connect to the internet.

If you are using a Dual Router Setup there is no need to enter PPPoE credentials if they are already entered in the existing router. You can disregard this article.

Enter your PPPoE credentials

DD-WRT Firmware

Navigate to Setup > Basic Setup

Access FlashRouters DD-WRT Admin Settings - Enter PPPOE Username and Password
  1. Set the Connection Type dropdown to PPPoE.
  2. Enter your ISP assigned PPPoE username and password.
  3. Click Apply Settings.

Power cycle your network devices

  1. Power off your ISP modem and the FlashRouter.
  2. Power on the ISP modem and wait for it to fully boot up.
  3. Power on the FlashRouter.

Verify a successful Internet connection

Once the FlashRouter is booted up connect one of your devices to the FlashRouter via Ethernet or Wireless.

Visit any website and make sure the page fully loads. Once you have verified a successful Internet connection, begin connecting your network devices to the FlashRouter via wired or WiFi.

Please be aware that our support is not able to replicate PPPoE issues on our end, which makes them challenging to troubleshoot. In the event of an issue we recommend using a Dual Router Setup.

IPVanish Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports IPVanish VPN through WireGuard (recommended) and OpenVPN. Both are configured in Privacy Hero using the Custom VPN provider option. You will need an active IPVanish VPN subscription and the configuration file for the protocol and server location you select.

Choose your method: WireGuard uses a generated .conf file and generally provides better performance. OpenVPN uses a downloaded .ovpn file plus your IPVanish VPN username and password.

Privacy Hero is cloud-managed. You can sign in and adjust VPN settings from a computer, phone, or tablet connected to any internet connection. You do not need to be on the Privacy Hero WiFi network to configure the router.

IPVanish Setup Guide

Jump to the instructions you need.

WireGuard File →Generate a WireGuard server configurationWireGuard Setup →Upload your .conf file to Privacy HeroOpenVPN File →Download an IPVanish .ovpn server fileOpenVPN Setup →Enter credentials and upload the configurationVerify Connection →Check your public VPN IP addressTroubleshooting →Fix connection errors and IP issues

Download an IPVanish WireGuard Configuration (Recommended)

Use the WireGuard configuration generator in your IPVanish account to create a server file for your router. A generated WireGuard file contains the connection keys and server details, so keep it private.

  1. Open the IPVanish account sign-in page and log in.
  2. Open WireGuard in the account navigation to access the WireGuard Configuration Generator.
  3. Select your preferred IPVanish server location and choose Generate to download the WireGuard configuration file. Save the downloaded .conf file to the device you are using for setup.

Important: Do not publicly share your WireGuard configuration file. To switch server locations later, generate and upload a new configuration.

Add IPVanish WireGuard to Privacy Hero

  1. Sign in to the Privacy Hero dashboard at app.privacyhero.com.
  2. Open the VPN section, select Change beside the provider, and choose Custom.
  3. Choose WireGuard and upload the IPVanish .conf file you just generated.
  4. Click Save to apply the settings. Wait for Privacy Hero to report Connected.
Privacy Hero Custom WireGuard configuration with WireGuard file upload

WireGuard authentication is contained in the generated configuration file; there is no separate OpenVPN username/password step in this method.


Download an IPVanish OpenVPN Configuration File

OpenVPN is a good alternative if WireGuard is unavailable or fails to connect on your network. It requires an IPVanish .ovpn configuration file and VPN login credentials.

  1. Open the IPVanish OpenVPN server configuration list.
  2. Download an .ovpn file for your preferred available server location. If IPVanish provides both UDP and TCP files, start with UDP and keep a TCP file as a fallback.
  3. Have your IPVanish account username and password available for the OpenVPN setup. Use the credentials accepted by your IPVanish VPN account; these are not Privacy Hero login credentials.

If the linked server directory has changed, check the latest manual OpenVPN configuration downloads offered by IPVanish before selecting a file.

Add IPVanish OpenVPN to Privacy Hero

  1. Sign in at app.privacyhero.com and open VPN.
  2. Select Change, choose Custom, and select OpenVPN.
  3. Upload the IPVanish .ovpn file you downloaded.
  4. Enter your IPVanish username and password in the Custom OpenVPN fields. Do not enter the Privacy Hero account login.
  5. Click Save and wait for the connection status to show Connected.
Privacy Hero Custom OpenVPN configuration showing server file upload and username and password fields

Tip: If OpenVPN UDP times out or cannot connect, try an available IPVanish OpenVPN TCP configuration or another server location.


Verify Your IPVanish VPN Connection

After Privacy Hero displays Connected, verify that a device on the router is actually using IPVanish.

  1. Connect the device you want to test to the Privacy Hero WiFi or LAN network.
  2. Temporarily disconnect any IPVanish app, other VPN app, or device-level VPN connection on that device so you test the router VPN alone.
  3. Open a new private/incognito browser window and visit IPVanish What Is My IP Address.
  4. Confirm that your public IP address and approximate location correspond to the VPN server you selected.

Note: Privacy Hero settings can be managed remotely, but the device used for this IP test must be on the Privacy Hero network.

Streaming Relocation and Your VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use the configured Streaming Relocation location instead of the IPVanish server location. See Privacy Hero Streaming Relocation.


IPVanish Not Connecting?

If Privacy Hero remains on Connecting, displays Failed, or reports a timeout, check the following:

  1. Make sure your IPVanish subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. For WireGuard, generate a fresh configuration from your IPVanish account and upload that .conf file again.
  3. For OpenVPN, confirm your IPVanish username/password and upload a fresh .ovpn file for a different server.
  4. Try a different server location. With OpenVPN, also try switching between available UDP and TCP files.
  5. Temporarily disable the Privacy Hero VPN connection and test normal internet access. If enabled, temporarily turn off the VPN Kill Switch for this test, then restore your preferred Kill Switch setting.
  6. Check whether a device-level VPN app, private DNS, proxy, or security software is interfering with the router VPN connection.

VPN Disconnected and No Internet?

The VPN Kill Switch can intentionally block internet access when the VPN disconnects. Review Privacy Hero VPN Kill Switch Setup.

VPN Connected but One Device Shows the Wrong IP?

If only one device shows an unexpected IP address, look for another VPN app, iCloud Private Relay, Private DNS, browser proxy/DNS settings, or security software on that device. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

Wireless Repeater Setup

TeamFlashRouters · Apr 16, 2019 ·

If you need to extend your wireless and wired connection capabilities, you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to your main router via WiFi and then creates a completely separate network segment for you. This new “repeater” network then transmits your internet signal via FlashRouter LAN ports for wired internet access while also creating a new Wireless Extender network that will expand your wireless network range throughout your home or office just like a mesh network.

Preparing for Wireless Repeater Setup

Verify your wireless information

To connect your FlashRouter wirelessly to your existing wireless network you will need the Wireless Network Name (SSID) and Wireless Password of the existing wireless network that you will repeat. Verify and note this information.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

DD-WRT Router Setup for Wireless Repeater

Disable Firewall

Navigate to Security > Firewall

Wireless Repeater Setup on DD-WRT FlashRouter - Disable SPI Firewall
  1. Set SPI Firewall to Disable.
  2. Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

Wireless Repeater Setup on DD-WRT FlashRouter - Add Virtual Interface

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater.

FlashRouters with a Broadcom chipset will have Repeater as an option in the dropdown but FlashRouters with an Atheroes chipset will not. Select Client or Client (Routed) if Repeater is not listed for your FlashRouter.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will repeat.

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Mode to Repeater

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

Wireless Repeater Setup on DD-WRT FlashRouter - Set SSID for Repeated Band

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will repeat.
  3. Click Apply Settings.

Verify the Internet Connection

In the top right hand corner of the DD-WRT you should see the WAN IP change from 0.0.0.0 to an actual IP Address. Once this changes navigate to any website to test your Internet connection.

Wireless Repeater Setup on DD-WRT FlashRouter - Verify WAN Connection

Back up your settings

Navigate to the Administration > Backup page.

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Access FlashRouter DD-WRT firmware settings

TeamFlashRouters · Mar 22, 2019 ·

You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.

Why do I need to access my FlashRouter's settings?

It is important to understand how to access your router if you want to:
  • Change WiFi or admin passwords
  • Switch VPN server locations
  • Attempt custom setups
  • Troubleshoot your network

Connect your device to the FlashRouter network

We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.

Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.

via Ethernet

Connect an Ethernet cable to your device’s Ethernet port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 1

Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 2

Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.

via Wireless

Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).

Access the FlashRouter settings

We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.

Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.

DD-WRT - Firmware GUI

Local IP Address: 192.168.11.1

Username: flashrouter

Password: ddwrt

Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.

If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.

Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

IPv6 Internet Setup

TeamFlashRouters · Apr 3, 2019 ·

Most ISPs only support IPv4. Unless your ISP supports IPv6 then enabling it on the FlashRouter will not enable it across your network.

For most VPN users IPv6 should remain disabled as the VPN connection was designed to operate under IPv4 addresses only. Enabling IPv6 in this instance may compromise the security of the VPN tunnel.

We typically only recommend enabling IPv6 if you are not using VPN or if your VPN provider requires that IPv6 be enabled.

Enable IPv6

Navigate to Setup > IPv6

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set IPv6 to Enable.
  2. Select Native IPv6 from ISP in the dropdown.
  3. If you have specific IPv6 DNS servers you would like to add you can add them in the Static DNS fields or leave those fields blank.
  4. Click Apply Settings.

Power cycle your FlashRouter

Power your FlashRouter off and then power it back on by unplugging and then plugging it back in or using the button on the back of the FlashRouter.

Verify a successful IPv6 connection

Once the FlashRouter is finished powering back up, connect one of your devices to the FlashRouter via Ethernet or Wireless.

Visit  http://ipv6-test.com/ where you should see Supported under IPv6 connectivity if your ISP supports IPv6 and your modem is setup to passthrough IPv6.

Please be aware that we can not replicate ISP specific IPv6 issues, which makes them challenging to troubleshoot. We recommend contacting your ISP as the first step of troubleshooting.

SmartDNSProxy SmartDNS Setup

TeamFlashRouters · Jun 13, 2019 ·

SmartDNSProxy offers a SmartDNS service for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.

SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.

SmartDNS and VPN should not be configured at the same time. When using a SmartDNS connection, make sure to disable your VPN connection on the FlashRouter.

Register your IP Address

If you are not already a SmartDNSProxy user Sign Up Now.

Click on Sign Up and fill in the requested information.

SmartDNSProxy SmartDNS Account Sign Up For DD-WRT FlashRouter

Access the e-mail you entered and Verify your new account.

SmartDNSProxy SmartDNS Activate DNS for DD-WRT FlashRouter

Your account will now be verified.

Activate SmartDNSProxy SmartDNS Service and Subscription

Login to SmartDNSProxy

SmartDNSProxy Server Location Addresses for FlashRouter DD-WRT Settings

Visit SmartDNSProxy’s DNS servers list and note the DNS servers of the location you would like to access content from.

Enter SmartDNSProxy SmartDNS servers on your FlashRouter

Navigate to Setup > Basic Setup

  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of SmartDNSProxy SmartDNS servers you noted into Static DNS fields 1 and 2.
  3. Click Apply Settings at the bottom of the page.
  4. Reboot the FlashRouter.

Once the router is fully booted back up, you can access your desired regional content on any device that connects to the FlashRouter’s network.

« Previous Page
Next Page »

Primary Sidebar

  • Troubleshooting
  • Router Access
  • Internet Connection Issues
  • WiFi Connectivity
  • General VPN Issues
  • TeamViewer Remote Support
  • DD-WRT Firmware
  • Facebook
  • Twitter
  • Instagram
  • Pinterest
  • YouTube

Footer