
Quick Start Guide for Cudy FlashRouters
Find setup guides, FAQs and troubleshooting tips for Cudy configured FlashRouters.

Prioritizing Privacy














AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500

RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300

WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM





Aircove

R6300 V2, R6400 V2, R6700 V3, R7000, R7000P

RT-AC56U, RT-AC56R, RT-AC56S, RT-AC68U V3, RT-AC87U

EA6200, WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM




Flint WiFi 6 AX1800 VPN Router


Support GuidesSelect your router type


Flint 2 GL-MT6000, Flint GL-AX1800, Slate GL-AXT1800, Beryl GL-MT3000, Marble GL-B3000
AC1450, R6220, R6230, R6250, R6260, R6300 V1, R6300 V2, R6400 V1, R6400 V2, R6700 V1, R6700 V2, R6700 V3, R7000, R7000P, R7800, R8000, R9000, XR500
RT-AC56U/R, RT-AC68U V1, RT-AC68U V2, RT-AC1900P, RT-AC87U, RT-AC3100, RT-AC5300
WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM
ExpressVPN Aircove, Aircove Go
R6300 V2, R6400 V2, R6700 V3, R7000, R7000P
RT-AC56U, RT-AC56R, RT-AC56S, RT-AC68U V3, RT-AC87U
EA6200, WRT1200AC, WRT1900AC V1, WRT1900AC V2, WRT1900ACS V1, WRT1900ACS V2, WRT32X, WRT3200ACM
TeamFlashRouters · ·
If you need to extend your wireless and wired connection capabilities, you can setup a FlashRouter as a Wireless Repeater. In Wireless Repeater mode the FlashRouter connects to your main router via WiFi and then creates a completely separate network segment for you. This new “repeater” network then transmits your internet signal via FlashRouter LAN ports for wired internet access while also creating a new Wireless Extender network that will expand your wireless network range throughout your home or office just like a mesh network.
To connect your FlashRouter wirelessly to your existing wireless network you will need the Wireless Network Name (SSID) and Wireless Password of the existing wireless network that you will repeat. Verify and note this information.
We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.
Navigate to Security > Firewall

Navigate to Wireless > Basic Settings
Select Add in the Virtual Interface area.

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater.
FlashRouters with a Broadcom chipset will have Repeater as an option in the dropdown but FlashRouters with an Atheroes chipset will not. Select Client or Client (Routed) if Repeater is not listed for your FlashRouter.
Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will repeat.

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

CLICK SAVE
Navigate to Wireless > Wireless Security

In the top right hand corner of the DD-WRT you should see the WAN IP change from 0.0.0.0 to an actual IP Address. Once this changes navigate to any website to test your Internet connection.

Navigate to the Administration > Backup page.
Still having issues? Visit our Troubleshooting section to diagnose common problems here.
Select your operating system below to setup the FlashRouters Privacy App on your router, the easiest way to connect to the best VPN services. For ExpressVPN FlashRouter users, please view the following section for setting up the ExpressVPN app.

Can’t find the answer you are looking for? Open a support ticket and our support team will be there to assist you.
admin · ·
Plug and Play VPN Support
Yes you can!
To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.
To have your router VPN preconfigured:
Privacy Hero 2 Only:
While our team isn’t able to pre-configure the Privacy Hero 2 VPN Router before shipping it out since you’ll have to make a Privacy Hero user account and register your router, we can assist you with the VPN set up process once you receive the router and create your Privacy Hero user account via 1-on-1 remote session, email, or live chat on our site.
You can also use our step-by-step Privacy Hero VPN Router Setup Guide to complete the process.
Dedicated IP Addresses from NordVPN, SurfShark, & TorGuard are supported on almost all of our FlashRouter options.
Check out our Dedicated IP Addresses Blog Post for more details!
Yes!
You will be able to connect the FlashRouter of your choosing to your current mesh router via ethernet port as shown below:
ISP Modem/Router —- FlashRouter (VPN) —- Main Mesh Router (VPN from FlashRouter)
This setup will allow you to keep your mesh network with added VPN protection, as well as add the FlashRouter wireless network for your devices.
You can disable the wifi on the FlashRouter also if you only wanted to use the mesh network for wifi.
At FlashRouters, we offer expert router flashing and VPN configuration services through our Flash My Router plans. Whether your router needs custom firmware flashing or just a VPN configuration, we ensure it’s set up for maximum security, privacy, and streaming performance with your chosen VPN provider.
The appointment will take place via remote software. During the appointment, our team will also answer any questions you may have about using the VPN on the router. Flashing is done out of the East Coast of the United States – we will do our best to accommodate your time zone difference if you are located in another part of the United States or another country.
👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans
✅ Flashing vs. Configuration: Some routers require custom firmware (flashing) to enable VPN, while others can be configured without flashing.
✅ Fully Optimized: Our team ensures your router is ready to securely connect to your VPN, block ISP tracking, and enhance your streaming experience.
✅ Remote Assistance Available: Get expert help setting up your VPN connection remotely if needed.
At FlashRouters, we handle VPN setup differently based on your router brand and model. Some routers require flashing custom firmware (like DD-WRT or AsusWRT-Merlin), while others can be configured without flashing.
These routers require firmware flashing (DD-WRT or AsusWRT-Merlin) to enable VPN compatibility.
These routers have built-in VPN support and only require proper setup.
📌 Other brands are not supported at this time. If you have a different router, we recommend checking out our pre-flashed router options.
We work with a wide range of VPN providers, including:
(If your provider isn’t listed, reach out – we may still be able to support it!)
👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans
🔹 Need help selecting the right option? Contact our support team! We’re happy to assist.
You can easily combine the free 1 year of NordVPN included with your FlashRouter purchase once you receive the NordVPN Activation Code Email from FlashRouters.com. The email is typically received within 24 hours of order completion and will contain a link as well as an activation code.
This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.
Privacy Hero 2 Only:
You can easily combine the free 1 year of NordVPN included with the Privacy Hero 2 VPN Router during the router activation process.
After activating the router, you’ll receive a NordVPN activation code within your privacy hero account dashboard. This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.
New
Recertified (RM)
Open Box
US Customers (Single Router Solution):
Almost all Internet Service Providers(ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port.
US Customers (Dual Router Solution):
Yes, FlashRouters are compatible with your ISP in what is called a Dual Router Set Up.
For this type of setup, you would use your current router or modem router to connect to your local ISP while using a FlashRouter to connect to your VPN. This is recommended as you will not overhaul your network with a new router, and you will be able to use your selected VPN service on the devices you wish to use it with.
This set up would result in the creation of two networks, which can be seen as the “Local Network” and the “FlashRouter Network”. All devices connected to the FlashRouter Network will go through the VPN service.
For any device you would prefer to use without a VPN, you can connect to the local network. The chain of devices would be connected from LAN ton your modem or modem/router to WAN on the FlashRouter, with your current router connected to the FlashRouter via Ethernet cable.
International Customers (Single Router Solution):
Almost all Internet Service Providers (ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port.
International Customers (Dual Router Solution):
ISPs should all be compatible. Some providers require VLAN tagging/VID settings when wiring directly from modem to FlashRouter.
For this type of setup, you would use your current router or modem router to connect to your local ISP while using a FlashRouter to connect to your VPN. This is recommended as you will not overhaul your network with a new router, and you will be able to use your selected VPN service on the devices you wish to use it with.
This set up would result in the creation of two networks, which can be seen as the “Local Network” and the “FlashRouter Network”. All devices connected to the FlashRouter Network will go through the VPN service.
For any device you would prefer to use without a VPN, you can connect to the local network. The chain of devices would be connected from LAN ton your modem or modem/router to WAN on the FlashRouter, with your current router connected to the FlashRouter via Ethernet cable.
Open Source firmware like DD-WRT or Assu Merlin has many features equivalent to what stock firmware has, in addition to adding new features to a router. However, some features are lost from the stock firmware when a router is flashed.
These are typically features that are put into the stock firmware by the manufacturers themselves. Things like the Linksys App and the NetGear Genie are examples of what would not be available or compatible on the router after flashing.
Most routers also have a WPS button. By default, the WPS button’s functionality is disabled when a router is flashed as it can be vulnerable and a security risk. It can be re-enabled by following this guide but we do not recommend it.
A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.
Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.
Plug and Play VPN Support
Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.
To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.
To have your router VPN pre-configured:
Please note: If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.
Yes! A large number of our customers use their FlashRouters to “work from home” no matter where your travels take you. Check out our Working Remotely Blog Post for more details.
Location: VPN Services offer many server locations to encrypt your traffic through. They are located in several countries worldwide for creating a private VPN tunnel for your online activities. A business VPN connects to specific central servers for data or directly to your office, creating a direct tunnel for accessing sensitive work documents and information.
Logging: Most VPN services offer log-free connections for total anonymity and security when connected (it is important to check out their terms of service and privacy policy for full details). A business VPN is monitored and maintained by employers such as corporations, hospitals or universities.
Protection: VPN services secure your family’s personal data while using computers, SmartTVs and various Internet of Things devices. Business VPNs protect the data of the company while you are tunneling into work.
There are in fact several trusted VPN providers that have services specially tailored for business use. NordVPN Teams and VyprVPN for Business offer a full suite of solutions like user management tools, dedicated IPs, personal product managers, global server access, business pricing, and more.
These solutions allow you to quickly deploy a safe and secure corporate network without building and maintaining your own servers. If you are a small business looking to quickly secure remote workers as they shift to work from home, and you do not have an in-house IT expert, then you should consider NordVPN Teams or VyprVPN for Business.
Even better, when choosing a business VPN provider like NordVPN or VyprVPN, employees can use routers with direct NordVPN and VyprVPN integration already included through the FR Privacy App. Meaning that a full network kill switch, routing by device, automatic connections, and more are all included as features with your business VPN connection.
Many of our customers have found that they can connect to both their corporate and personal VPN, however due to the variables beyond our control, we cannot guarantee this for every unique situation.
Using two VPNs at once can lead to unpredictable results. Bouncing your network traffic to multiple servers before finally arriving at it’s intended destination can sometimes introduce speed and connection issues.
Please consider that some employers and agencies are more vigilant regarding third party VPN use than others. There are tools readily available that detect the use of VPN services.
While these tools cannot decrypt and view your network traffic, they can tell your employer that you are potentially using a VPN, which can be against company policy.
If your corporate and personal VPN do not work together, then you can always set the computer using your work VPN to bypass the FlashRouter’s VPN tunnel by accessing the router admin panel for your device.
This way, your computer would only use the work VPN. Keep in mind however, your location would appear as your actual location to your work.
Every FlashRouter also comes with a 30 Day Satisfaction Guarantee.
If in the event you determine the FlashRouter is not working out for you, you can return the device within the first 30 Days. A $25 restocking fee does apply.
Of course! If you have an OpenVPN server running on a local machine or hosted on a cloud provider like Amazon Web Services (AWS), FlashRouters can create a custom router client configuration to connect the entire router and all connected devices to your OpenVPN server. Instead of employees connecting device-by-device, a router-based VPN connection allows for always-on secure VPN tunneling.
Our service team is here to work with you to test and ensure compatibility before purchasing. Interested in a router based custom client VPN solution for your remote workers? Please do not hesitate to contact us.
And, if you’re looking for a specific router, take a look at some of our most popular options!
To reset your password, you’ll want to click the “Account” icon in the upper right hand corner on our main website (Flashrouters.com). Once clicked, a menu will open where you can enter your login information, or select the “Forgot Password” button to trigger a reset email.
If you’re still having issues accessing your FlashRouters.com customer account after attempting a password reset, please reach out to us at support@flashrouters.com for further assistance.
We accept Apple Pay, Google Pay, and all major cred/debit card providers on our payment method options page during checkout.
If you’d like to complete a purchase using PayPal as a payment method, please contact our team at support@flashrouters.com to request an invoice.
We strive to process and ship all orders within one business day. If you wish to make changes or cancellations, please contact us within 24 hours of placing your order at support@flashrouters.com with your order number and the changes you’d like to make.
While we will do our best to accommodate your request, please note that we cannot guarantee changes or cancellations.
Please note that if you need to update the shipping address, the order will require reapproval through our fraud prevention system with the new address.
Some customers have found that trying the methods below have helped solve any checkout errors they may have encountered:
⚡️Clearing cache
⚡️Refreshing web page
⚡️Switching web browsers
⚡️Using an incognito/private window
⚡️Confirming all billing information is accurate
⚡️Disable VPN if one is enabled
⚡️Disable Ad & Script Blockers if enabled
⚡️If you’re using a mobile device, switching to a computer or laptop would be ideal.
TeamFlashRouters · ·
If you need to extend your connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Repeater Bridge. In Wireless Repeater Bridge mode the FlashRouter connects to your main router on the same subnet via WiFi, and then transmits your internet signal via the FlashRouter for internet access anywhere in your home or office.
In order to setup your FlashRouter as a Wireless Repeater Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.
We recommend using a 2.4GHz network to repeat as this network will have more range. Be sure to click Add under the 2.4GHz settings and not the 5GHz settings.
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
Navigate to Security > Firewall

Navigate to Services > Services

Navigate to Wireless > Basic Settings
Select Add in the Virtual Interface area.

In the Wireless Physical Interface settings for the 2.4GHz network set the Wireless Mode to Repeater Bridge.
Change the Wireless Network Name (SSID) to match exactly with the Wireless Network Name of the network that you will bridge to.

In the Virtual Interfaces settings change the Wireless Network Name (SSID) to FlashRouter24 or any other unique SSID.

CLICK SAVE
Navigate to Wireless > Wireless Security

Navigate to Setup > Basic Setup

Navigate to Setup > Advanced Routing

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.
Navigate to Administration > Backup
Still having issues? Visit our Troubleshooting section to diagnose common problems here.
TeamFlashRouters · ·
If you need to extend your wired connection capabilities and you are not able to wire directly into your main router, you can setup a FlashRouter as a Wireless Client Bridge. In Wireless Client Bridge mode the FlashRouter connects to your main router via WiFi, and then transmits your internet signal via the FlashRouter LAN ports for wired internet access anywhere in your home or office.
In order to setup your FlashRouter as a Wireless Client Bridge, you will need the exact SSID and password of your existing wireless network. Make sure you have this information before proceeding.
We recommend using a 2.4GHz network to repeat as this network will have more range.
Locate the Local IP Address of the existing router that the FlashRouter will be bridged to.
Navigate to Security > Firewall

Navigate to Services > Services

Navigate to Wireless > Basic Settings

Navigate to Wireless > Wireless Security

Navigate to Setup > Basic Setup

Power off the FlashRouter for 30 seconds and then power it back on. When it boots back up you will be able to access the FlashRouter’s settings at the new Local IP Address that you set. Your existing network and the FlashRouter’s network will now be bridged wirelessly.
Your FlashRouter is now providing wired connection access to your main router network. Wireless connections to the FlashRouter are disabled in this setup.
Navigate to Administration > Backup
Still having issues? Visit our Troubleshooting section to diagnose common problems here.
admin · ·
An IP (Internet Protocol) Address is a numerical assignment for each device (cell phone, iPad, laptop computer, printer etc) inside a network that uses the Internet Protocol for communication. Internet Protocol is responsible for routing information packets across network boundaries. It is the main protocol establishing the Internet.
An IP address serves two predominant functions. First is to host or network interface identification. Second, it provides location addressing. To put it bluntly, an IP address tells wherever you are connecting, to whom you are visiting, and where you are located.
DNS (Domain Name System) is a protocol within the TCP/IP protocol that uses a set of standards for how computers exchange data on the Internet and on many private networks.
The basic job of DNS is to convert a user-friendly domain name into an IP address that computers use to identify one another. Think of DNS like your cellphone contact list; you tap the name and the phone contacts to a phone number.
It is easier to remember flashrouters.com, rather than its IP address. Imagine if you had to remember all of the IP addresses of your favorite websites!
DNSMasq is a local DNS server that speeds up host-name searches from your computer/Internet connection after pressing enter.
Basically, DNSMasq gives the router some advanced enterprise functionality – caching DNS records locally so you have a faster browsing experience. Your computer only has to go to the router instead of repeatedly scouring the web for a commonly visited site.
Throughput is the average rate of successful delivery of messages through a network. Simply put, throughput measures the speed of message delivery inside a network. If you think about it in relationship to networks and Internet connections, throughput defines the user experience. The key to a pleasing user experience is uninterrupted service and smooth data transfer.
In order to improve throughput, you should get a router with more memory. If you notice that your network is running slowly due to congestion, you could probably benefit by upgrading your router to one with more memory. FlashMemory and RAM on a router add more room to prevent network congestion and improve throughput.
Most of FlashRouters‘ high-end units come with at least 8 MB of Flash memory and 64 MB of RAM which should be more than capable for providing for the average home users’ or small business will need in the future.
PPPoE stands for Point-to-Point Protocol over Ethernet, a network protocol for encapsulating Point-to-Point Protocol (PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual users connect to a DSL modem over Ethernet.
With PPPoE, users virtually “dial” from one machine to another over an Ethernet network, establish a point-to-point connection and then data packets are securely transported through the connection.
PPPoE offers an Internet service provider (ISP) an easier way to track exactly how much bandwidth you are using in case they want to charge for it in the future.
VPN Encryption: If you are connected to the VPN on your home network, then any data that flows over the Internet is entirely encrypted whether you are connected to the Internet either wired or wirelessly. This means that if your Local ISP was trying to see what you are browsing or downloading, they would not be able to see your data.
Wireless Network Security: If you leave your wireless network open or insecure, it does not matter whether Internet traffic is encrypted, because someone can directly see what you are doing on your network, or even worse, can go in and put a wireless password on your network, locking you out. They may also be able to access folders and files on your computer without your control.
Best thing to do is protect your wireless network with a WPA secured password along with your VPN connection.
No.
According to our in-house testing and multiple DD-WRT community reports, we have found that the Shellshock vulnerability will not work on with DD-WRT or TomatoUSB installed router. The vulnerability is based on a shell called BASH (Bourne Again Shell) but DD-WRT & Tomato firmware use BusyBox which is confirmed to not have this issue.
Please be advised that if you are using Optware on your DD-WRT router there is a chance that implementation is BASH based. Only used trusted optware on your router.
Dave · ·
On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.
The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.
Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.
ASUS official walkthrough: Guest Network Pro / VPN Network Setup.
ASUS also documents this path: Assign a VPN to Guest Network Pro.
Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.
Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.
Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.
Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.
Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.
Upgrade your ASUS router
Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.
TeamFlashRouters · ·
It can be very useful to setup static local IP addresses for devices on your FlashRouter network. By assigning specific IP’s to specific devices you can better control and manage how your network and the internet interacts with each device.
Once you setup a static IP you can set access restrictions, monitor and control bandwidth, as well as bypass a router VPN connection or setup a device specific Kill Switch. Without a static IP assignment you may lose device specific settings when the DHCP lease to the router expires.
Navigate to Services > Services

If a device has wireless and ethernet capabilities the MAC Addresses will be different for a wireless connection and an ethernet connection. Make sure to set a static IP for both MAC Addresses in this case.

[zendesk_request_form]
TeamFlashRouters · ·
You can connect to NordVPN on your GL.iNet router using NordLynx, OpenVPN, or a Dedicated IP.
NordLynx: Choose your preferred city or country from NordVPN’s server list
OpenVPN: Choose your preferred city or country from NordVPN’s server list.
Dedicated IP (optional): Enter your unique configuration file if you’ve been assigned a static NordVPN IP.
If you are not already a NordVPN user Sign Up Now.
1. Get your NordVPN Access Token for NordLynx connections. Log in to your NordVPN account and select NordVPN from your list of Services.

2. At the bottom of the page click Get Access token and you will receive a code via email. Enter this code to proceed.

3. After you enter the email code select Generate new token and set it to Doesn’t expire. Copy this token.


4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
5. Navigate to the VPN tab and select Wireguard Client then choose NordVPN. Enter your Token then click Save and Continue

6. Select your preferred server locations, and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.


3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.

5. Select the NordVPN group, enter your manual credentials, then click Save Credentials & Get Servers.


6. Choose UDP (recommended), select your preferred server locations, and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

1. Get your NordVPN manual service credentials for OpenVPN connections. Log in to your NordVPN account and select NordVPN from your list of Services.

2. At the bottom of the page in the Manual Setup section click Setup NordVPN manually then under the Configuration section go to Service credentials. Click Verify email to receive a code via email and enter the code to view and copy your credentials.


3. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
4. Navigate to the VPN tab and select OpenVPN Client.

5. Download your Dedicated IP configuration file from the NordVPN website.
6. Click +New Group and name your NordVPN Dedicated IP connection, then upload the configuration file, enter your manual service credentials and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.
🚫📱Do not run NordVPN apps on devices connected to your NordVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.
Feel free to submit a ticket and we will get back to you as soon as possible.
Dave · ·
You can connect to ProtonVPN on your GL.iNet router using Wireguard or OpenVPN.
Wireguard: Download your preferred server .conf configuration file from the ProtonVPN website.
OpenVPN: Download your preferred server .ovpn configuration file from the ProtonVPN website.
If you are not already a ProtonVPN user Sign Up Now.
1. Login to your ProtonVPN account and go to the Downloads section of your ProtonVPN account page

2. Scroll down to find the WireGuard configuration section. Name your configuration and then select Router as the platform, and select Standard server configs.

3. Click Create button to choose the recommended server or scroll down to choose and Download any of the available server files from the list.

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
5. Navigate to the VPN tab and select WireGuard Client then click + New Group and name your connection and click the check to save.

6. Upload the configuration file and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

1. Log in to your ProtonVPN account and navigate to the Account tab. Scroll down to find your OpenVPN specific Username and Password.

2. Go to the Downloads section of your ProtonVPN account page

3. Scroll down to find the OpenVPN configuration Files. Select Router as the platform, UDP as the protocol, and select Standard server configs. Choose your preferred country and download the configuration file.

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.
View our guide for more instructions on how to access GL.iNet firmware settings.
5. Navigate to the VPN tab and select OpenVPN Client.

6. Select Add Manually then click + New Group and name your connection and click the check to save.


7. Upload the configuration file and input your username and password, click Apply.

8. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

9. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.
🚫📱Do not run ProtonVPN apps on devices connected to your ProtonVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.
Feel free to submit a ticket and we will get back to you as soon as possible.
Dave · ·
The Roqos Core includes a suite of user access settings which can be used as Parental Controls.
You can create individual user profiles and assign specific devices. Using these profiles you can restrict access, block certain content, or even monitor internet usage if you choose to do so.


A device can only be assigned to one user. Access restrictions you place on a user such as scheduled internet access or content restriction will apply to all devices assigned to that user regardless of who in your home is actually using the device at that time.




Please note that in order to collect device information, you must enable this functionality on your Roqos. It is disabled by default.
Still having issues? Visit our Troubleshooting section to diagnose common problems here.
TeamFlashRouters · ·
If you are not already an ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.


4. Click the Server Location(s) that you want to connect to. This will download a .ovpn file to your computer that we will use later on. There is no need to open the file. For this example I have selected New York but feel free to select any server listed there or multiple servers.

Login to GL.iNet firmware settings in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network. For more instructions on how to access the firmware settings view our guide here.
1. Navigate to the VPN tab and select OpenVPN Client.

2. Click New Group.

3. Enter ExpressVPN and click the check mark.

4. Select the .ovpn file(s) you downloaded earlier and upload them here.

5. Enter in the ExpressVPN username and password that you obtained earlier. Do NOT enter your ExpressVPN account email and password login. Click Apply.

6. Select VPN Dashboard.

7. Set the Enable toggle to On to begin the ExpressVPN connection.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.
Still having issues? Visit the VPN Troubleshooting section.
TeamFlashRouters · ·
DD-WRT open source firmware removes many firmware vulnerabilities and backdoor access issues that may cause problems in stock firmware. DD-WRT is also updated more frequently than stock firmware, so be sure to always check with the FlashRouter support team to see which DD-WRT build we recommend for the highest level of security for your router at any time.
Aside from avoiding common issues and flaws with stock firmware, DD-WRT give you more control over the firmware settings and allows you to take some extra steps to really lock down your network security. In this article we highlight additional options for WiFi network security and also preventative measures for remote execution attacks.
Navigate to Wireless > MAC Filter

Navigate to Services > Services

Navigate to Administration > Management

TeamFlashRouters · ·
A DNS Leak is an instance where your ISP receives DNS requests despite being connected to a VPN tunnel.
Updates to web browsers have added DNS settings capabilities, while this often makes your browsing experience more secure it can also effect the results of a DNS leak test. You can go into your browser’s settings and search for “DNS” and disable the DNS of the browser for more accurate DNS leak test results.
A simple web search for “DNS settings [browser name]” should return helpful information for finding the setting in your browser.
1. On the Setup > Basic Setup page of the DD-WRT settings check the Ignore WAN DNS box.
This setting may not appear in older DD-WRT firmware builds. If it is not appearing for you, upgrade your DD-WRT firmware.

2. Lower on the same page check the Forced DNS Redirection box.

3. Click Apply Settings at the bottom of the page and then wait a full minute and power the FlashRouter off and back on. Reconnect to the FlashRouter’s network once it boots back up and then make sure you are connected to VPN by going to https://whatismyipaddress.com then perform the DNS leak test again.
Adding your VPN provider’s DNS servers to the router’s configuration can be helpful as well. The DNS servers are typically found on the VPN provider’s website or you can reach out to their team for a recommendation of what DNS servers to enter.
TeamFlashRouters · ·
You can connect to ExpressVPN on your AsusWRT router using OpenVPN.
If you are not already a ExpressVPN user Sign Up Now.
1. Log in to your account on the ExpressVPN website.

2. In the “Set up your devices” section, click More and select Manual Configuration from the menu options.

3. Copy the Username and Password that are displayed on the right

4. Download a server file from any of the available regions shown in the ExpressVPN Manual Configuration section (Americas, Europe, Asia Pacific, etc)

5. Log in to the Asus settings page by connecting to the Asus router’s WiFi (or wired LAN) on your computer. Then, enter 192.168.50.1 or asusrouter.com in the browser.
View our guide for more instructions on how to access AsusWRT firmware settings.
6. Navigate to the VPN tab and then click on the VPN Fusion tab, then click Add Profile


7. Fill in your NordVPN information then click Apply and Enable.
8. You should now see the Profile say Connected, indicating that the NordVPN server is successfully connected to your router.

9. The VPN connection is automatically set to Apply to all devices.
If you only want certain devices to connect to the VPN, then turn off the VPN connection and switch off Apply to all devices.
Now click the pencil next to the Device section and select the devices (computer, phone, etc.) that you want to connect to VPN. Click OK and then click Apply all settings.

🚫📱Do not run ExpressVPN apps on devices connected to your ExpressVPNrouter. Using the app at the same time as the router VPN may cause conflicts and connection issues.
Still having issues? Visit the VPN Troubleshooting section.
Dave · ·
Recommended DD-WRT WiFi settings for the Asus RT-AC68U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC68U with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.


Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
The preset RT-AC68U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

Trouble with your Asus RT-AC68U WiFi? Visit the Wireless troubleshooting section.
TeamFlashRouters · ·
Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.
WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.
Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.
WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.
Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.
Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.
Important: These are not your regular Surfshark website email and password. Keep the service credentials private.
Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.
You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.
When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.
If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:
The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.
If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.
Dave · ·
Recommended DD-WRT WiFi settings for the Asus RT-AC66U are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.
Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Asus RT-AC66U with DD-WRT firmware.
Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.


Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.
The preset RT-AC66U FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C
Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

Trouble with your Asus RT-AC66U WiFi? Visit the Wireless troubleshooting section.