FlashRouters Support Portal

Prioritizing Privacy

Search Results for: ones router

Surfshark Setup for Privacy Hero

· ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.

Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

VPN Router Setup Guides & FAQs | FlashRouters Help Center

Support Guides

Select your router type

Privacy hero Routers

Router Models

Privacy Hero, Privacy Hero 2

PRIVACY HERO SETUP GUIDE
Asus Merlin Router Support Guides

Router Models

ASUS
  • RT Series: RT-AC68U, RT-AC88U, RT-AC3100, RT-AC5300, RT-AC86U, RT-AX56U, RT-AX58U, RT-AX68U, RT-AX86U. RT-AX86U-PRO, RT-AX88U, RT-AX88U-PRO, RT-BE86U, RT-BE88U, RT-BE92U, RT-BE96U
  • GT Series: GT-AC2900, GT-AX6000, GT-AX11000, GT-AXE11000,GT-AXE11000-PRO,  GT-AXE16000, GT-BE98_PRO
  • ZenWiFi Pro XT12
MERLIN SETUP GUIDE

Router Models

WR3000, M1800, M3000
CUDY SETUP GUIDE
Asus WRT Router Support Guides

Router Models

GT series: GT6, GT-AXE16000, GT-AX11000 Pro, GT-AXE11000, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000
ZenWiFi: ZenWiFi Pro XT12, ZenWiFi Pro ET12, ZenWiFi XT9, ZenWiFi AX (XT8), ZenWiFi ET8, ZenWiFi XD6, ZenWiFi XD5
RT series: RT-AXE7800, RT-AX88U Pro, RT-AX88U, RT-AX86U Pro, RT-AX86U, RT-AX86S, RT-AX68U, RT-AX82U, RT-AX58U, RT-AX3000, RT-AX59U, RT-AX92U
TUF series: TUF-AX5400, TUF-AX3000_V2, TUF-AX3000, TUF Gaming AX6000, TUF Gaming AX4200
ASUS-WRT SETUP GUIDE
TP-Link Router Support Guides

Router Models

Archer AX10000, Archer AX1100, Archer AX21, Archer AX3000, Archer AX3000 Pro, Archer AX3200, Archer AX4400, Archer AX5400 Pro, Archer AX55, Archer AX55 Pro
Archer AX6000, Archer AX72 Pro, Archer AX73, Archer AX75, Archer AX80, Archer AX90
Archer AXE300, Archer AXE5400, Archer AXE75, Archer AXE95
Archer BE550, Archer BE800, Archer BE900, Archer BE9300, Archer GE80, Archer GX90
TP-LINK SETUP GUIDE
gl.iNet Router Setup Guides

Router Models

Flint 2 GL-MT6000, Flint GL-AX1800, Slate GL-AXT1800, Beryl GL-MT3000, Marble GL-B3000

GL.iNet SETUP GUIDE
Roqos Router Support Guides

Router Models

Roqos Core Router, Roqos SASE Appliance

ROQOS SETUP GUIDE
DD-wrt Router Support Guides

Router Models

NETGEAR

AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500

ASUS

RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300

LINKSYS

WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM

DD-WRT SETUP GUIDE
ExpressVPN Routers

Router Models

ExpressVPN Aircove, Aircove Go

NETGEAR

R6300 V2, R6400 V2, R6700 V3, R7000, R7000P

ASUS

RT-AC56U, RT-AC56R, RT-AC56S, RT-AC68U V3, RT-AC87U

LINKSYS

EA6200, WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM

EXPRESSVPN SETUP GUIDE

Search Support Articles

Top Router Questions

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

Service Plan FAQs

· ·

Service Plan FAQs

Is the service plan a one time purchase or does it renew?

All FR service plans automatically renew on a quarterly or annual basis based on the term initially purchased. A reminder e-mail will be sent one week prior to renewal. In your FlashRouter account panel, you can cancel the plan at any time to stop any further renewals.

What is included with a FlashRouter?

  • On-demand Installation of enhanced firmware and our exclusive FlashRouters VPN Privacy App.
  • Custom setup guide.
  • Power cord and an ethernet cable.
  • Individual VPN Account Setup/Pre-configuration (On Request)
  • 1 year open source hardware warranty.
  • 30 day satisfaction guarantee.
  • Initial basic setup assistance via e-mail. For any advanced setups/configurations, live chat or remote assistance, a service plan purchase is required.

Does the service plan include a VPN subscription?

A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.

Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.

Plug and Play VPN Support

Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

Shows what to look for when you want to preconfigure your router.

To have your router VPN pre-configured:

  1. Select Yes from the “Want Your Router Preconfigured?” on the Payment Page during check out.
  2. Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
  3. Enter your your VPN username and password
  4. For ExpressVPN Firmware Routers there will be an additional box for your activation code.

Please note:  If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Do I have to buy a service plan?

Our routers are priced for the custom upgrades performed at our warehouse, testing expenses and keeping the FlashRouter App update to date.

Our service plan has three levels as an optional add-on with your purchase to get continued direct assistance from our team. This is especially useful to customers who are less tech savvy and want direct access to our support team to make sure their network is running exactly how they desire. Here is how these plans differ

Bronze – Basic E-mail Support
Silver – E-mail and Live Chat Support.
Gold – E-mail, Live Chat, and Remote One-on-One Sessions

Each situation and user has different needs and expertise. Our team of US-based support agents are highly trained specialists in VPN and DD-WRT router setup. From firmware updates to networking configuration/troubleshooting,solutions, the purpose of our Service Plans is to help our customers in whatever level they deem necessary.

Does FlashRouters offer phone support?

At this time, we do not provide phone support with our service plans. We have tested phone support for networking troubleshooting in the past but have found that on average caused us to help less customers in a less efficient manner. However, with a purchase of a Gold Service Plan, customers can schedule 1-on-1 remote support sessions via Teamviewer with our engineers and they will provide a hands-on, personal solution, to any problems you may be facing.

Do I need a Service Plan for a firmware upgrade?

Firmware upgrades are free of charge to any FlashRouter customer!

You can visit our support center and select your specific router model to upgrade your firmware based on the recommendations provided.

If you want the help of our Support Team to assist in this upgrade, you can always sign up for our Gold Service Plan and schedule a 1-on-1 Teamviewer session in which our trained engineers will take care of the upgrade for you!

What does the warranty cover?

Our complimentary 1-year hardware warranty does not include tech support outside. If your router suffers hardware failure within 365 days from the date you received the unit, then we will gladly replace your router with another fully tested one. For more information regarding our warranty and return policy, please check out our warranty and return section.

Can I purchase a router without a service plan and subscribe later?

Yes, you may purchase a service plan at any time. However, we can’t guarantee any pricing, or apply any previously offered discounts or specific features at that later date.

Flint/Slate GL.iNet Disable Wi-Fi

· ·

Follow this guide to disable Wi-Fi network on your GL.iNet FlashRouter.

1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1

GL.iNet router access

3. Enter openwrt as the admin password to access the GL.iNet firmware settings.

GL.iNet admin password enter

4. Click Wireless.

GL.iNet Click Wireless

5. Click Modify under the 5GHz or 2.4GHz band.

GL.iNet Modify Wifi

The 5GHz and 2.4GHz bands must be disabled at separate times. Keep in mind that if you are connected to wireless when disabling one band you may need to reconnect with the other band to disable it. Also make sure you have a device that has ethernet capabilities so you can still access the settings with wireless disabled.

6. Set the Enable Wi-Fi toggle to the OFF position and click Apply.

GL.iNet Disable Wifi

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero Access Router Settings

· ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

If you have not created your Privacy Hero account yet please follow these instructions.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

How to Access Your GL.iNet FlashRouter Settings

· ·

This quick guide walk you through connecting to your GL.iNet FlashRouter (Flint, Slate, Beryl, or Marble) and logging into the admin settings page. You’ll use either WiFi or an Ethernet cable, then access the router dashboard through your browser.

Step 1. Connect Your Device to the Router

You can connect by WiFi or Ethernet:

  • WiFi: Look for a network name like FlashRouter24 or FlashRouter50
    • The WiFi password has been set to: Wireless#9483C
    • ⚠️ Be sure to capitalize the “W” in
  • Ethernet: Plug an Ethernet cable from your computer into one of the router’s LAN ports (usually marked or color-coded differently from the WAN port).

👉 Pro tip: Disconnect from any other WiFi networks during setup.

Step 2. Open the Router Login Page

  1. Open a web browser (Chrome, Safari, Firefox, Edge).
  2. In the address bar, type: 192.168.8.1
  3. Press Enter.
GL.iNet router access

This is the local router dashboard address (not a public website). If the page doesn’t load:

  • Try a different browser.
  • Clear your cache.
  • Ensure your device is connected to the FlashRouter network.

Step 3. Log In to the Router Settings

  • Default password: glopenwrt1 or openwrt
  • This is the factory default for all GL.iNet routers shipped by FlashRouters.
GL.iNet admin password enter

💡 Once you’re in, you can update your admin password in the settings for extra security.

Next Steps

Now that you’ve accessed your GL.iNet FlashRouter, you can:

  • Set up your VPN service
  • Customize your WiFi name and password
  • Adjust device controls and security settings

Check our support library for your specific VPN setup guide.

How do I upgrade the DD-WRT firmware of my FlashRouter?

· ·

The following DD-WRT builds are from 11/24/2024 r58699. Keep in mind that these builds are for upgrading routers that already have DD-WRT firmware flashed. To flash a stock firmware router with DD-WRT firmware see our Flash My Router plan!

Download an updated DD-WRT firmware build for your specific FlashRouter model below. Contact support@flashrouters.com if you are uncertain about your router model or your router model is not available below.

Please be aware that FlashRouters is not responsible for any DIY firmware flashing updates. If you have questions or concerns contact FlashRouters Support or check out the DD-WRT Community for additional helpful resources.

Make sure you are following the directions below to load the firmware file into the router settings and not trying to open the firmware file on its own.

Access the FlashRouter via wired connection. It is possible to upgrade firmware via WiFi, but this is not recommended unless you are unable to wire directly to the router.

Navigate to Administration > Firmware Upgrade

Firmware Upgrade page in FlashRouter DD-WRT settings
  1. Do NOT select Reset to Default Settings in the dropdown menu as this will erase all of your FlashRouter settings.
    NOTE: If you are updating from an older DD-WRT build you may be required to reset the router after a firmware update for new features and UI to properly load. You will then be required to setup the administration username and password along with your WiFi and VPN network settings.
  2. Click Choose File and select the file you have downloaded.
  3. Click Upgrade.

Flint/Slate GL.iNet Change Wi-Fi name and password

· ·

Follow this guide to change the Wi-Fi name and password on your GL.iNet FlashRouter.

1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1

GL.iNet router access

3. Enter openwrt as the admin password to access the GL.iNet firmware settings.

GL.iNet admin password enter

4. Click Wireless.

GL.iNet Click Wireless

5. Click Modify under the 5GHz or 2.4GHz band.

GL.iNet Modify Wifi

The 5GHz and 2.4GHz information must be changed at separate times. Keep in mind that if you are connected to wireless when changing one band you may need to reconnect with the new info you set to be on the network again to make changes to the other band.

6. Change the Wi-Fi Name (SSID) and Wi-Fi Password fields to what you want to use. The SSID should be unique and NOT a duplicate of an existing network. Click Apply.

GL.iNet change Wifi name and password

7. Connect your devices to the new wireless network.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

TP-Link Change Wi-Fi name and password

· ·

Follow this guide to change the Wi-Fi name and password on your TP-Link FlashRouter.

1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.

TP-Link URL Access

3. Enter tp-link as the admin password to access the TP-Link firmware settings.

TP-Link admin password

4. Click Wireless.

TP-Link Wireless tab

5. Change the Network Name (SSID) and Password fields to what you want to use. The SSID should be unique and NOT a duplicate of an existing network. Click Save.

TP-Link Change Wireless name and password

If you want both 2.4GHz and 5GHz networks to be bonded and have the same name click the Smart Connect checkbox.

TP-Link Separate Wifi

6. Connect your devices to the new wireless network.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

TP-Link Change Wireless Channel

· ·

Follow this guide to change the Wireless channel on your TP-Link FlashRouter.

1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.

TP-Link URL Access

3. Enter tp-link as the admin password to access the TP-Link firmware settings.

TP-Link admin password

4. Click Wireless.

TP-Link Wireless tab

5. Change the Channel setting to the number that you want to use. Click Save.

TP-Link Change Wireless Channel

6. Connect your devices to the wireless network again as they may have been disconnected when making this change.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

DD-WRT Router Setup Guide

DD-WRT Router Setup Guide

Quick Start Guide for DD-WRT FlashRouters

Find setup guides, FAQs and troubleshooting tips for DD-WRT configured FlashRouters.

VIEW SUPPORTED ROUTER MODELS

AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500

Asus Logo

RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300

WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM

Internet Setup

WiFi Setup

VPN Setup

DD-WRT Features

Search Support Articles

Troubleshooting

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

ProtonVPN Setup for Privacy Hero

· ·

Privacy Hero supports Proton VPN through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It uses a downloadable .conf configuration file. OpenVPN uses a downloadable .ovpn file and a separate Proton VPN OpenVPN username and password (not your regular Proton Account login).

Privacy Hero is cloud-managed. You can configure the VPN from a computer, smartphone, or tablet connected to any internet network; you do not need to be on the Privacy Hero WiFi to change settings.

Proton VPN WireGuard Setup (Recommended)

WireGuard uses a configuration file generated by Proton VPN. You do not need an OpenVPN username and password for this method.

Generate Your Proton VPN WireGuard Configuration

  1. Open your Proton VPN account and sign in.
  2. Go to Downloads → WireGuard configuration.
  3. Enter a recognizable configuration name and select Router as the platform.
  4. Choose your preferred VPN options and an available server or country. For a straightforward setup, select a standard server configuration.
  5. Click Create, then Download to save the generated WireGuard .conf file to your device.

Important: A WireGuard configuration contains a private key. Keep the downloaded file private; do not paste its contents into public posts or unprotected support messages. For detailed Proton account instructions, see Proton VPN: Download WireGuard Configuration Files.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change beside the VPN provider, and choose Custom.
  3. Select WireGuard and upload the Proton VPN .conf file you downloaded.
  4. Click Save to apply the configuration and connect. Confirm that Privacy Hero reports Connected.
Privacy Hero Custom WireGuard configuration screen showing the configuration file upload

Proton VPN OpenVPN Setup

OpenVPN is an alternative to WireGuard. You need a Proton VPN OpenVPN-specific username and password and a server .ovpn configuration file.

Get Your Proton VPN OpenVPN Credentials

  1. Sign in to your Proton VPN account.
  2. Open Account → OpenVPN username to find your separate OpenVPN username and password.
  3. Copy these credentials or keep the page open. Do not use your usual Proton Account email and password for the manual OpenVPN connection.

For help locating these credentials, see Proton VPN: How to Sign In / OpenVPN Credentials.

Download Your Proton VPN OpenVPN Server File

  1. In your Proton VPN account, go to Downloads → OpenVPN configuration files.
  2. Select Router as the platform and UDP as the protocol (recommended starting point). If UDP does not work on your network, you can try a TCP configuration later.
  3. Select an available country or individual server from the standard configuration list, then click Download to save its .ovpn file.

For additional details about the file download options, see Proton VPN: Download OpenVPN Configuration Files.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section, click Change, and select Custom as the VPN provider.
  3. Choose OpenVPN and upload the Proton VPN .ovpn file you downloaded.
  4. Enter your separate Proton VPN OpenVPN username and password into the Custom VPN fields.
  5. Click Save, then confirm Privacy Hero displays Connected.
Privacy Hero Custom OpenVPN setup with configuration file upload and separate VPN username and password fields

Verify Your Proton VPN Connection

After Privacy Hero reports Connected, confirm that a device on the router network is using your Proton VPN connection.

  1. Connect your testing device to the Privacy Hero WiFi or LAN network.
  2. Disable any Proton VPN app or other VPN application running directly on that device, so it does not create a second VPN connection.
  3. Open a private/incognito browser window.
  4. Visit Proton VPN’s IP Address Checker.
  5. Verify that the public IP address and approximate location correspond to the Proton VPN server configured in Privacy Hero.

Important: You can manage Privacy Hero from another WiFi network or cellular data. However, the device performing the VPN IP test must be connected to the Privacy Hero network.

Streaming Relocation and VPN Location

If Privacy Hero Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation location rather than the country selected in your Proton VPN configuration. See Privacy Hero Streaming Relocation.

Proton VPN Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, work through these checks:

  1. Confirm that you selected Custom as the VPN provider in Privacy Hero and chose the protocol that matches your configuration file.
  2. For WireGuard, create and download a fresh Proton VPN .conf file for an available server, then upload it again. Do not use an OpenVPN .ovpn file in the WireGuard section.
  3. For OpenVPN, verify that you entered Proton VPN’s separate OpenVPN username and password, not your regular Proton Account login.
  4. Download a fresh configuration for a different Proton VPN server and reconnect. Proton VPN occasionally changes server configurations.
  5. If using OpenVPN UDP and the connection still fails, download and try a TCP .ovpn configuration file to test for a protocol-related issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet works without the VPN. Re-enable your preferred Kill Switch setting once testing is complete.

VPN Disconnects and Devices Have No Internet?

The VPN Kill Switch may be intentionally blocking normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

Check the affected device for a second VPN app, iCloud Private Relay, Private DNS, browser proxy settings, or filtering software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Flint/Slate GL.iNet Repeater Setup

· ·

If you want to connect your FlashRouter to the Internet via Wi-Fi instead of an ethernet cable you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to an available network via WiFi and then creates a completely separate network segment for you.

1. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1

GL.iNet router access

3. Enter openwrt as the admin password to access the GL.iNet firmware settings.

GL.iNet admin password enter

4. Select the Internet tab.

GL.iNet Internet tab

5. In the Repeater area select Connect.

GL.iNet Repeater Connect

6. Select the available Wi-Fi network you want the FlashRouter to use for Internet from the list. You can use a 2.4GHz and/or 5GHz network to connect.

GL.iNet Repeater select Wi-Fi

7. Enter the correct Wi-Fi password in the Password field for the network you selected. Then click Apply.

GL.iNet Repeater enter Wi-Fi password

8. You are now setup with the GL.iNet FlashRouter receiving Internet via Wi-Fi. The Repeater area should now be filled in with the network information of the connection as shown below.

GL.iNet Repeater Setup complete

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Cudy Change Wi-Fi name and password

· ·

Follow this guide to change the Wi-Fi name and password on your Cudy FlashRouter.

1. Connect your computer, phone, or tablet to the Cudy router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to 192.168.10.1

Cudy local IP access

3. Enter openwrt as the admin password to access the Cudy firmware settings.

Cudy router access

3. Click General Settings.

Cudy General Settings

4. Click Wireless.

Cudy Wireless tab

5. Change the SSID and Password fields for both 2.4GHz and 5GHz bands.The SSIDs should be unique and NOT a duplicate of an existing network. Click Save & Apply.

Cudy Change Wifi Name and password

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Why is my DNS showing as 192.168.11.1 on my devices?

· ·

When connected to a FlashRouter’s network the DNS settings of the devices will be reporting as 192.168.11.1. This means that the router is handling DNS internally through the servers you have set in the Setup > Basic Setup section of the router. If you did not set any custom DNS here, then you will using your ISP or VPN DNS servers automatically.

You can always customize the DNS servers in the router to your preferred servers and through DNSmasq the router will use 192.168.11.1 to route these servers to your connected devices.

In some instances disabling DNSMasq in the DD-WRT settings can help unblock previously blocked websites while connected to VPN. This will force devices to report the DNS servers set in the router directly as opposed to 192.168.11.1.

Disabling DNSMasq is not recommended unless FlashRouters specifically advises you but we have seen this work for certain VPN providers. To disable the DNSMasq do the following.

Navigate to Setup > Basic Setup

Disable DNSMaq Settings
  1. Uncheck Use DNSMasq for DHCP.
  2. Uncheck Use DNSMasq for DNS.
  3. Uncheck DHCP-Authoritative.
  4. Click Save.

Navigate to Services > Services

Disable DNSMaq Settings 2
  1. Set DNSMasq to Disable.
  2. Click Apply Settings.
  3. Reboot router.

Shipping FAQs

· ·

Shipping FAQs

General Shipping FAQs

What company do you use for shipping?

For domestic shipping, we offer United State Postal Service (USPS), and a FedEx Expedited 2-3 Day delivery option.

For International shipments, we offer USPS and FedEx.

Where do you ship from?

We ship all packages from our New Jersey warehouse.

How much does shipping cost?

Domestic Customers:

  • Free Standard Shipping 3-10 day Delivery when you purchase a router with any Service Plan.
  • $20 Flat Rate FedEx 2-3 Day Express shipping

International Customers:

  • Pricing for USPS, and FedEx will vary by country. You can see rates on the Shipping Estimate tab on any FlashRouters product page. FlashRouters does not add any internal handling fees to international rates.
  • Note: Customers pay customs, duties, processing fees, and taxes (if applicable).

How fast do you ship?

We aim to ship your purchase within 1-2 business days from the original order date.

There may be a delay of up to 24 hours if our configuration team is unable to configure your router as requested. In these cases, our support team will reach out to you in an attempt to find a solution. If the team does not hear back from you within 24 hours they will ship out the unit to avoid further delays. Keep in mind  our support team will be available to assist if you have any setup issues once you receive your router.

Who pays for shipping?

Domestic customers can choose Free standard shipping. Customers pay shipping costs including customs, duties, processing fees, and taxes (if applicable) for all other options.

Can you ship to my country?

We ship to almost all countries around the world with some exclusions. If you would like to ship to any of these excluded countries, we recommend using PayPal and a Freight forwarding service such as Aramex, MyUS, or Shipito.

Another option if you are located in a country we do not ship to is to purchase a compatible router locally that we can flash remotely for you via our Flash My Router plan. A full list of compatible routers are listed there.

Known excluded countries are:
  • Afghanistan
  • Algeria
  • Angola
  • Bangladesh
  • Benin
  • Bhutan
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • Burkina Faso
  • Burundi
  • Cape Verde
  • Central African Republic
  • Chad
  • Comoros
  • Congo – Brazzaville
  • Congo – Kinshasa
  • Cuba
  • Djibouti
  • Egypt
  • Eritrea
  • Eswatini
  • Ethiopia
  • Gabon
  • Gambia
  • Ghana
  • Guinea-Bissau
  • India
  • Indonesia
  • Iran
  • Iraq
  • Kenya
  • Kiribati
  • Kosovo
  • Laos
  • Lesotho
  • Liberia
  • Libya
  • Madagascar
  • Malawi
  • Malaysia
  • Mali
  • Mauritania
  • Mauritius
  • Mayotte
  • Mozambique
  • Myanmar (Burma)
  • Namibia
  • Nauru
  • Niger
  • Nigeria
  • Niue
  • North Korea
  • Palastinian Territories
  • Russia
  • Rwanda
  • Sao Tome & Principe
  • Senegal
  • Seychelles
  • Sierra Leone
  • Solomon Islands
  • Somalia
  • Sudan
  • Syria
  • Tajikistan
  • Tanzania
  • Togo
  • Tokelau
  • Tunisia
  • Turkmenistan
  • Tuvalu
  • Uganda
  • Wallis & Futuna
  • Western Sahara
  • Zambia
  • Zimbabwe

2025 - Postal Calendar

We will not be able to ship on the dates below. Your package will be shipped the following business day.

  • New Year’s Day: January-01
  • Martin Luther King Jr. Day: January-20
  • President’s Day: February-17
  • Memorial Day: May-26
  • Independence Day: July-04
  • Labor Day: September-01
  • Columbus Day: October-13
  • Veteran’s Day: November-11
  • Thanksgiving Day: November-27
  • Christmas Eve: December-24
  • New Year’s Eve: December-31

 

2025 Holiday Shipping Deadlines
In order to ensure timely delivery of your packages for the holiday season, please refer to the following shipping deadline dates for the following types of mail.

PLEASE NOTE: All deadlines are at 1PM EST of the designated.

US

  • USPS Priority 12/18
  • USPS APO/FPO/DPO 12/11
  • FedEx 12/21

International

International dates are for estimated delivery dates. However, customs can cause issues and may take longer.

  • Puerto Rico 12/21
  • Canada  12/21
  • Mexico 12/21
  • UK 12/20
  • Hong Kong 12/19
  • Australia 12/19
  • Middle East 12/19

Regardless of your carrier or country, we recommend that you place your holiday orders as soon as possible to ensure timely delivery.

Customs and Expenses

Will there be extra customs charges when my FlashRouter arrives?

There may be additional customs fees incurred based on the local importation laws of your country. You (the recipient) are responsible for all customs fees charged by your country’s customs agency.

Customs charges are NOT factored into the FlashRouters shipping cost.

All customs fees will be a separate charge and must be paid for by the recipient of the package.

We do our best to inform you of possible customs fees to the best of our ability, however we will not accept returns because of refusal to pay these fees.

If we receive a return due to failure to pay customs fees, you will be refunded but ONLY for the price of the FlashRouter. Original Shipping charges will NOT be refunded.

We do our best to make FlashRouters’ shipping quick and affordable but are unable to foresee all customs-related issues. Please be sure to check before ordering if you are concerned with local customs fees.

Do you charge sales tax?

We will charge sales tax in any state where we are required to do so. Currently that is within New Jersey, due to the fact that this is the physical location of our business and New York but that is subject to change as law dictates.

Any taxes or customs fees that are incurred to your country’s current policies are out of our hands. We do our best to make the router and the shipping quick and affordable.

Privacy Hero Dashboard Not Updating or Showing Old Information

· ·

If the Privacy Hero dashboard is showing old information, a VPN status does not appear to update, settings you changed are not displaying correctly, or the dashboard behaves unexpectedly, your browser may be displaying cached Privacy Hero website data.

Before changing your router or VPN configuration again, open a fresh browser session and confirm that the dashboard is displaying the current information.

Start With a Private or Incognito Browser Window

The fastest test is to open the Privacy Hero dashboard in a new private or incognito browser window.

  1. Close any existing Privacy Hero dashboard tabs.
  2. Open a new private or incognito browser window.
  3. Visit app.privacyhero.com.
  4. Sign in to your Privacy Hero account.
  5. Check the router, VPN, device, or setting again.

If the correct information appears in the private browser window, the original browser session was likely displaying cached or stale website information.

Refresh the Privacy Hero Dashboard

If the dashboard has been open while you are changing VPN or router settings, refresh the page before assuming that a change failed.

  1. Refresh the Privacy Hero dashboard.
  2. Allow the page to finish loading.
  3. Return to the section you were changing.
  4. Check the current status again.

If the information still appears incorrect, sign out of Privacy Hero, close the browser tab, and sign back in through a fresh browser session.

Clear Cached Privacy Hero Site Data

If Privacy Hero works correctly in a private/incognito window but not in your normal browser window, clear the cached website data for Privacy Hero.

Browser menus vary, but look for settings related to:

  • Cached files and images.
  • Cookies and site data.
  • Website data.
  • Privacy and browsing data.

If your browser allows you to remove data for an individual website, clear the stored data for app.privacyhero.com rather than clearing your entire browser history.

Then reopen app.privacyhero.com, sign in again, and check the dashboard.

Try Another Browser or Device

If the dashboard still behaves unexpectedly, test it from another browser or device.

  1. Open app.privacyhero.com in another browser.
  2. Sign in using the same Privacy Hero account.
  3. Check whether the same router and settings appear correctly.

You can also test from another computer, phone, or tablet.

Privacy Hero is cloud-managed, so you do not need to be connected to the Privacy Hero WiFi to access the dashboard. You can use cellular data, another WiFi network, or another internet connection.

Disable Browser Extensions While Testing

Browser extensions can sometimes interfere with website login, scripts, or dashboard functions.

If the problem occurs only in one browser, temporarily test without extensions such as:

  • Ad blockers.
  • Privacy extensions.
  • Script blockers.
  • VPN or proxy extensions.
  • Security or filtering extensions.

A private/incognito window may disable some extensions automatically, depending on your browser configuration.

VPN Status Still Shows Failed or Connecting?

If a fresh browser session confirms that Privacy Hero is actually reporting the VPN as Failed, Connecting, Disconnected, or showing a timeout error, the problem is no longer just a browser display issue.

NordVPN users should continue with Privacy Hero NordVPN Not Connecting or Showing Timeout Errors.

No Internet After the VPN Failed?

If the dashboard confirms that the VPN has failed and your Privacy Hero network also has no internet access, check whether the VPN Kill Switch is enabled.

See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

One Device Shows the Wrong VPN IP?

If Privacy Hero shows the VPN as connected and working but only one device shows an unexpected IP address or location, the browser cache is probably not the main issue.

Check the device for its own VPN application, Private Relay, Private DNS, browser Secure DNS, antivirus, firewall, or other network settings.

See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Which DD-WRT wireless extender setup should I be using?

· ·

FlashRouters supports four unique DD-WRT wireless extender setups – options similar to an open source Mesh network. Each different wireless extender configuration serves a different purpose. Read below to see which guide fits your configuration requirements!

Wireless Repeater

Why should I choose Wireless Repeater Setup?

  1. If you have a MiFi wireless only internet connection or other type of WiFi internet where there is no access to any ethernet port for a wired internet connection, then you can setup a wireless repeater network to both extend WiFi and add wired connection capabilities.
  2. If you have a large home or office area that requires additional WiFi coverage can use a wireless repeater setup to extend the existing network.
  3. If you want to create a separate VPN WiFi network in your home without placing the FlashRouter in the same room as your primary router you can use wireless repeater to establish a WiFi internet connection and then connect to VPN on your WiFi repeater network.
  4. If you want a wireless Dual Router setup option where you can have local ISP IP address through your main router WiFi network and your VPN IP address through your FlashRouter Wireless Repeater WiFi network, both available for you to connect at all times. Each network is on a unique subnet.

View the FlashRouter Wireless Repeater Setup Guide.

Wireless Repeater Bridge

Use Cases

Wireless Repeater Bridge Setup

  1. Anyone that needs all their devices connected to the same local network.
  2. Anyone with a MiFi internet connection that does not have an ethernet port and has no need for VPN.
  3. Anyone with a large wireless area that requires additional coverage.

Wireless Client Bridge

Use Cases

Wireless Client Bridge Setup

  1. Anyone with a MiFi internet connection that needs wired access.
  2. Anyone that needs additional wired ports instead of using a switch.
  3. Anyone with wired only devices in their home that are too far from your main router.

Wireless Access Point DHCP Forwarder

Use Cases

Wireless Access Point DHCP Forwarder Setup

  1. Anyone that needs their devices connected to the same local network and wants lossless LAN to LAN speeds via wireless and ethernet connection.
  2. Anyone that wants to use their main router to provide DHCP to their router instead of having an additional DHCP server.

Wireless Guest Network Setup – Unbridged (Recommended)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a separate Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter. Be sure to pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

FlashRouter DD-WRT Wireless Guest Network Settings Unbridged

Under the 2.4GHz or 5GHz Interface click the Add button.

Wireless Network Name (SSID)

Enter the a unique network name for the guest network.

Network Configuration

Unbridged

Force DNS Redirection

Enable

Optional DNS Target

208.67.220.220

IP Address

192.168.12.1

Subnet Mask

255.255.255.0

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Enable DHCP for Guest Network

Navigate to Setup > Networking

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged Setting DHCP Server
  1. Scroll to the very bottom of the page and under DHCPD click Add.
  2. Select wl0.1 or ath1.1 depending on your router model.
  3. Click Apply Settings.
  4. Reboot your router.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

GL.iNet Router Setup Guide

Quick Start Guide for GL.iNet FlashRouters

Find setup guides, FAQs and troubleshooting tips for GL.iNet FlashRouters.

VIEW SUPPORTED ROUTER MODELS

  • Slate: GL-AX1800, GL-AXT1800, GL-BE3600
  • Flint: GL-MT6000
  • Other: Beryl GL-MT3000, Velica GL-B2200, Marble GL-B3000
Flint GLinet Router Support

Internet Setup

WiFi Setup

VPN Setup

GL.iNet Features

Search Support Articles

Troubleshooting

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

Privacy Hero Creating User Profiles and Adding Devices to Profiles

· ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

The Privacy Hero router allows for User Profile creation. Doing so allows you to group different user’s devices together to customize the following rules:

  • Internet access scheduler (Bedtime settings)
  • Internet Safe Search
  • Youtube Safe Search
  • Block Adult Content

This makes the Privacy Hero a great router option for families and internet addicts.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Profiles symbol.

Privacy Hero Profiles

4. Click Create New Profile.

Privacy Hero Create New Profile

5. Set the Profile Name, select the Profile Icon, and click Save.

Privacy Hero Set Profile Name

6. Click the name of the User Profile.

Privacy Hero Select Profile

7. Select Devices.

Privacy Hero Select Devices

8. Select Manage Devices.

Privacy Hero Select Manage Devices

9. If you have not already connected your devices to the Privacy Hero network via wireless or ethernet you can do so now. Refresh the page after connecting a new device and it will appear in the list where you can select Move to “Profile Name” to move the device to the appropriate profile. By default new devices are in the Shared profile.

Privacy Hero Move to User Profile

If your devices were already connected to the Privacy Hero network and you are having issues identifying them I would recommend the following steps:

  1. Click the Devices icon.
  2. Select the device in question.
  3. Click Nerd and note down the IP Address of the device.
  4. Go to the network settings of your device where it will display the local IP Address and match that to the IP Address noted in Privacy Hero.

This is how you can identify a device that is not properly named.

10. Now that your devices are assigned you can set the Bedtime Settings (Internet Scheduler) and Safe Surf settings for your new Profile.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Access FlashRouter DD-WRT firmware settings

· ·

You must be connected to the FlashRouter network via ethernet or WiFi connection on your device in order to be able to access the FlashRouter’s firmware settings.

Why do I need to access my FlashRouter's settings?

It is important to understand how to access your router if you want to:
  • Change WiFi or admin passwords
  • Switch VPN server locations
  • Attempt custom setups
  • Troubleshoot your network

Connect your device to the FlashRouter network

We recommend using a computer, tablet, or phone to access your FlashRouter firmware settings. You can connect your device to the FlashRouter via Ethernet Cable or Wireless connection.

Please note, you will NOT be able access the firmware settings unless you connect your device to the FlashRouter Network.

via Ethernet

Connect an Ethernet cable to your device’s Ethernet port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 1

Connect the other end of that Ethernet cable to a FlashRouter LAN/numbered port.

Access FlashRouters DD-WRT Admin Settings via Ethernet Connection 2

Be sure NOT to connect your device to the WAN/internet port of the FlashRouter. Please use the LAN/numbered ports to connect your devices.

via Wireless

Navigate to the available wireless networks in your device network settings and join any of the available FlashRouter networks – FlashRouter24, FlashRouter50, or FlashRouter80 (if you have a tri-band router).

Access the FlashRouter settings

We recommend using a Google Chrome or Mozilla Firefox incognito/private browsing window to access the FlashRouter firmware settings. You can access the main DD-WRT firmware GUI or you can go directly into the FlashRouters Privacy App settings to manage your basic router settings and VPN connection settings right away.

Please note, after accessing the FlashRouter Settings at the Local IP Address, you will be prompted to enter an admin username and password. You can find this information in the subsections below.

DD-WRT - Firmware GUI

Local IP Address: 192.168.11.1

Username: flashrouter

Password: ddwrt

Keep in mind that if you enable HTTPS and disable HTTP access you will need to add https:// in front of the Local IP Address to access your FlashRouter’s firmware settings.

If your router has been reset for any reason then you can access the router at a local IP address of 192.168.1.1.

Please note you will be required to set the administration username and password as well as your WiFi and VPN network settings after a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Wireless Repeater Bridge Setup

· ·

If you need to extend your connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Repeater Bridge. In Wireless Repeater Bridge mode the FlashRouter connects to your main router on the same subnet via WiFi, and then transmits your internet signal via the FlashRouter for internet access anywhere in your home or office.

Preparing for Wireless Repeater Bridge Setup

Verify your wireless information

In order to setup your FlashRouter as a Wireless Repeater Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

Locate the Local IP Address of the existing wireless network

Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.

DD-WRT Router Setup for Wireless Repeater Bridge

Disable Firewall

Navigate to Security > Firewall

Wireless Repeater Bridge Setup on FlashRouter DD-WRT - Disable Firewall and Enable Filter Multicast
  1. Set SPI Firewall to Disable.
  2. Uncheck all boxes except for Filter Multicast.
  3. Click Save.

Disable DNSmasq

Navigate to Services > Services

Wireless Repeater Bridge Setup on FlashRouter DD-WRT - Disable DNSMasqButton
  1. Set DNSmasq to Disable.
  2. Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

Wireless Repeater Setup on DD-WRT FlashRouter - Add Virtual Interface

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater Bridge.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.

Set Wireless Mode to Repeater Bridge in FlashRouter DD-WRT Basic Wireless Settings Page

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

Wireless Repeater Setup on DD-WRT FlashRouter - Set SSID for Repeated Band

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
  3. Click Save.

Change the FlashRouter's Local IP Address

Navigate to Setup > Basic Setup

Wireless Repeater Bridge Setup on FlashRouter DD-WRT - Set Local Router IP, Gateway, Local DNS
  1. Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
  2. Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
  3. Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
  4. Click Save.

Change the FlashRouter's Operating Mode

Navigate to Setup > Advanced Routing

Set Operating Mode to Router in FlashRouter DD-WRT Basic Wireless Settings Page
  1. Set the Operating Mode to Router.
  2. Click Apply Settings.

Reboot your FlashRouter

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

How do I upgrade the Asus Merlin firmware of my FlashRouter?

· ·

Download the latest AsusWRT Merlin firmware build for your specific FlashRouter model at the Asus Merlin download website. Contact support@flashrouters.com if you are uncertain about your router model or your router model is not available. Click your router model and then select the Release folder.

Make sure you are following the directions below to load the firmware file into the router settings and not trying to open the firmware file on its own.

Access the FlashRouter via wired connection. It is possible to upgrade firmware via WiFi, but this is not recommended unless you are unable to wire directly to the router.

Navigate to Administration > Firmware Upgrade

AsusWRT Merlin Firmware Upgrade

Why is the internet LED red on my router?

· ·

Upon flashing the router from stock manufacturer firmware to DD-WRT firmware many buttons and lights on the router may have altered functionality. With DD-WRT firmware on certain devices a red internet/WAN light means a successful connection. While in factory firmware a red light denotes an issue with your internet connection. For anyone with DD-WRT firmware, this is not something you need to worry about as long as the internet functionality is in fact working.

ExpressVPN/Aircove FlashRouter Internet Setup and Activation

· ·

Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.

Obtain your ExpressVPN Activation Code

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard

2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Click Get Started on the ExpressVPN page that is displayed.

ExpressVPN Get Started

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

ExpressVPN Activation Code

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

ExpressVPN Wiring

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

ExpressVPN Share Crash Report

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

ExpressVPN Set WiFi Name and Password

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

ExpressVPN admin password

8. Your ExpressVPN FlashRouter is now fully setup!

ExpressVPN Connected

Privacy Hero NordVPN Not Connecting or Showing Timeout Errors

· ·

If NordVPN will not connect on Privacy Hero, shows a timeout error, remains stuck on Connecting, or displays Failed, the Privacy Hero router itself may still be working normally.

NordVPN connections can occasionally stop working when servers are placed into maintenance, removed or cycled out of service, account credentials change, or a previously saved NordVPN access token or manual service credential is no longer valid.

Start by confirming that Privacy Hero has normal internet access, then troubleshoot the NordVPN connection.

Jump to a Section

First: Confirm Privacy Hero Has Internet

Before changing your NordVPN settings, confirm that Privacy Hero itself has normal internet access.

  1. Open app.privacyhero.com.
  2. Open the VPN section.
  3. If the VPN Kill Switch is enabled, temporarily turn it Off.
  4. Turn the failed NordVPN connection off.
  5. Connect a device to the Privacy Hero network.
  6. Test normal internet access.

If internet access works normally with NordVPN and the Kill Switch disabled, the underlying Privacy Hero internet connection is working. Continue troubleshooting the NordVPN connection.

If your internet stopped working because NordVPN failed while the VPN Kill Switch was enabled, follow our Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Reconnect NordVPN

A temporary NordVPN server or connection issue may resolve without changing your account information.

  1. Open the VPN section at app.privacyhero.com.
  2. Turn the NordVPN connection off.
  3. Wait a few seconds.
  4. Turn NordVPN back on.
  5. Allow the connection time to establish.
  6. Check whether the VPN status changes to Connected.

If NordVPN still shows Failed, Connecting, or a timeout error, continue with the steps below.

Try Another NordVPN Server

NordVPN regularly maintains, replaces, and cycles servers in its network. A specific NordVPN server that worked previously may eventually be taken offline, removed, or temporarily unavailable.

If your Privacy Hero NordVPN connection is configured to use a specific server and suddenly stops working, try another server or return to the normal country selection.

  1. Open app.privacyhero.com.
  2. Open the VPN section.
  3. Select your NordVPN connection.
  4. If you previously entered a specific NordVPN server under Advanced Options, remove or replace that server.
  5. Select the country or location you want to use.
  6. Save the settings.
  7. Reconnect NordVPN.
  8. Check whether the status changes to Connected.

If you specifically need to use an individual NordVPN server, make sure that server is still active before continuing to use it.

Important: A previously working specific server should not be assumed to remain available indefinitely. NordVPN may change its server network over time.

Update Your NordVPN Token for NordLynx

Privacy Hero uses a NordVPN access token to authenticate NordLynx connections.

If the saved token is expired, revoked, replaced, or otherwise no longer valid, NordLynx may show Failed, Connecting, or a timeout error.

Generating a new token is a good troubleshooting step if your NordVPN account information has changed or the existing token is no longer working.

  1. Sign in to your NordVPN account.
  2. Open the NordVPN Access Tokens page.
  3. Generate a new access token.
  4. Select Doesn’t expire if NordVPN provides that option.
  5. Copy the new token.
  6. Open app.privacyhero.com.
  7. Open the NordVPN settings.
  8. Confirm that NordLynx is the selected protocol.
  9. Replace the existing token with the newly generated token.
  10. Save the settings.
  11. Reconnect NordVPN.

Important: NordVPN access tokens are sensitive account credentials. Do not post or share your token publicly.

For complete setup instructions, see Privacy Hero NordVPN / NordLynx Setup.

Update NordVPN Manual Service Credentials for OpenVPN

If you are using OpenVPN instead of NordLynx, Privacy Hero uses NordVPN’s Manual Service Credentials.

These are different from the email address and password you normally use to sign in to the NordVPN website or application.

If the saved credentials are no longer valid, update them:

  1. Sign in to your NordVPN account.
  2. Open NordVPN Manual Service Credentials.
  3. Copy the current service username and password.
  4. Open app.privacyhero.com.
  5. Open your NordVPN settings.
  6. Confirm that OpenVPN is the selected protocol.
  7. Replace the existing manual service credentials with the current credentials from NordVPN.
  8. Save the settings.
  9. Reconnect NordVPN.

Do not enter your regular NordVPN website email address and password in place of the manual service credentials.

Did You Recently Change Your NordVPN Account Information?

If NordVPN stopped connecting after an account change, update the authentication information stored in Privacy Hero.

This is especially important after changes such as:

  • Changing your NordVPN account password.
  • Changing or updating NordVPN account security settings.
  • Generating or replacing NordVPN access tokens.
  • Changes to NordVPN manual service credentials.
  • Renewing, changing, or restoring your NordVPN subscription.

The credentials used by Privacy Hero depend on the VPN protocol:

  • NordLynx: Uses a NordVPN access token.
  • OpenVPN: Uses NordVPN manual service credentials.

Your regular NordVPN website login should not be entered as the router’s OpenVPN credentials.

If you are unsure whether the existing authentication information is still valid, retrieve current credentials directly from your NordVPN account and update Privacy Hero.

Confirm Your NordVPN Subscription Is Active

Privacy Hero cannot establish a NordVPN connection if the NordVPN account being used no longer has active VPN service.

Sign in to your NordVPN account and confirm that your subscription is active before continuing with server, token, or credential troubleshooting.

Try Another VPN Protocol

If your NordVPN account, credentials, and server selection are correct but the connection still fails, try another NordVPN protocol available in Privacy Hero.

For example, if NordLynx is not connecting, testing OpenVPN can help determine whether the issue is specific to the protocol or authentication method.

Remember that changing protocols also changes the required NordVPN authentication:

  • NordLynx requires a NordVPN access token.
  • OpenVPN requires NordVPN manual service credentials.

Important: Do Not Run Two VPNs at Once

Do not leave the NordVPN application connected directly on your phone or computer while testing the Privacy Hero VPN.

Running a VPN application on the device while also routing that device through the Privacy Hero VPN creates a double-VPN connection and can cause routing, connectivity, or IP-location problems.

Disconnect the device-level NordVPN app before testing the router VPN.

Verify the NordVPN Connection

Once Privacy Hero displays NordVPN as Connected:

  1. Connect your device to the Privacy Hero WiFi.
  2. Make sure the NordVPN app on the device is disconnected.
  3. Open a fresh private/incognito browser window.
  4. Visit NordVPN What Is My IP.
  5. Confirm that the public IP address and location correspond to your selected NordVPN location.
  6. Test several websites or applications.

If you use the Privacy Hero VPN Kill Switch, enable it only after confirming that NordVPN is connected and working.

NordVPN Is Connected but One Device Shows the Wrong IP

If Privacy Hero shows NordVPN as Connected and other devices display the correct VPN IP, the NordVPN connection itself is likely working.

Check the affected device’s Privacy Hero VPN assignment and review any VPN, privacy, DNS, browser, antivirus, firewall, or security settings running directly on that device.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

ExpressVPN Setup for AsusWRT Firmware Routers

· ·

You can connect to ExpressVPN on your AsusWRT router using OpenVPN.

Quick Options

  • OpenVPN: Download your preferred server .ovpn configuration file from the ExpressVPN website.

:point_right: If you are not already a ExpressVPN user Sign Up Now.

EXPRESSVPN SETUP GUIDE FOR ASUSWRT

1. Log in to your account on the ExpressVPN website.

2. In the “Set up your devices” section, click More and select Manual Configuration from the menu options.

3. Copy the Username and Password that are displayed on the right

ExpressVPN Manual Service Credentials

4. Download a server file from any of the available regions shown in the ExpressVPN Manual Configuration section (Americas, Europe, Asia Pacific, etc)

ExpressVPN Download .ovpn file

5. Log in to the Asus settings page by connecting to the Asus router’s WiFi (or wired LAN) on your computer. Then, enter 192.168.50.1 or asusrouter.com in the browser.

View our guide for more instructions on how to access AsusWRT firmware settings.

6. Navigate to the VPN tab and then click on the VPN Fusion tab, then click Add Profile

Click the VPN Button
VPN Fusion Add Profile

7.  Fill in your NordVPN information then click Apply and Enable.

  • Connection Name: Choose a name for your ExpressVPN OpenVPN connection.
  • VPN Type: Select OpenVPN
  • Import .ovpn File: Upload the OpenVPN file that you downloaded.
  • Username and Password: Copy and paste your ExpressVPN manual service credentials from step 3.

8. You should now see the Profile say Connected, indicating that the NordVPN server is successfully connected to your router.

Asus ExpressVPN Connected

9. The VPN connection is automatically set to Apply to all devices.

If you only want certain devices to connect to the VPN, then turn off the VPN connection and switch off Apply to all devices.

Now click the pencil next to the Device section and select the devices (computer, phone, etc.) that you want to connect to VPN. Click OK and then click Apply all settings.

Apply VPN by Device
  1. Connect your devices to the Asus router network and visit the ExpressVPN website, at the top it should display Your Status: Protected.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

🚫📱Do not run ExpressVPN apps on devices connected to your ExpressVPNrouter. Using the app at the same time as the router VPN may cause conflicts and connection issues.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here