Search Results for: regular size sm

NordVPN Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports NordVPN using both NordLynx and OpenVPN.

NordLynx is recommended for most users. OpenVPN is also available and may be required for NordVPN Dedicated IP connections. Some Dedicated IP configurations require a private OpenVPN file imported as a Custom VPN.

Privacy Hero is cloud-managed, so you can complete the setup from any device with an internet connection. You do not need to be connected to Privacy Hero WiFi to change these settings.

NordVPN NordLynx Setup

NordLynx uses a NordVPN access token, not your regular NordVPN website email and password.

Open Privacy Hero and Select NordLynx

From a computer, smartphone, or tablet, open app.privacyhero.com.
Sign in with your Privacy Hero account email and password.
Open the VPN section.
Click Change and select NordVPN.
Choose NordLynx.

Generate Your NordVPN Access Token

In another browser tab, open NordVPN Access Tokens and sign in to your NordVPN account.
Complete any account or email verification requested by NordVPN.
Select Generate new token; choose Doesn’t expire if available, then copy the token.

Important: Treat your NordVPN token as a password. Do not share it publicly.

Connect Privacy Hero to NordVPN

Return to Privacy Hero, paste the token into the NordLynx token field, and click Save. The default country selection automatically chooses an available NordVPN server for that location.
Wait for the VPN status to show Connected.

NordVPN OpenVPN Setup

Use OpenVPN if you prefer the OpenVPN protocol or if your configuration requires it. OpenVPN requires NordVPN Manual Service Credentials, which are different from your website login email and password.

Select OpenVPN in Privacy Hero

Open app.privacyhero.com and sign in.
Open the VPN section.
Click Change and select NordVPN.
Select OpenVPN.

Get Your Manual Service Credentials

Open NordVPN Manual Service Credentials and sign in.
Complete NordVPN’s verification if prompted, then copy the current Service Username and Service Password.

Important: Do not enter your normal NordVPN website email and password into Privacy Hero’s OpenVPN fields.

Save Your OpenVPN Connection

Return to Privacy Hero and enter the manual service username and password in the OpenVPN credential fields. Click Save.
Confirm Privacy Hero shows the connection as Connected.

Choose a NordVPN Country or Specific Server

Privacy Hero can select a NordVPN server automatically, or you can choose a country or specify a server hostname.

Choose a Country

Open your NordVPN connection in Privacy Hero.
Open the Country dropdown.
Search for and select your preferred country.
Click Save. Privacy Hero will use an available NordVPN server for the selected country.

Use a Specific NordVPN Server

Open your NordVPN connection in Privacy Hero.
Open Advanced Options.
Enter the NordVPN server hostname, for example us12286.nordvpn.com.
Click Save.

Use NordVPN’s server recommendation tool if you need a hostname. NordVPN servers can be retired or taken offline for maintenance; if your specific server stops working, choose another server or return to country selection.

NordVPN Dedicated IP Setup

NordVPN Dedicated IP can require either the regular NordVPN OpenVPN connection or a private .ovpn file imported as a Custom VPN.

Method 1: OpenVPN Advanced Options

Try this first if your Dedicated IP works with the standard NordVPN OpenVPN setup.

Set up NordVPN → OpenVPN using your NordVPN Manual Service Credentials as described above.
Open Advanced Options.
Enter the Dedicated IP server hostname assigned to your account.
Click Save and check whether the VPN connects.
Verify that your public IP matches your assigned Dedicated IP.

If connected and the public IP matches, no additional configuration is needed.

Method 2: Custom VPN With a Private OpenVPN File

Some Dedicated IP servers require a private OpenVPN configuration file. If Method 1 does not connect, follow NordVPN’s Manual Dedicated IP Server Setup instructions.

Download Your Dedicated IP Configuration

Sign in to the NordVPN account associated with the Dedicated IP.
Locate your assigned Dedicated IP server using NordVPN’s manual setup instructions.
Download its OpenVPN UDP configuration file.
Save the .ovpn file to your computer or device.

Important: Use the private configuration file for your actual Dedicated IP, not a public NordVPN server file.

Upload the File as a Custom VPN

Open app.privacyhero.com and select VPN → Change.
Select Custom from the VPN provider dropdown, not NordVPN.
Upload your Dedicated IP UDP .ovpn file.
Enter your NordVPN Manual Service Username and Password.
Save the configuration, enable the VPN, and wait for Connected.
Verify the public IP matches your NordVPN Dedicated IP.

These are NordVPN’s separate manual service credentials, not your regular website login.

Verify Your NordVPN Connection

Connect your testing device to the Privacy Hero WiFi.
Disconnect any NordVPN or other VPN app running directly on that device.
Open a fresh private/incognito browser window.
Visit NordVPN What Is My IP.
Confirm the public IP and location match your selected NordVPN server (or assigned Dedicated IP).

Running a VPN application directly on the device at the same time as the router VPN can produce double-VPN conflicts and unexpected IP or location results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation region instead of your VPN server region. See Privacy Hero Streaming Relocation.

NordVPN Not Connecting?

If the VPN displays Failed, Connecting, or a timeout error, check for:

A server undergoing maintenance or no longer available.
An expired, revoked, or outdated NordLynx access token.
Incorrect or changed OpenVPN Manual Service Credentials.
Recent account changes or an inactive NordVPN subscription.
A protocol-specific issue.
A Dedicated IP that requires a private .ovpn file and Custom provider selection.

Follow Privacy Hero NordVPN Not Connecting or Showing Timeout Errors for troubleshooting.

No Internet After NordVPN Disconnects?

If internet access stops when the VPN disconnects, the VPN Kill Switch may be blocking normal traffic as intended. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, Private Relay, Private DNS, antivirus, and browser settings. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

Open VPN Fusion

Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.

VPN Fusion displays your saved VPN profiles and the Add Profile option.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

In VPN Fusion, open the VPN profile that should provide the default internet route.
Enable Apply to all devices (or Default Connection in firmware that uses that label).
Click Apply all settings, then enable the VPN profile.
Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.

ASUS VPN Fusion Apply to all devices setting and device count — Enable Apply to all devices to use the selected VPN as the default connection.

Method 2: Send Only Selected Devices Through a VPN

In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
Enable the VPN profile and verify the selected devices’ public IPs.
For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard

LaptopProton VPN — OpenVPN

Streaming deviceSurfshark — OpenVPN

Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
Enable only the profiles you need and confirm each shows connected.
Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

In VPN Fusion, confirm the target profile’s connection status is active.
Check the device’s assignment in the ASUS VPN Fusion interface.
On that same device, visit IPLeak.net or another public-IP checker.
Compare the reported public IP and location with the VPN server assigned to that device.
If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

Turn off VPN Fusion routing for a test device and confirm ISP internet works.
Turn on just one known-working VPN profile for that device.
Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

ASUS Guest WiFi With or Without VPN: Setup Guide

Dave · Oct 26, 2026 ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
Review any options for local-network access, guest isolation, and bands, then click Apply.
Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

In Guest Network Pro / Network, open the existing Guest Network profile.
Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
Set a clear name such as Home-ISP and secure it with a strong password.
In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Shop ASUS WiFi 7 Routers →

Wireless Repeater Bridge Setup

TeamFlashRouters · Apr 22, 2019 ·

If you need to extend your connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Repeater Bridge. In Wireless Repeater Bridge mode the FlashRouter connects to your main router on the same subnet via WiFi, and then transmits your internet signal via the FlashRouter for internet access anywhere in your home or office.

Preparing for Wireless Repeater Bridge Setup

Verify your wireless information

In order to setup your FlashRouter as a Wireless Repeater Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

Locate the Local IP Address of the existing wireless network

Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.

DD-WRT Router Setup for Wireless Repeater Bridge

Disable Firewall

Navigate to Security > Firewall

Set SPI Firewall to Disable.
Uncheck all boxes except for Filter Multicast.
Click Save.

Disable DNSmasq

Navigate to Services > Services

Set DNSmasq to Disable.
Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

Wireless Repeater Setup on DD-WRT FlashRouter - Add Virtual Interface

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater Bridge.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.

Set Wireless Mode to Repeater Bridge in FlashRouter DD-WRT Basic Wireless Settings Page

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

Wireless Repeater Setup on DD-WRT FlashRouter - Set SSID for Repeated Band

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Password

Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will bridge to.
Click Save.

Change the FlashRouter's Local IP Address

Navigate to Setup > Basic Setup

Wireless Repeater Bridge Setup on FlashRouter DD-WRT - Set Local Router IP, Gateway, Local DNS

Set the Local IP Address to a different address on the same subnet as the existing network that you noted early. (example: if the existing network is 192.168.1.1 then set the Local IP Address to 192.168.1.2)
Set the Gateway to the Local IP Address of the existing network. (example: 192.168.1.1)
Set the Local DNS to the Local IP Address of the existing network. (example: 192.168.1.1)
Click Save.

Change the FlashRouter's Operating Mode

Navigate to Setup > Advanced Routing

Set Operating Mode to Router in FlashRouter DD-WRT Basic Wireless Settings Page

Set the Operating Mode to Router.
Click Apply Settings.

Reboot your FlashRouter

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

AirVPN Manual OpenVPN Setup

TeamFlashRouters · Jun 11, 2019 ·

Preparing for Manual AirVPN Setup

Obtain your AirVPN OpenVPN Information

If you are not already a AirVPN user Sign Up Now.

1. Log in to your account on the AirVPN website.

AIRVPN OpenVPN Client Login for FlashRouter DD-WRT VPN Configuration

2. Click on the Client Area tab.

AIRVPN OpenVPN Client Area for FlashRouter DD-WRT VPN Configuration

3. Click on the Config Generator subtab.

AIRVPN OpenVPN Configuration Generator for FlashRouter DD-WRT VPN Configuration

4. Click on the Router icon under Choose your Operating System.

AIRVPN OpenVPN FlashRouter DD-WRT VPN Configuration

5. Select a Protocol under the Protocols section. We recommend UDP.

Select AIRVPN OpenVPN Encryption Protocol for FlashRouter DD-WRT VPN Configuration

6. Select one option under the Choose Servers section. AirVPN sorts these servers by Planet, Continent, Country, and Single servers. Choose whichever best suits your needs.

Sort AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

7. Scroll down towards the bottom of the page and click on Generate.

Generate AIRVPN OpenVPN Specific Certificates for FlashRouter DD-WRT VPN Configuration

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You will be copying the Server IP/Name, client.crt and client.key from this file.

Please note, all VPN servers have different keys and certificates. If you wish to change servers in the future, you will have to go through steps 1-7 again.

DD-WRT Router Setup for AirVPN

Navigate to Services > VPN

Enter AirVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP or TCP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA1

User Pass Authentication

Disable

Advanced Options

Enable

TLS Cipher

None

LZO Compression

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

TLS Auth Key

—–BEGIN OpenVPN Static key V1—–
7bb7a23a0f5f28d01e792df68f1764ab
f2688719288808bf58e8a2d4f9354ecf
132625dfb895fc3f6330ae1e868e4dfa
c164c0931593d7f9a7da9595cf353433
8896e1d0a987a0d19838944af8fea4e5
215a3a0c76f4c67d5a4aee6a53be66a4
c88b84f850030840fb30f8550ed8068f
35c1ef34ee8f40a0ea5862dfb6f8d3c5
7ab5e27ac2799cf93e8765ff63cd8cd8
6b391b813925cd373bb202796f64d16f
003d042ca828d1b07f18ba1d0cb0323d
df3ee9287e9e084e655699efb3cffa92
3626946fa372e7beee245e7a95b4c1d8
7d16cae685218d4b8afc019b22e41083
476ee9883fe666d236301e55b2062551
4d91c8a69467a758293994df1e6fa7ae
—–END OpenVPN Static key V1—–

CA Cert

—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents between <cert> and </cert> make sure to also include the following lines when copying and pasting:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents between <key> and </key> make sure to also include the following lines when copying and pasting:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful AirVPN connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit whatismyipaddress.com to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to AirVPN.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the AirVPN server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new client.key and private.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Asus RT-AC5300 DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC5300 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC5300 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC5300 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC #1

View AC5300 DD-WRT FlashRouter 5GHz #1 Settings

5.0 GHz - Wireless-AC #2

View AC5300 DD-WRT FlashRouter 5GHz #2 Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

RT-AC5300 DD-WRT Wireless Security

The preset Asus RT-AC5300 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View RT-AC5300 DD-WRT FlashRouter WiFi Seucirty Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC5300 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R9000 Nighthawk X10 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R9000 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R9000 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View R9000 DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View R9000 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AD

Additional DD-WRT WiFi Information

R9000 DD-WRT Wireless Security

The preset R9000 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

TROUBLESHOOTING

Trouble with your Netgear R9000 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R8500 Nighthawk X8 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R8500 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R8500 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC #1

View R8500 DD-WRT FlashRouter 5GHz #1 Settings

2.4 GHz - Wireless-N

View R8500 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC #2

View R8500 DD-WRT FlashRouter 5GHz #2 Settings

Additional DD-WRT WiFi Information

R8500 DD-WRT Wireless Security

The preset Netgear R8500 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

TROUBLESHOOTING

Trouble with your Netgear R8500 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Surfshark Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

Sign in to your Surfshark account.
Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

After setting up the key pair, select Choose a location or open the Locations section.
Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

Open app.privacyhero.com and log in to your Privacy Hero account.
Open the VPN section, click Change, and choose Custom as the VPN provider.
Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.

Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

Sign in to your Surfshark account.
Open VPN → Manual Setup, choose Router, and select OpenVPN.
Open the Credentials tab. If credentials are not yet available, select Generate credentials.
Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

Open app.privacyhero.com, sign in, and select the VPN section.
Click Change, select Custom, and choose OpenVPN.
Upload the Surfshark UDP .ovpn file you downloaded.
Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
Click Save, then confirm the VPN status shows Connected.

Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

Connect your device to the Privacy Hero WiFi or LAN.
Disconnect the Surfshark app or any other VPN app running directly on the testing device.
Open a fresh private/incognito browser window.
Visit Surfshark’s IP address checker.
Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.

Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
Download a fresh server configuration for another available Surfshark location and try again.
If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Why did my WiFi SSID change to ‘dd-wrt’?

Dave · May 3, 2019 ·

If you are seeing ‘dd-wrt’ in your available wireless networks instead of your regular FlashRouter24 and FlashRouter50 wireless network names (SSID) this means the router has been reset to default DD-WRT firmware settings.

Follow our instructions for Resetting and Reconfiguring your FlashRouter to get setup again.

Do not confuse your SSID being replaced by ‘dd-wrt’ with ‘dd-wrt vap’ appearing alongside your regular wireless network names.

If you are seeing ‘dd-wrt vap’ it likely means you did not rename your network when attempting to setup a guest network.

NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN

TeamFlashRouters · Oct 15, 2025 ·

Set up NordVPN on an ASUS router using AsusWRT VPN Fusion. Supported ASUS firmware offers three different VPN types: NordVPN (access-token integration), WireGuard (downloadable .conf file), and OpenVPN (manual service credentials plus an .ovpn file). Choose the method that matches your needs and your router’s available options.

All configuration is completed directly through your ASUS router’s administration interface using VPN Fusion. Before starting, make sure your router is connected to the internet, your firmware supports VPN Fusion, and you have an active NordVPN subscription.

Which NordVPN Option Should You Choose?

1. NordVPN

NordVPN access token and a country/region dropdown. The built-in ASUS/NordVPN integration is the simplest approach if you only need a country, not an exact server file.

Follow token setup →

2. WireGuard

Import a NordVPN .conf configuration file for a server selected in Nord Account. Useful when you want a downloaded profile for a particular server.

Follow WireGuard setup →

3. OpenVPN

Import a NordVPN .ovpn server file and enter your separate manual service username and password. Also used for NordVPN Dedicated IP.

Follow OpenVPN setup →

Option 1: NordVPN Dropdown — Token-Based NordLynx

Select the NordVPN type inside VPN Fusion. This is the integrated token-based setup and offers a country/region selection, rather than a manually imported server file.

In Nord Account, open NordVPN Access Tokens and complete email/account verification if requested.
Generate an access token, choose an expiry period if NordVPN offers that setting, and copy the token immediately (it may only be displayed once).
On your ASUS router, open VPN > VPN Fusion > Add profile.
Set VPN Type to NordVPN. Name the profile, select your preferred Region, and paste the token.
Choose Apply to all devices if you want it as the default route, or assign only selected devices (see the VPN Fusion guide below).
Click Apply and Enable / Apply all settings, as shown in your firmware, and verify the profile connects.

ASUS VPN Fusion NordVPN VPN type with Region and Token fields — Keep: existing ASUS NordVPN region/token form (remove any private token before publishing).

Need a specific server? Use the separate WireGuard file method below or the OpenVPN configuration-file method. Do not expect the token-based country dropdown to accept a .conf or .ovpn file.

Option 2: WireGuard Dropdown — Import a NordVPN .conf File

NordVPN now provides downloadable WireGuard configuration files through its manual server recommendation page. This is different from the built-in NordVPN token option in VPN Fusion.

Sign in to Nord Account and open NordVPN Server Recommendation.
Choose your preferred country and server; use the available filters if you need to narrow the list. Select a currently available server.
Choose Get setup configuration, select WireGuard from the protocol menu, and click Download config. Save the downloaded .conf file.
In your ASUS router settings open VPN > VPN Fusion > Add profile, then set VPN Type to WireGuard (not NordVPN).
Use the ASUS Import configuration / file-import control to select the NordVPN .conf file. Confirm the imported parameters and save the profile.
Choose the target devices or enable the default/all-devices route. Click Apply and Enable, then check the VPN status and your public IP.

NordVPN’s official instructions: How to download WireGuard and OpenVPN configuration files.

Option 3: OpenVPN Dropdown — Credentials + .ovpn File

OpenVPN requires two separate items: the configuration file for your desired server and NordVPN’s manual service credentials. Your normal Nord Account email/password is not the correct credential pair for this method.

Open NordVPN Manual Service Credentials and copy the service username and service password after any required verification.
Open NordVPN OpenVPN Configuration Files and choose a server/location. Download its UDP .ovpn file, or TCP .ovpn if UDP does not work on your network.
On ASUS, go to VPN > VPN Fusion > Add profile and set VPN Type to OpenVPN.
Enter a connection name, Import .ovpn file, and paste the NordVPN manual service username and password in the corresponding fields.
Choose devices or Apply to all devices, then click Apply and Enable. Confirm VPN Fusion shows a successful connection.

ASUS VPN Fusion OpenVPN VPN type with OVPN import and username password fields — Keep: existing ASUS OpenVPN profile form. New screenshots should use a larger clean capture if available.

Server selection: The location is controlled by the server named in the imported .ovpn file. To switch locations, import another server file or use a separate OpenVPN profile.

NordVPN Dedicated IP — OpenVPN Only

If you have purchased and activated the NordVPN Dedicated IP add-on, use your specific Dedicated IP OpenVPN configuration file. Do not select the ordinary NordVPN token integration or a regular shared server.

In your Nord Account, open the Dedicated IP details and download the assigned server’s OpenVPN UDP or TCP configuration file, following NordVPN Dedicated IP manual configuration instructions.
Open NordVPN Manual Service Credentials and copy the manual username and password.
In ASUS VPN Fusion > Add profile, choose OpenVPN.
Import the Dedicated IP .ovpn file, enter manual service credentials, save, enable, and verify the public IP matches your assigned Dedicated IP.

Assign Devices, Verify the VPN, and Troubleshoot

One VPN for everyone, or different VPNs for different devices?

VPN Fusion lets you use a VPN profile as the default connection for all devices or assign specific client devices to different profiles. Some supported ASUS models can maintain one WireGuard tunnel alongside multiple OpenVPN profiles, but the number of simultaneous tunnels is model/firmware dependent; creating multiple profiles does not mean all can be active simultaneously.

For step-by-step device assignments, default routing, profile conflicts, and bypassing the VPN, see How to Use ASUS VPN Fusion and Assign Devices to VPN Profiles. For a dedicated WiFi network with VPN or ISP routing, see ASUS Guest Network VPN / No-VPN Setup.

Verify the IP of the actual device

Confirm your chosen profile shows Connected in VPN Fusion.
Join the ASUS WiFi or LAN using a device that is actually assigned to that VPN profile.
Open NordVPN IP Address Check and compare the public IP/location with the intended server or Dedicated IP.
If the device shows an ISP IP, first check Apply to all devices and the per-device assignments in VPN Fusion.
Disconnect a NordVPN app, Apple iCloud Private Relay, browser VPN/proxy, or other device-level network service during testing. Follow Router VPN Shows Wrong IP? Check Device Settings.

If VPN Fusion will not connect

Temporarily disable the failing profile and confirm the ASUS router works using its normal ISP internet connection.
For NordVPN type, check that the access token is valid and hasn’t expired; regenerate if needed.
For WireGuard, import a fresh .conf from the Nord server recommendation page and make sure the profile is enabled.
For OpenVPN, double-check manual service credentials (not website credentials) and try a different server file or TCP instead of UDP.
Check that device-assignment rules point to the intended active profile, then retest with one clean device.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Shop ASUS WiFi 7 Routers →

Privacy Hero NordVPN Not Connecting or Showing Timeout Errors

Dave · Sep 22, 2026 ·

If NordVPN will not connect on Privacy Hero, shows a timeout error, remains stuck on Connecting, or displays Failed, the Privacy Hero router itself may still be working normally.

NordVPN connections can occasionally stop working when servers are placed into maintenance, removed or cycled out of service, account credentials change, or a previously saved NordVPN access token or manual service credential is no longer valid.

Start by confirming that Privacy Hero has normal internet access, then troubleshoot the NordVPN connection.

First: Confirm Privacy Hero Has Internet

Before changing your NordVPN settings, confirm that Privacy Hero itself has normal internet access.

Open app.privacyhero.com.
Open the VPN section.
If the VPN Kill Switch is enabled, temporarily turn it Off.
Turn the failed NordVPN connection off.
Connect a device to the Privacy Hero network.
Test normal internet access.

If internet access works normally with NordVPN and the Kill Switch disabled, the underlying Privacy Hero internet connection is working. Continue troubleshooting the NordVPN connection.

If your internet stopped working because NordVPN failed while the VPN Kill Switch was enabled, follow our Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Reconnect NordVPN

A temporary NordVPN server or connection issue may resolve without changing your account information.

Open the VPN section at app.privacyhero.com.
Turn the NordVPN connection off.
Wait a few seconds.
Turn NordVPN back on.
Allow the connection time to establish.
Check whether the VPN status changes to Connected.

If NordVPN still shows Failed, Connecting, or a timeout error, continue with the steps below.

Try Another NordVPN Server

NordVPN regularly maintains, replaces, and cycles servers in its network. A specific NordVPN server that worked previously may eventually be taken offline, removed, or temporarily unavailable.

If your Privacy Hero NordVPN connection is configured to use a specific server and suddenly stops working, try another server or return to the normal country selection.

Open app.privacyhero.com.
Open the VPN section.
Select your NordVPN connection.
If you previously entered a specific NordVPN server under Advanced Options, remove or replace that server.
Select the country or location you want to use.
Save the settings.
Reconnect NordVPN.
Check whether the status changes to Connected.

If you specifically need to use an individual NordVPN server, make sure that server is still active before continuing to use it.

Important: A previously working specific server should not be assumed to remain available indefinitely. NordVPN may change its server network over time.

Update Your NordVPN Token for NordLynx

Privacy Hero uses a NordVPN access token to authenticate NordLynx connections.

If the saved token is expired, revoked, replaced, or otherwise no longer valid, NordLynx may show Failed, Connecting, or a timeout error.

Generating a new token is a good troubleshooting step if your NordVPN account information has changed or the existing token is no longer working.

Sign in to your NordVPN account.
Open the NordVPN Access Tokens page.
Generate a new access token.
Select Doesn’t expire if NordVPN provides that option.
Copy the new token.
Open app.privacyhero.com.
Open the NordVPN settings.
Confirm that NordLynx is the selected protocol.
Replace the existing token with the newly generated token.
Save the settings.
Reconnect NordVPN.

Important: NordVPN access tokens are sensitive account credentials. Do not post or share your token publicly.

For complete setup instructions, see Privacy Hero NordVPN / NordLynx Setup.

Update NordVPN Manual Service Credentials for OpenVPN

If you are using OpenVPN instead of NordLynx, Privacy Hero uses NordVPN’s Manual Service Credentials.

These are different from the email address and password you normally use to sign in to the NordVPN website or application.

If the saved credentials are no longer valid, update them:

Sign in to your NordVPN account.
Open NordVPN Manual Service Credentials.
Copy the current service username and password.
Open app.privacyhero.com.
Open your NordVPN settings.
Confirm that OpenVPN is the selected protocol.
Replace the existing manual service credentials with the current credentials from NordVPN.
Save the settings.
Reconnect NordVPN.

Do not enter your regular NordVPN website email address and password in place of the manual service credentials.

Did You Recently Change Your NordVPN Account Information?

If NordVPN stopped connecting after an account change, update the authentication information stored in Privacy Hero.

This is especially important after changes such as:

Changing your NordVPN account password.
Changing or updating NordVPN account security settings.
Generating or replacing NordVPN access tokens.
Changes to NordVPN manual service credentials.
Renewing, changing, or restoring your NordVPN subscription.

The credentials used by Privacy Hero depend on the VPN protocol:

NordLynx: Uses a NordVPN access token.
OpenVPN: Uses NordVPN manual service credentials.

Your regular NordVPN website login should not be entered as the router’s OpenVPN credentials.

If you are unsure whether the existing authentication information is still valid, retrieve current credentials directly from your NordVPN account and update Privacy Hero.

Confirm Your NordVPN Subscription Is Active

Privacy Hero cannot establish a NordVPN connection if the NordVPN account being used no longer has active VPN service.

Sign in to your NordVPN account and confirm that your subscription is active before continuing with server, token, or credential troubleshooting.

Try Another VPN Protocol

If your NordVPN account, credentials, and server selection are correct but the connection still fails, try another NordVPN protocol available in Privacy Hero.

For example, if NordLynx is not connecting, testing OpenVPN can help determine whether the issue is specific to the protocol or authentication method.

Remember that changing protocols also changes the required NordVPN authentication:

NordLynx requires a NordVPN access token.
OpenVPN requires NordVPN manual service credentials.

Important: Do Not Run Two VPNs at Once

Do not leave the NordVPN application connected directly on your phone or computer while testing the Privacy Hero VPN.

Running a VPN application on the device while also routing that device through the Privacy Hero VPN creates a double-VPN connection and can cause routing, connectivity, or IP-location problems.

Disconnect the device-level NordVPN app before testing the router VPN.

Verify the NordVPN Connection

Once Privacy Hero displays NordVPN as Connected:

Connect your device to the Privacy Hero WiFi.
Make sure the NordVPN app on the device is disconnected.
Open a fresh private/incognito browser window.
Visit NordVPN What Is My IP.
Confirm that the public IP address and location correspond to your selected NordVPN location.
Test several websites or applications.

If you use the Privacy Hero VPN Kill Switch, enable it only after confirming that NordVPN is connected and working.

NordVPN Is Connected but One Device Shows the Wrong IP

If Privacy Hero shows NordVPN as Connected and other devices display the correct VPN IP, the NordVPN connection itself is likely working.

Check the affected device’s Privacy Hero VPN assignment and review any VPN, privacy, DNS, browser, antivirus, firewall, or security settings running directly on that device.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Privacy Hero VPN Kill Switch Setup

TeamFlashRouters · Apr 3, 2023 ·

The Privacy Hero VPN Kill Switch prevents regular internet traffic from passing through your router if its VPN disconnects or fails to connect. This helps prevent devices from using your normal ISP connection without VPN protection.

Before enabling: Make sure your VPN is already Connected and that internet access works through the VPN. The Kill Switch is optional, but useful if you prefer internet access to stop rather than continue unprotected when the VPN goes down.

Privacy Hero is managed at app.privacyhero.com. You can make changes using a computer, phone, or tablet.

How to Enable the VPN Kill Switch

Open app.privacyhero.com and sign in using your Privacy Hero account. If the router has not been activated yet, follow the Privacy Hero Activation and Setup guide first.
Open the VPN section of your Privacy Hero settings.
Confirm that your selected VPN provider is active and its connection status shows Connected. If the VPN is failing, fix the connection before proceeding.
Find VPN Killswitch (VPN Kill Switch) and move its toggle to On (orange). The setting is enabled when its toggle is On.
Keep a device connected to the Privacy Hero WiFi or LAN and confirm that ordinary websites work with the VPN connected.

Privacy Hero Security and Privacy VPN Killswitch toggle enabled, highlighted on the right side of the settings page — In Privacy Hero, the VPN Killswitch toggle is shown directly below the VPN provider setting.

Tip: To check the router’s VPN IP address, use a browser on a device connected to Privacy Hero, not on a phone using cellular data or another WiFi network. Disable any separate VPN app on the test device so you can verify the router VPN independently.

What Happens When the Kill Switch Is On?

VPN status	Kill Switch	Normal internet traffic
Connected	On	Allowed through the VPN
Disconnected or Failed	On	Blocked until the VPN reconnects or you turn the Kill Switch off
Disconnected or Failed	Off	May use the normal ISP connection without VPN protection

The Kill Switch does not turn off the WiFi network. Your device may stay connected to Privacy Hero WiFi but report No Internet when the VPN is unavailable. Some phones and computers may automatically switch to cellular data or another saved WiFi network.

Access Privacy Hero Even When the Kill Switch Is Blocking Internet

Important: Privacy Hero includes a built-in exception for its cloud management dashboard. If the VPN is down and the Kill Switch blocks normal internet traffic, you can still access app.privacyhero.com while connected to the Privacy Hero WiFi or LAN network, provided the router itself still has its upstream/cloud connection.

This means you can sign in, check the VPN status, change the server or protocol, or switch off the Kill Switch without first leaving the Privacy Hero network.

You can also access the cloud dashboard through another working WiFi connection or cellular data. If the router shows Offline in the dashboard, that indicates a separate WAN or cloud-connectivity problem rather than normal Kill Switch behavior.

How to Turn Off the Kill Switch or Restore Internet

If your VPN has stopped connecting and you need to restore ordinary internet access temporarily:

Open app.privacyhero.com, including from the Privacy Hero network if the Kill Switch is blocking regular internet.
Open VPN and check the current VPN status.
Move VPN Killswitch to Off.
If the VPN remains Failed or Disconnected, temporarily switch the VPN connection Off and test internet access using a device on the Privacy Hero network.
Repair the VPN connection, confirm Connected, and verify that ordinary internet traffic works through the VPN before turning the Kill Switch back On.

Security note: With the Kill Switch off, devices may access the internet without VPN protection if the VPN is disconnected. Re-enable it after testing if preventing non-VPN traffic is your goal.

VPN showing Failed? Privacy Hero includes a Reset option that removes all saved third-party VPN settings. With an active Privacy Premium subscription, the router reconnects using the built-in Privacy Hero VPN. With Privacy Core, it returns to your normal ISP connection without a router VPN.

Before using Reset, see our How to Reset a Failed VPN Connection on Privacy Hero guide.

For a complete diagnosis of WiFi connected but no internet, VPN failures, and router Offline status, follow the Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Related Privacy Hero Guides

ExpressVPN Setup for Privacy Hero

TeamFlashRouters · Aug 14, 2025 ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
In the left navigation, select Set Up Devices.
Under Applications, expand Advanced setup and choose Manual Configuration.
Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

Open app.privacyhero.com and sign in to your Privacy Hero account.
Open the VPN section.
Click Change beside the VPN provider and choose Custom.
Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.

Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
Click Save to apply the configuration and establish the VPN connection.
Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.

Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

Connect the testing device to the Privacy Hero WiFi or LAN network.
Disconnect the ExpressVPN app or any other VPN application running directly on that device.
Open a fresh private/incognito browser window.
Visit ExpressVPN What Is My IP.
Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
Check that you selected Custom in Privacy Hero, rather than another VPN provider.
Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

ProtonVPN Setup for Privacy Hero

TeamFlashRouters · Sep 17, 2025 ·

Privacy Hero supports Proton VPN through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It uses a downloadable .conf configuration file. OpenVPN uses a downloadable .ovpn file and a separate Proton VPN OpenVPN username and password (not your regular Proton Account login).

Privacy Hero is cloud-managed. You can configure the VPN from a computer, smartphone, or tablet connected to any internet network; you do not need to be on the Privacy Hero WiFi to change settings.

Proton VPN WireGuard Setup (Recommended)

WireGuard uses a configuration file generated by Proton VPN. You do not need an OpenVPN username and password for this method.

Generate Your Proton VPN WireGuard Configuration

Open your Proton VPN account and sign in.
Go to Downloads → WireGuard configuration.
Enter a recognizable configuration name and select Router as the platform.
Choose your preferred VPN options and an available server or country. For a straightforward setup, select a standard server configuration.
Click Create, then Download to save the generated WireGuard .conf file to your device.

Important: A WireGuard configuration contains a private key. Keep the downloaded file private; do not paste its contents into public posts or unprotected support messages. For detailed Proton account instructions, see Proton VPN: Download WireGuard Configuration Files.

Upload WireGuard to Privacy Hero

Open app.privacyhero.com and log in to your Privacy Hero account.
Open the VPN section, click Change beside the VPN provider, and choose Custom.
Select WireGuard and upload the Proton VPN .conf file you downloaded.
Click Save to apply the configuration and connect. Confirm that Privacy Hero reports Connected.

Privacy Hero Custom WireGuard configuration screen showing the configuration file upload

Proton VPN OpenVPN Setup

OpenVPN is an alternative to WireGuard. You need a Proton VPN OpenVPN-specific username and password and a server .ovpn configuration file.

Get Your Proton VPN OpenVPN Credentials

Sign in to your Proton VPN account.
Open Account → OpenVPN username to find your separate OpenVPN username and password.
Copy these credentials or keep the page open. Do not use your usual Proton Account email and password for the manual OpenVPN connection.

For help locating these credentials, see Proton VPN: How to Sign In / OpenVPN Credentials.

Download Your Proton VPN OpenVPN Server File

In your Proton VPN account, go to Downloads → OpenVPN configuration files.
Select Router as the platform and UDP as the protocol (recommended starting point). If UDP does not work on your network, you can try a TCP configuration later.
Select an available country or individual server from the standard configuration list, then click Download to save its .ovpn file.

For additional details about the file download options, see Proton VPN: Download OpenVPN Configuration Files.

Upload OpenVPN to Privacy Hero

Open app.privacyhero.com and sign in to your Privacy Hero account.
Open the VPN section, click Change, and select Custom as the VPN provider.
Choose OpenVPN and upload the Proton VPN .ovpn file you downloaded.
Enter your separate Proton VPN OpenVPN username and password into the Custom VPN fields.
Click Save, then confirm Privacy Hero displays Connected.

Privacy Hero Custom OpenVPN setup with configuration file upload and separate VPN username and password fields

Verify Your Proton VPN Connection

After Privacy Hero reports Connected, confirm that a device on the router network is using your Proton VPN connection.

Connect your testing device to the Privacy Hero WiFi or LAN network.
Disable any Proton VPN app or other VPN application running directly on that device, so it does not create a second VPN connection.
Open a private/incognito browser window.
Visit Proton VPN’s IP Address Checker.
Verify that the public IP address and approximate location correspond to the Proton VPN server configured in Privacy Hero.

Important: You can manage Privacy Hero from another WiFi network or cellular data. However, the device performing the VPN IP test must be connected to the Privacy Hero network.

Streaming Relocation and VPN Location

If Privacy Hero Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation location rather than the country selected in your Proton VPN configuration. See Privacy Hero Streaming Relocation.

Proton VPN Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, work through these checks:

Confirm that you selected Custom as the VPN provider in Privacy Hero and chose the protocol that matches your configuration file.
For WireGuard, create and download a fresh Proton VPN .conf file for an available server, then upload it again. Do not use an OpenVPN .ovpn file in the WireGuard section.
For OpenVPN, verify that you entered Proton VPN’s separate OpenVPN username and password, not your regular Proton Account login.
Download a fresh configuration for a different Proton VPN server and reconnect. Proton VPN occasionally changes server configurations.
If using OpenVPN UDP and the connection still fails, download and try a TCP .ovpn configuration file to test for a protocol-related issue.
Temporarily disable the VPN Kill Switch while checking whether internet works without the VPN. Re-enable your preferred Kill Switch setting once testing is complete.

VPN Disconnects and Devices Have No Internet?

The VPN Kill Switch may be intentionally blocking normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

Check the affected device for a second VPN app, iCloud Private Relay, Private DNS, browser proxy settings, or filtering software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Asus RT-AC68U B1 / C1 / AC1900 DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC68U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC68U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC68U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC68U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

RT-AC68U DD-WRT Wireless Security

The preset RT-AC68U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC68U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC68U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC66U DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC66U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC66U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC66U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC66U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

RT-AC66U DD-WRT Wireless Security

The preset RT-AC66U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View AC66U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC66U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Asus RT-AC56U DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Asus RT-AC56U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC56U with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View AC56U DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View AC56U DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

RT-AC56U DD-WRT Wireless Security

The preset RT-AC56U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

ViewAC56U DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Asus RT-AC56U WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Wireless Repeater Setup

TeamFlashRouters · Apr 16, 2019 ·

If you need to extend your wireless and wired connection capabilities, you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to your main router via WiFi and then creates a completely separate network segment for you. This new “repeater” network then transmits your internet signal via FlashRouter LAN ports for wired internet access while also creating a new Wireless Extender network that will expand your wireless network range throughout your home or office just like a mesh network.

Preparing for Wireless Repeater Setup

Verify your wireless information

To connect your FlashRouter wirelessly to your existing wireless network you will need the Wireless Network Name (SSID) and Wireless Password of the existing wireless network that you will repeat. Verify and note this information.

We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.

DD-WRT Router Setup for Wireless Repeater

Disable Firewall

Navigate to Security > Firewall

Wireless Repeater Setup on DD-WRT FlashRouter - Disable SPI Firewall

Set SPI Firewall to Disable.
Click Save.

Enter Wireless settings

Navigate to Wireless > Basic Settings

Select Add in the Virtual Interface area.

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater.

FlashRouters with a Broadcom chipset will have Repeater as an option in the dropdown but FlashRouters with an Atheroes chipset will not. Select Client or Client (Routed) if Repeater is not listed for your FlashRouter.

Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will repeat.

Wireless Repeater Setup on DD-WRT FlashRouter - Set Wireless Mode to Repeater

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
Change the WPA Shared Key to match exactly with the Wireless Password of the network that you will repeat.
Click Apply Settings.

Verify the Internet Connection

In the top right hand corner of the DD-WRT you should see the WAN IP change from 0.0.0.0 to an actual IP Address. Once this changes navigate to any website to test your Internet connection.

Wireless Repeater Setup on DD-WRT FlashRouter - Verify WAN Connection

Back up your settings

Navigate to the Administration > Backup page.

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Linksys WRT1200AC DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Linksys WRT1200AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1200AC with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT1200AC DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View WRT1900AC DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

WRT1200AC DD-WRT Wireless Security

The preset WRT1200AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View WRT1200AC DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Linksys WRT1200AC WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R6400V2 DD-WRT WiFi Settings

Dave · Feb 21, 2019 ·

Recommended DD-WRT WiFi settings for the Linksys R6400V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of WiFi settings exactly as they appear in the Linksys R6400V2 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R6400 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R6400 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

R6400V2 DD-WRT Wireless Security

The preset WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R6400 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R6400 V2 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Linksys WRT1900ACS / ACV2 / ACV1 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Linksys WRT1900AC are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Linksys WRT1900AC with DD-WRT firmware.

Please note there are many versions of the WRT1900AC with the same recommended settings, including WRT1900ACv1, WRT1900ACv2, WRT1900ACS, and WRT1900ACSv2.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View WRT1900ACS DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View WRT1900ACS DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

WRT1900AC DD-WRT Wireless Security

The preset WRT1900AC FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 6038E07E70A8 then your WiFi password is Wireless#6038E

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View WRT1900AC DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Linksys WRT1900ACS WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R6300V2 DD-WRT WiFi Settings

Dave · Mar 5, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R6300V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R6300V2 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R6300 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R6300 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

R6300V2 DD-WRT Wireless Security

The preset R6300V2 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R6300 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R6300 V2 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R7800 Nighthawk X4S DD-WRT WiFi Settings

Dave · Mar 4, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R7800 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7800 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View R7800 DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View R7800 DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

R7800 DD-WRT Wireless Security

The preset R7800 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7800 DD-WRT FlashRouter WiFi SecuritySettings

TROUBLESHOOTING

Trouble with your Netgear R7800 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R7000 Nighthawk DD-WRT WiFi Settings

Dave · Feb 25, 2019 ·

Recommended DD-WRT WiFi settings for the Netgear R7000 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7000 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R7000 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R7000 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

R7000 DD-WRT Wireless Security

The preset R7000 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7000 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R7000 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

CyberGhost Manual OpenVPN Setup

TeamFlashRouters · Apr 9, 2019 ·

Preparing for Manual CyberGhost Setup

Obtain your CyberGhost OpenVPN Information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

2. Select My Devices.

3. Select Other and then Configure New Device.

CyberGhost Website OpenVPN Configuration Files Generator Cyberghost - Website Screen CyberGhost Website OpenVPN Configuration Files Generator

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 3

5. Press View configuration.

CyberGhost Website OpenVPN Configuration Files Generator 2

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the ca.crt, client.crt, and client.key files. All CyberGhost servers have different keys and certificates.

DD-WRT Router Setup for CyberGhost

Navigate to Services > VPN

Enter CyberGhost settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you selected in your account. Be sure there are no extra spaces or characters.

Port

443

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your CyberGhost account.

Password

Enter the Password you obtained in your CyberGhost account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

Additional Config

tun-mtu 1500
fragment 1300
mssfix 1300

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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==
—–END CERTIFICATE—–

Public Client Cert

Copy and paste all contents of the client.crt file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and paste all contents of the client.key file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful CyberGhost connection

Navigate to Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit CyberGhost’s website to verify your new IP address and virtual location.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the CyberGhost server

Follow the instructions for obtaining the OpenVPN information from above.
Enter the new Server Address in the Server IP/Name field.
Enter the new Username and Password.
Enter the new ca.crt, client.crt, and client.key
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

VPN Unlimited Manual OpenVPN Setup

TeamFlashRouters · Apr 19, 2019 ·

Preparing for Manual VPN Unlimited Setup

Verify your VPN Unlimited login information

If you are not already a VPN Unlimited user Sign Up Now.

Log in to your account on the VPN Unlimited website.

Generate your VPN Unlimited OVPN Configuration Files

1. Navigate to the VPN Unlimited section in the dropdown on the top left.

2. Set Device to “Manually create new device…”

3. Name your device.

4. Select Server.

5. Set Protocol to OpenVPN.

FlashRouters DD-WRT Privacy App - Create Open VPN Configuration files

6. Open the ‘.OVPN’ file in a word processing program.

NOTE: We highly recommend using Notepad++ for Windows or TextEdit for Apple to open these files in order to preserve text format.

DD-WRT Router Setup for VPN Unlimited

Navigate to the Services > VPN

Enter VPN Unlimited settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the bottom of the .ovpn file you downloaded above, you can find your server address, it should look something like us-la.vpnunlimitedapp.com

Port

1194 for Tunnel Protocol UDP
80 for Tunnel Protocol TCP

Tunnel Device

TUN

Tunnel Protocol

UDP or TCP

Encryption cipher

Blowfish-CBC

Hash Algorithm

SHA1

User Pass Authentication

Disabled

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

Additional Config

persist-key
persist-tun

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

Copy and Paste all contents in between the <cert> and </cert> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

Copy and Paste all contents in between the <key> and </key> lines from your .ovpn file starting and ending with:
—–BEGIN RSA PRIVATE KEY—–
…
—–END RSA PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful VPN Unlimited connection

Navigate to the Status > OpenVPN

You should now see a CONNECTED SUCCESS message.
Visit to WhatIsMyIPAddress to verify your new IP address and virtual location.

Back up your settings

Navigate to the Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the VPN Unlimited server

Follow Steps 1-6 to Generate an .OVPN file for the server you wish to connect to and open it a word processing program.
Copy and paste the server IP Address into the Server IP/Name field.
Copy and paste the <cert> into the Public Client Cert field.
Copy and paste the <key> into the Private Client Key field.
Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

SmartDNSProxy SmartDNS Setup

TeamFlashRouters · Jun 13, 2019 ·

SmartDNSProxy offers a SmartDNS service for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.

SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.

SmartDNS and VPN should not be configured at the same time. When using a SmartDNS connection, make sure to disable your VPN connection on the FlashRouter.

Register your IP Address

If you are not already a SmartDNSProxy user Sign Up Now.

Click on Sign Up and fill in the requested information.

Access the e-mail you entered and Verify your new account.

SmartDNSProxy SmartDNS Activate DNS for DD-WRT FlashRouter

Your account will now be verified.

Activate SmartDNSProxy SmartDNS Service and Subscription

Login to SmartDNSProxy

SmartDNSProxy Server Location Addresses for FlashRouter DD-WRT Settings

Visit SmartDNSProxy’s DNS servers list and note the DNS servers of the location you would like to access content from.

Enter SmartDNSProxy SmartDNS servers on your FlashRouter

Navigate to Setup > Basic Setup

Scroll down to Network Address Server Settings (DHCP).
Enter in any combination of SmartDNSProxy SmartDNS servers you noted into Static DNS fields 1 and 2.
Click Apply Settings at the bottom of the page.
Reboot the FlashRouter.

Once the router is fully booted back up, you can access your desired regional content on any device that connects to the FlashRouter’s network.

How to Reset a Failed VPN Connection on Privacy Hero

Dave · Oct 24, 2026 ·

If your Privacy Hero VPN connection shows Failed, you can use the new Reset button to clear the saved third-party VPN settings and return the router to its available default connection. This is useful when a VPN setup is stuck or you want to start again without manually removing the existing third-party VPN configuration.

Important: A VPN reset removes all saved third-party VPN settings from Privacy Hero. You will need to configure that provider again if you want to use it later. The connection Privacy Hero uses after resetting depends on your subscription plan.

When Should You Use the VPN Reset Button?

Use Reset when the current VPN connection is in a Failed state and you want to remove the third-party VPN setup and restore a working default connection. It is a more complete action than simply retrying the same VPN server.

Use it if the third-party VPN settings are no longer working and you want to start over.
Use it if you no longer want the saved third-party VPN configuration.
Do not use it if you need to preserve the existing VPN configuration. First try reconnecting or choosing a different VPN server or protocol.

The Reset action addresses the VPN configuration. It does not repair a disconnected WAN cable, an ISP outage, or a router that cannot reach the Privacy Hero cloud.

How to Reset a Failed VPN Connection

Open app.privacyhero.com in a browser and sign in to your Privacy Hero account.
Select your Privacy Hero router, then open its VPN settings.
Confirm the existing VPN connection is showing Failed.
Find the new Reset button in the failed VPN connection area. Before clicking, be aware that this action will remove all third-party VPN settings saved on the router.
Click Reset. If a confirmation message appears, review it before confirming. Allow the dashboard to apply the reset and update the VPN connection status.
Check the resulting connection using the subscription comparison below, then verify internet access from a device connected to Privacy Hero.

Dashboard access during a Kill Switch block: Privacy Hero permits access to app.privacyhero.com over its WiFi or LAN even when the VPN Kill Switch blocks ordinary internet traffic, as long as the router maintains its upstream/cloud connection. You can also manage the router from cellular data or another working internet connection.

What Happens After Reset? Privacy Premium vs. Privacy Core

VPN Reset: Side-by-Side Plan Comparison
Privacy Premium Active subscription	Privacy Core
Third-party VPN settingsRemoved	Third-party VPN settingsRemoved
Connection after resetBuilt-in Privacy Hero VPN	Connection after resetNormal ISP internet
VPN protection afterwardYes, when the built-in VPN is connected	VPN protection afterwardNo router VPN is active

Privacy Core users: After resetting, your normal internet access is not VPN-protected by Privacy Hero. If you want a third-party VPN again, you must configure it again in Privacy Hero.

Privacy Premium users: Check that the built-in Privacy Hero VPN shows Connected before assuming your traffic is going through the VPN. A working upstream internet connection and active Premium subscription are still required.

What Information Does the Reset Remove?

The VPN Reset button clears the third-party VPN configuration stored in Privacy Hero. This means any saved third-party provider details will need to be entered or imported again before that provider can be used.

Depending on the provider and protocol you had configured, this may include the saved VPN provider selection, server details, credentials or tokens, and custom OpenVPN or WireGuard settings. Have your provider login or configuration materials available if you plan to set up that VPN again.

This is a VPN configuration reset, not a request to cancel your third-party VPN subscription. It should not be confused with a full router factory reset.

How to Verify Internet and VPN Status After Reset

Refresh the Privacy Hero dashboard and reopen VPN.
If you have Privacy Premium, verify that the built-in Privacy Hero VPN is selected and shows Connected.
If you have Privacy Core, verify that the third-party VPN configuration is gone and ordinary internet access is available through your ISP connection.
Connect a computer or phone to the Privacy Hero WiFi or LAN. To test the router by itself, turn off any VPN application running directly on that device.
Load a regular website, then check your public IP address using ipleak.net. Premium should show a VPN IP if its built-in VPN is connected; Core will normally show your ISP public IP.

If you have Streaming Relocation enabled, some streaming services may use their separately selected location; that is not necessarily the same location shown by a general public IP check.

Reset Complete but Still No Internet?

Check the VPN Kill Switch. If it is still enabled while there is no working VPN connection, it may block ordinary internet traffic. Review the Kill Switch setting before assuming the router has lost WiFi.
Check the connection status. A router listed as Offline may have a WAN, ISP, or cloud-communication problem. The VPN reset cannot fix an upstream internet outage.
Check the network wiring. Confirm your main router or ISP gateway has internet access and the cable is connected to the Privacy Hero WAN/Internet port.
Check a device on Privacy Hero WiFi or LAN. Make sure you are testing the Privacy Hero network rather than another WiFi or cellular connection.
Check your subscription. An active Privacy Premium subscription is required for the built-in Privacy Hero VPN fallback described above. Privacy Core returns to ordinary ISP internet access.

For Kill Switch behavior and restoring internet, see Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting. To learn when to enable the feature, see Privacy Hero VPN Kill Switch Setup.

VPN FAQs

admin · Jan 29, 2019 ·

VPN FAQs

General VPN FAQ Answers

What is a VPN?

VPN is an acronym for ‘Virtual Private Network’, historically used by private organizations to seamlessly link geographically diverse locations via the Internet. A VPN ‘tunnels’ traffic between two devices by transmitting it over a secure network. There are also clearly identifiable benefits to individual Internet users accessing a VPN.

A VPN provides you with top-level security and privacy for all your Internet downloading, streaming and browsing. As long as you are signed into your VPN account, all data you transmit over the Internet is encrypted.
A VPN encrypts your device by hiding the IP address assigned by your Internet Service Provider (ISP) and replacing it with the IP address of your choosing from the list of server locations belonging to your VPN provider. This masks your identity when visiting sites that geo-restricted content, and helps you avoid devious local Internet marketing and advertising schemes that track you through your IP address.

Will a FlashRouter with a built-in VPN client speed up my connection?

FlashRouters are relatively new models that may enhance data transfers across your home network or extend the range of your Wireless signal. However, the speed at which you download or stream content can not exceed the speed of the connection you pay for through your ISP. Purchasing a FlashRouter or signing up for VPN service WILL NOT transform your regular connection into a high-speed broadband connection.

At the same time, if you do have a broadband connection, a FlashRouter with a VPN connection may slow down your transfer speeds due to the processor encrypting all of your data. In certain cases a FlashRouter with a VPN can also prevent throttling by an ISP of specific service like Netflix or Amazon Video.

Which VPN provider should I use?

Our routers have been tested to perform with many of the most popular VPN providers such as ExpressVPN, NordVPN, IPVanish, PrivateInternetAccess & CyberGhost among 50+ VPN providers so that subscribers can get the maximum benefit from their VPN service. If you prefer another provider, that is not an issue at all. You can still use a DD-WRT VPN FlashRouter with any VPN provider that offers DD-WRT router integration support. Contact our team for further information about using our routers with your VPN service of choice or if you need a VPN provider recommendation based on your location.

Should my FlashRouter replace my old router?

A FlashRouter will work as a standalone router by connecting your modem to its Wide Area Network (WAN) port, or using it in a Dual Router Network by connecting it to your existing router through a Local Area Network (LAN)/Ethernet port. Either way a FlashRouter can be configured to tunnel all traffic through the VPN server of your choosing.

If you would like to set up your Home Network so that some devices are being tunneled through a VPN server, and others are connecting to your Internet Service Provider (ISP) within your home country, then using your FlashRouter as an auxiliary device is recommended.

VPN Security FAQ Answers

Can I change my IP address to one in another country?

YES! The countries that you can change your IP address to depend on the offerings of your specific VPN providers. Prices and server locations vary across all VPN providers.

If you choose to purchase a FlashRouter then you will not have to install any VPN client software on your computer to change your IP address; the VPN will already be configured within the router. Therefore, any device you plug into this FlashRouter is automatically assigned the IP address of your selected VPN server.

When is my connection secure?

As long as the VPN account preset into your FlashRouter is active, any device that is connected to the Internet through this router has its network traffic encrypted, and IP address masked. With a FlashRouter you never have to physically login to your VPN account, as the settings have been stored in the router’s DD-WRT firmware.

Don’t worry though! If you are not at home, and using Wi-Fi in a public location, you can still use your VPN account on a laptop or mobile device through various other methods.

How can I be sure my connection is safe and encrypted?

In order to make sure that the connection on your FlashRouter is being rerouted appropriately through your VPN service, visit What is my IP address and make sure the location listed is the one you have chosen in your VPN settings, NOT your actual location.

If you wish, there is an Internet Kill Switch available as well for your router which will block the internet whenever you disconnect from VPN.

What VPN connection standards are supported on a FlashRouter?

Currently we support the OpenVPN protocol for VPN client connections. PPTP VPN has been deemed as insecure by the privacy community and so we no longer offer support for PPTP VPN connections.

Technical VPN FAQ Answers

What operating systems do you support?

A FlashRouter can be used with any operating system, be it Windows, Mac OS or Linux. A FlashRouter can also be used as a wireless access point for iPhones, iPads, and Android devices.

Our routers also work in conjunction with any other brand of router of ADSL or DSL modem/router combo from ISPs across the world.

Can I set up a VPN on a PS4, Xbox One, Kindle Fire, Roku, AppleTV or other devices without native VPN support?

THAT’S WHAT WE ARE HERE FOR!

If you purchase one of our FlashRouters loaded with DD-WRT firmware, you can run the client VPN connection from your router. Once you do this every device connected to the router will tunnel through the VPN.

Now you can stream content like Netflix, BBC iPlayer, Pandora Hulu, or Amazon Instant to your TV through any of these devices, instead of being constrained to streaming content on your computer!

If you need a recommendation for a VPN service with a specific streaming platform do not hesitate to contact our support team.

Search Results for: regular size sm

NordVPN NordLynx Setup

Open Privacy Hero and Select NordLynx

Generate Your NordVPN Access Token

Connect Privacy Hero to NordVPN

NordVPN OpenVPN Setup

Select OpenVPN in Privacy Hero

Get Your Manual Service Credentials

Save Your OpenVPN Connection

Choose a NordVPN Country or Specific Server

Choose a Country

Use a Specific NordVPN Server

NordVPN Dedicated IP Setup

Method 1: OpenVPN Advanced Options

Method 2: Custom VPN With a Private OpenVPN File

Download Your Dedicated IP Configuration

Upload the File as a Custom VPN

Verify Your NordVPN Connection

Streaming Relocation and VPN Location

NordVPN Not Connecting?

No Internet After NordVPN Disconnects?

VPN Connected, but One Device Shows the Wrong IP?

Related Privacy Hero Guides

Open VPN Fusion

Method 1: Apply One VPN to All Devices

Method 2: Send Only Selected Devices Through a VPN

How Multiple VPN Connections Work

Confirm a Device Is Actually Using the VPN

Quick isolation test

Want a Separate WiFi Network With or Without VPN?

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

What You Need Before Starting

Create a Dedicated WiFi Network That Uses the VPN

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

Create a Separate WiFi Network Without a VPN

Confirm Each WiFi Network Uses the Intended Internet Route

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Every network still uses the VPN

A phone reports the wrong IP although the guest VPN profile is correct

Guest devices cannot reach local printers or other LAN devices

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

Preparing for Wireless Repeater Bridge Setup

Verify your wireless information

Locate the Local IP Address of the existing wireless network

DD-WRT Router Setup for Wireless Repeater Bridge

Disable Firewall

Disable DNSmasq

Enter Wireless settings

Enter Wireless Security settings

Change the FlashRouter's Local IP Address

Change the FlashRouter's Operating Mode

Reboot your FlashRouter

Back up your settings

Preparing for Manual AirVPN Setup

Obtain your AirVPN OpenVPN Information

DD-WRT Router Setup for AirVPN

Enter AirVPN settings

OpenVPN Client

Verify a successful AirVPN connection

Back up your settings

How to change the AirVPN server

2.4 GHz - Wireless-N

5.0 GHz - Wireless-AC #1

5.0 GHz - Wireless-AC #2

Additional DD-WRT WiFi Information

RT-AC5300 DD-WRT Wireless Security

5.0 GHz - Wireless-AC

2.4 GHz - Wireless-N

5.0 GHz - Wireless-AD

Additional DD-WRT WiFi Information

R9000 DD-WRT Wireless Security

5.0 GHz - Wireless-AC #1

2.4 GHz - Wireless-N

5.0 GHz - Wireless-AC #2

Additional DD-WRT WiFi Information

R8500 DD-WRT Wireless Security

Surfshark WireGuard Setup (Recommended)