FlashRouters Support Portal

Prioritizing Privacy

Search Results for: section 53 of t

Netgear R6300V2 DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Netgear R6300V2 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R6300V2 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R6300 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R6300 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R6300V2 DD-WRT Wireless Security

The preset R6300V2 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R6300 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R6300 V2 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

ExpressVPN Setup for AsusWRT Firmware Routers

· ·

You can connect to ExpressVPN on your AsusWRT router using OpenVPN.

Quick Options

  • OpenVPN: Download your preferred server .ovpn configuration file from the ExpressVPN website.

:point_right: If you are not already a ExpressVPN user Sign Up Now.

EXPRESSVPN SETUP GUIDE FOR ASUSWRT

1. Log in to your account on the ExpressVPN website.

2. In the “Set up your devices” section, click More and select Manual Configuration from the menu options.

3. Copy the Username and Password that are displayed on the right

ExpressVPN Manual Service Credentials

4. Download a server file from any of the available regions shown in the ExpressVPN Manual Configuration section (Americas, Europe, Asia Pacific, etc)

ExpressVPN Download .ovpn file

5. Log in to the Asus settings page by connecting to the Asus router’s WiFi (or wired LAN) on your computer. Then, enter 192.168.50.1 or asusrouter.com in the browser.

View our guide for more instructions on how to access AsusWRT firmware settings.

6. Navigate to the VPN tab and then click on the VPN Fusion tab, then click Add Profile

Click the VPN Button
VPN Fusion Add Profile

7.  Fill in your NordVPN information then click Apply and Enable.

  • Connection Name: Choose a name for your ExpressVPN OpenVPN connection.
  • VPN Type: Select OpenVPN
  • Import .ovpn File: Upload the OpenVPN file that you downloaded.
  • Username and Password: Copy and paste your ExpressVPN manual service credentials from step 3.

8. You should now see the Profile say Connected, indicating that the NordVPN server is successfully connected to your router.

Asus ExpressVPN Connected

9. The VPN connection is automatically set to Apply to all devices.

If you only want certain devices to connect to the VPN, then turn off the VPN connection and switch off Apply to all devices.

Now click the pencil next to the Device section and select the devices (computer, phone, etc.) that you want to connect to VPN. Click OK and then click Apply all settings.

Apply VPN by Device
  1. Connect your devices to the Asus router network and visit the ExpressVPN website, at the top it should display Your Status: Protected.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

🚫📱Do not run ExpressVPN apps on devices connected to your ExpressVPNrouter. Using the app at the same time as the router VPN may cause conflicts and connection issues.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Netgear R7800 Nighthawk X4S DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Netgear R7800 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7800 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

5.0 GHz - Wireless-AC

View R7800 DD-WRT FlashRouter 5GHz Settings

2.4 GHz - Wireless-N

View R7800 DD-WRT FlashRouter 2.4GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R7800 DD-WRT Wireless Security

The preset R7800 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7800 DD-WRT FlashRouter WiFi SecuritySettings

TROUBLESHOOTING

Trouble with your Netgear R7800 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Netgear R7000 Nighthawk DD-WRT WiFi Settings

· ·

Recommended DD-WRT WiFi settings for the Netgear R7000 are based on extensive testing by FlashRouters. Please note that optimal settings may vary depending on external factors such as home size, interference, and the types of WiFi devices you are connecting in your network.

Screenshots below provide a visual display of recommended WiFi and encryption settings exactly as they appear in the Netgear R7000 with DD-WRT firmware.

Navigate to the Wireless > Basic Settings to view or edit WiFi network settings.

2.4 GHz - Wireless-N

View R7000 DD-WRT FlashRouter 2.4GHz Settings

5.0 GHz - Wireless-AC

View R7000 DD-WRT FlashRouter 5GHz Settings

Additional DD-WRT WiFi Information

Intimidated by all the available WiFi settings? The DD-WRT website provides extensive information about all of the available configuration options in the firmware. Learn about everything from Wireless channels to channel widths and more in the Basic Wireless Settings – DD-WRT Wiki.

R7000 DD-WRT Wireless Security

The preset R7000 FlashRouter WiFi password is Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Navigate to the Wireless > Wireless Security to view or edit WiFi passwords.

View R7000 DD-WRT FlashRouter WiFi Security Settings

TROUBLESHOOTING

Trouble with your Netgear R7000 WiFi? Visit the Wireless troubleshooting section.

Troubleshoot Here

Surfshark Setup for Privacy Hero

· ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.

Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

How do I boost my Wireless Transmission power?

· ·

Boost the wireless transmission power if you need to increase the wireless range of the FlashRouter.

Important Information

We recommend reading the entry in the DD-WRT Wiki to familiarize yourself with what TX Power values represent.

Broadcom routers

  • Netgear R8500
  • Netgear R7000
  • Netgear R6400 V2
  • Netgear R6300 V2
  • Asus RT-AC5300
  • Asus RT-AC66U
  • Asus RT-AC56U

Navigate to Wireless > WL# or ath# Advanced

  1. Set the TX Power to the desired value.
  2. Click Apply Settings.
Boost TX Power in DD-WRT Advanced Wireless Settings page to Increase Wireless Transmission

Atheros routers

  • Netgear R9000
  • Netgear R7800
  • Linksys WRT3200ACM
  • LinksysWRT32X
  • Linksys WRT1900AC/v2/ACS
  • LinksysWRT1200AC

Navigate to Wireless > Basic Settings

  1. Check Advanced Settings under the wireless interface you would like to boost.
  2. Set the TX Power to the desired value.
  3. Click Apply Settings.
Boost TX Power in DD-WRT Advanced Wireless Settings page to Increase Wireless Transmission

We advise to proceed with caution when setting the TX Power. This has been known to negatively effect the hardware if set too high.

ProtonVPN Setup Guide for GL.iNet Routers

· ·

You can connect to ProtonVPN on your GL.iNet router using Wireguard or OpenVPN.

Quick Options

  • Wireguard: Download your preferred server .conf configuration file from the ProtonVPN website.

  • OpenVPN: Download your preferred server .ovpn configuration file from the ProtonVPN website.

:point_right: If you are not already a ProtonVPN user Sign Up Now.

ProtonVPN Wireguard Setup for GLiNet (Recommended)

1. Login to your ProtonVPN account and go to the Downloads section of your ProtonVPN account page

2. Scroll down to find the WireGuard configuration section. Name your configuration and then select Router as the platform, and select Standard server configs.

3. Click Create button to choose the recommended server or scroll down to choose and Download any of the available server files from the list.

4.  Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select WireGuard Client then click + New Group and name your connection and click the check to save.

6. Upload the configuration file and click Apply.

7. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

8. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

ProtonVPN OpenVPN Setup for GLiNet

1. Log in to your ProtonVPN account and navigate to the Account tab. Scroll down to find your OpenVPN specific Username and Password.

2. Go to the Downloads section of your ProtonVPN account page

ProtonVPN Downloads

3. Scroll down to find the OpenVPN configuration Files. Select Router as the platform, UDP as the protocol, and select Standard server configs. Choose your preferred country and download the configuration file.

4. Login to GL.iNet firmware settings (usually 192.168.8.1) in a browser on any computer or smart device connected to the GL.iNet FlashRouter’s network.

View our guide for more instructions on how to access GL.iNet firmware settings.

5. Navigate to the VPN tab and select OpenVPN Client.

GL.iNet VPN OpenVPN Client

6. Select Add Manually then click + New Group and name your connection and click the check to save.

7. Upload the configuration file and input your username and password, click Apply.

8. Start a connection by clicking the 3 dots (…) > Start next to your chosen server.

9. A green dot confirms success. You can also switch between Global Mode or Policy Mode for routing in the VPN Dashboard.

  1. You should now see information appear in the Server Address, Server Listen Port, Traffic Statistics, and Client Virtual IP areas.
  2. Visit ProtonVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.

🚫📱Do not run ProtonVPN apps on devices connected to your ProtonVPN router. Using the app at the same time as the router VPN may cause conflicts and connection issues.

Still having issues?

Feel free to submit a ticket and we will get back to you as soon as possible.

IPv6 Internet Setup

· ·

Most ISPs only support IPv4. Unless your ISP supports IPv6 then enabling it on the FlashRouter will not enable it across your network.

For most VPN users IPv6 should remain disabled as the VPN connection was designed to operate under IPv4 addresses only. Enabling IPv6 in this instance may compromise the security of the VPN tunnel.

We typically only recommend enabling IPv6 if you are not using VPN or if your VPN provider requires that IPv6 be enabled.

Enable IPv6

Navigate to Setup > IPv6

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set IPv6 to Enable.
  2. Select Native IPv6 from ISP in the dropdown.
  3. If you have specific IPv6 DNS servers you would like to add you can add them in the Static DNS fields or leave those fields blank.
  4. Click Apply Settings.

Power cycle your FlashRouter

Power your FlashRouter off and then power it back on by unplugging and then plugging it back in or using the button on the back of the FlashRouter.

Verify a successful IPv6 connection

Once the FlashRouter is finished powering back up, connect one of your devices to the FlashRouter via Ethernet or Wireless.

Visit  http://ipv6-test.com/ where you should see Supported under IPv6 connectivity if your ISP supports IPv6 and your modem is setup to passthrough IPv6.

Please be aware that we can not replicate ISP specific IPv6 issues, which makes them challenging to troubleshoot. We recommend contacting your ISP as the first step of troubleshooting.

SmartDNSProxy SmartDNS Setup

· ·

SmartDNSProxy offers a SmartDNS service for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.

SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.

SmartDNS and VPN should not be configured at the same time. When using a SmartDNS connection, make sure to disable your VPN connection on the FlashRouter.

Register your IP Address

If you are not already a SmartDNSProxy user Sign Up Now.

Click on Sign Up and fill in the requested information.

SmartDNSProxy SmartDNS Account Sign Up For DD-WRT FlashRouter

Access the e-mail you entered and Verify your new account.

SmartDNSProxy SmartDNS Activate DNS for DD-WRT FlashRouter

Your account will now be verified.

Activate SmartDNSProxy SmartDNS Service and Subscription

Login to SmartDNSProxy

SmartDNSProxy Server Location Addresses for FlashRouter DD-WRT Settings

Visit SmartDNSProxy’s DNS servers list and note the DNS servers of the location you would like to access content from.

Enter SmartDNSProxy SmartDNS servers on your FlashRouter

Navigate to Setup > Basic Setup

  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of SmartDNSProxy SmartDNS servers you noted into Static DNS fields 1 and 2.
  3. Click Apply Settings at the bottom of the page.
  4. Reboot the FlashRouter.

Once the router is fully booted back up, you can access your desired regional content on any device that connects to the FlashRouter’s network.

Getflix SmartDNS Setup

· ·

Getflix offers a SmartDNS service for unblocking geo-restricted content without the encryption of a VPN service. SmartDNS routes DNS servers to different regions which “tricks” the website to allow access to previously restricted content.

SmartDNS does not change your IP Address or provide the encryption that a VPN connection does. This can result in faster speeds and unblocked content.

SmartDNS and VPN should not both be configured at the same time. When using a SmartDNS connection make sure to disable your VPN connection on the FlashRouter.

Login to Getflix

If you are not already a Getflix user Sign Up Now.

New customer Signup for GetFlix SmartDNS Service

Login to Getflix’s website login page.

Visit Getflix’s DNS servers list page and note the DNS servers of the location you would like to access content from.

Getflix DNS Server Location Addresses for FlashRouter DD-WRT Settings

Enter Getflix SmartDNS servers on your FlashRouter

Navigate to Setup > Basic Setup

  1. Scroll down to Network Address Server Settings (DHCP).
  2. Enter in any combination of Getflix SmartDNS servers you noted into Static DNS fields 1 and 2.
  3. Click Apply Settings at the bottom of the page.
  4. Reboot the FlashRouter.

Register your IP Address

When the router is fully booted back up visit your Getflix user dashboard and make sure your IP Address is registered with Getflix. If it is not click Force IP Update.

Register IP Address for Getflix use on FlashRouter DD-WRT

Once you are successfully registered you can now access your desired regional content on any device that connects to the FlashRouter’s network.

ExpressVPN Manual OpenVPN Setup

· ·

Preparing for Manual ExpressVPN Setup

Obtain your ExpressVPN OpenVPN Information

If you are not already an ExpressVPN user Sign Up Now.

1. Log in to your account on the ExpressVPN website.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

ExpressVPN Server Addresses

Americas

usa-atlanta-ca-version-2.expressnetw.com
usa-boston-ca-version-2.expressnetw.com
usa-chicago-ca-version-2.expressnetw.com
usa-dallas-ca-version-2.expressnetw.com
usa-dallas-2-ca-version-2.expressnetw.com
usa-denver-ca-version-2.expressnetw.com
usa-kansascity-ca-version-2.expressnetw.com
usa-losangeles-ca-version-2.expressnetw.com
usa-losangeles-1-ca-version-2.expressnetw.com
usa-losangeles-2-ca-version-2.expressnetw.com
usa-losangeles-3-ca-version-2.expressnetw.com
usa-los-angeles-4-ca-version-2.expressnetw.com
usa-miami-ca-version-2.expressnetw.com
usa-miami-2-ca-version-2.expressnetw.com
usa-minneapolis-ca-version-2.expressnetw.com
usa-newjersey-1-ca-version-2.expressnetw.com
usa-newjersey-3-ca-version-2.expressnetw.com
usa-newyork-ca-version-2.expressnetw.com
us-new-york-2-ca-version-2.expressnetw.com
usa-phoenix-ca-version-2.expressnetw.com
usa-saltlakecity-ca-version-2.expressnetw.com
usa-sanfrancisco-ca-version-2.expressnetw.com
usa-sanjose-ca-version-2.expressnetw.com
usa-seattle-ca-version-2.expressnetw.com
usa-tampa-1-ca-version-2.expressnetw.com
usa-virginia-ca-version-2.expressnetw.com
usa-washingtondc-ca-version-2.expressnetw.com
usa-washingtondc-2-ca-version-2.expressnetw.com
canada-montreal-ca-version-2.expressnetw.com
canada-toronto-ca-version-2.expressnetw.com
canada-toronto-2-ca-version-2.expressnetw.com
canada-vancouver-ca-version-2.expressnetw.com
mexico-ca-version-2.expressnetw.com
argentina-ca-version-2.expressnetw.com
brazil-ca-version-2.expressnetw.com
brazil-2-ca-version-2.expressnetw.com
chile-ca-version-2.expressnetw.com
colombia-ca-version-2.expressnetw.com
costarica-ca-version-2.expressnetw.com
ecuador-ca-version-2.expressnetw.com
guatemala-ca-version-2.expressnetw.com
panama-ca-version-2.expressnetw.com
peru-ca-version-2.expressnetw.com
uruguay-ca-version-2.expressnetw.com
venezuela-ca-version-2.expressnetw.com

Europe

uk-berkshire-ca-version-2.expressnetw.com
uk-berkshire-2-ca-version-2.expressnetw.com
uk-docklands-ca-version-2.expressnetw.com
uk-east-london-ca-version-2.expressnetw.com
uk-kent-ca-version-2.expressnetw.com
uk-london-ca-version-2.expressnetw.com
france-paris-1-ca-version-2.expressnetw.com
france-paris-2-ca-version-2.expressnetw.com
france-strasbourg-ca-version-2.expressnetw.com
germany-darmstadt-ca-version-2.expressnetw.com
germany-frankfurt-1-ca-version-2.expressnetw.com
germany-frankfurt-2-ca-version-2.expressnetw.com
germany-nuremberg-ca-version-2.expressnetw.com
italy-cosenza-ca-version-2.expressnetw.com
italy-milan-ca-version-2.expressnetw.com
netherlands-amsterdam-ca-version-2.expressnetw.com
netherlands-rotterdam-ca-version-2.expressnetw.com
netherlands-thehague-ca-version-2.expressnetw.com
spain-barcelona-ca-version-2.expressnetw.com
spain-ca-version-2.expressnetw.com
sweden-ca-version-2.expressnetw.com
sweden-2-ca-version-2.expressnetw.com
switzerland-ca-version-2.expressnetw.com
switzerland-2-ca-version-2.expressnetw.com
albania-ca-version-2.expressnetw.com
andorra-ca-version-2.expressnetw.com
armenia-ca-version-2.expressnetw.com
austria-ca-version-2.expressnetw.com
azerbaijan-ca-version-2.expressnetw.com
belarus-ca-version-2.expressnetw.com
belgium-ca-version-2.expressnetw.com
bosniaandherzegovina-ca-version-2.expressnetw.com
bulgaria-ca-version-2.expressnetw.com
croatia-ca-version-2.expressnetw.com
cyprus-ca-version-2.expressnetw.com
czechrepublic-ca-version-2.expressnetw.com
denmark-ca-version-2.expressnetw.com
estonia-ca-version-2.expressnetw.com
finland-ca-version-2.expressnetw.com
georgia-ca-version-2.expressnetw.com
greece-ca-version-2.expressnetw.com
hungary-ca-version-2.expressnetw.com
iceland-ca-version-2.expressnetw.com
ireland-ca-version-2.expressnetw.com
isleofman-ca-version-2.expressnetw.com
jersey-ca-version-2.expressnetw.com
latvia-ca-version-2.expressnetw.com
liechtenstein-ca-version-2.expressnetw.com
lithuania-ca-version-2.expressnetw.com
luxembourg-ca-version-2.expressnetw.com
macedonia-ca-version-2.expressnetw.com
malta-ca-version-2.expressnetw.com
moldova-ca-version-2.expressnetw.com
monaco-ca-version-2.expressnetw.com
montenegro-ca-version-2.expressnetw.com
norway-ca-version-2.expressnetw.com
poland-ca-version-2.expressnetw.com
portugal-ca-version-2.expressnetw.com
romania-ca-version-2.expressnetw.com
serbia-ca-version-2.expressnetw.com
slovakia-ca-version-2.expressnetw.com
slovenia-ca-version-2.expressnetw.com
ukraine-ca-version-2.expressnetw.com

Asia Pacific

australia-brisbane-ca-version-2.expressnetw.com
australia-melbourne-ca-version-2.expressnetw.com
australia-perth-ca-version-2.expressnetw.com
australia-sydney-ca-version-2.expressnetw.com
australia-sydney-2-ca-version-2.expressnetw.com
australia-sydney-3-ca-version-2.expressnetw.com
hongkong-2-ca-version-2.expressnetw.com
hongkong4-ca-version-2.expressnetw.com
hongkong-1-ca-version-2.expressnetw.com
japan-tokyo-1-ca-version-2.expressnetw.com
japan-tokyo-2-ca-version-2.expressnetw.com
india-chennai-ca-version-2.expressnetw.com
india-mumbai-1-ca-version-2.expressnetw.com
singapore-cbd-ca-version-2.expressnetw.com
singapore-jurong-ca-version-2.expressnetw.com
southkorea-ca-version-2.expressnetw.com
southkorea2-ca-version-2.expressnetw.com
bangladesh-ca-version-2.expressnetw.com
bhutan-ca-version-2.expressnetw.com
brunei-ca-version-2.expressnetw.com
cambodia-ca-version-2.expressnetw.com
indonesia-ca-version-2.expressnetw.com
kazakhstan-ca-version-2.expressnetw.com
kyrgyzstan-ca-version-2.expressnetw.com
laos-ca-version-2.expressnetw.com
macau-ca-version-2.expressnetw.com
malaysia-ca-version-2.expressnetw.com
mongolia-ca-version-2.expressnetw.com
myanmar-ca-version-2.expressnetw.com
nepal-ca-version-2.expressnetw.com
newzealand-ca-version-2.expressnetw.com
pakistan-ca-version-2.expressnetw.com
ph-via-sing-ca-version-2.expressnetw.com
srilanka-ca-version-2.expressnetw.com
taiwan-3-ca-version-2.expressnetw.com
thailand-ca-version-2.expressnetw.com
vietnam-ca-version-2.expressnetw.com

Middle East and Africa

algeria-ca-version-2.expressnetw.com
israel-ca-version-2.expressnetw.com
kenya-ca-version-2.expressnetw.com
southafrica-ca-version-2.expressnetw.com

DD-WRT Router Setup for ExpressVPN

Navigate to Services > VPN

Enter ExpressVPN settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change ExpressVPN connection locations, THE ONLY SETTING YOU NEED TO CHANGE IS THE EXPRESSVPN SERVER ADDRESS.*

Port

1195

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-256-CBC

Hash Algorithm

SHA512

User Pass Authentication

Enable

Username

Enter the Username you found in the Manual Config section.

Password

Enter the Password you found in the Manual Config section.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Adaptive

NAT

Enable

Firewall Protection

Enable

nsCertType verification

Checked

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
48d9999bd71095b10649c7cb471c1051
b1afdece597cea06909b99303a18c674
01597b12c04a787e98cdb619ee960d90
a0165529dc650f3a5c6fbe77c91c137d
cf55d863fcbe314df5f0b45dbe974d9b
de33ef5b4803c3985531c6c23ca6906d
6cd028efc8585d1b9e71003566bd7891
b9cc9212bcba510109922eed87f5c8e6
6d8e59cbd82575261f02777372b2cd4c
a5214c4a6513ff26dd568f574fd40d6c
d450fc788160ff68434ce2bf6afb00e7
10a3198538f14c4d45d84ab42637872e
778a6b35a124e700920879f1d003ba93
dccdb953cdf32bea03f365760b0ed800
2098d4ce20d045b45a83a8432cc73767
7aed27125592a7148d25c87fdbe0a3f6
-----END OpenVPN Static key V1-----

Additional Config

persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Client Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Private Client Key

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful ExpressVPN connection

Navigate to Status > OpenVPN.

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit ExpressVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ExpressVPN.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the ExpressVPN server

  1. Copy the new ExpressVPN server address from the above server list.
  2. Paste the server into the Server IP/Name field.
  3. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ProtonVPN Setup for Privacy Hero

· ·

Privacy Hero supports Proton VPN through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It uses a downloadable .conf configuration file. OpenVPN uses a downloadable .ovpn file and a separate Proton VPN OpenVPN username and password (not your regular Proton Account login).

Privacy Hero is cloud-managed. You can configure the VPN from a computer, smartphone, or tablet connected to any internet network; you do not need to be on the Privacy Hero WiFi to change settings.

Proton VPN WireGuard Setup (Recommended)

WireGuard uses a configuration file generated by Proton VPN. You do not need an OpenVPN username and password for this method.

Generate Your Proton VPN WireGuard Configuration

  1. Open your Proton VPN account and sign in.
  2. Go to Downloads → WireGuard configuration.
  3. Enter a recognizable configuration name and select Router as the platform.
  4. Choose your preferred VPN options and an available server or country. For a straightforward setup, select a standard server configuration.
  5. Click Create, then Download to save the generated WireGuard .conf file to your device.

Important: A WireGuard configuration contains a private key. Keep the downloaded file private; do not paste its contents into public posts or unprotected support messages. For detailed Proton account instructions, see Proton VPN: Download WireGuard Configuration Files.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change beside the VPN provider, and choose Custom.
  3. Select WireGuard and upload the Proton VPN .conf file you downloaded.
  4. Click Save to apply the configuration and connect. Confirm that Privacy Hero reports Connected.
Privacy Hero Custom WireGuard configuration screen showing the configuration file upload

Proton VPN OpenVPN Setup

OpenVPN is an alternative to WireGuard. You need a Proton VPN OpenVPN-specific username and password and a server .ovpn configuration file.

Get Your Proton VPN OpenVPN Credentials

  1. Sign in to your Proton VPN account.
  2. Open Account → OpenVPN username to find your separate OpenVPN username and password.
  3. Copy these credentials or keep the page open. Do not use your usual Proton Account email and password for the manual OpenVPN connection.

For help locating these credentials, see Proton VPN: How to Sign In / OpenVPN Credentials.

Download Your Proton VPN OpenVPN Server File

  1. In your Proton VPN account, go to Downloads → OpenVPN configuration files.
  2. Select Router as the platform and UDP as the protocol (recommended starting point). If UDP does not work on your network, you can try a TCP configuration later.
  3. Select an available country or individual server from the standard configuration list, then click Download to save its .ovpn file.

For additional details about the file download options, see Proton VPN: Download OpenVPN Configuration Files.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section, click Change, and select Custom as the VPN provider.
  3. Choose OpenVPN and upload the Proton VPN .ovpn file you downloaded.
  4. Enter your separate Proton VPN OpenVPN username and password into the Custom VPN fields.
  5. Click Save, then confirm Privacy Hero displays Connected.
Privacy Hero Custom OpenVPN setup with configuration file upload and separate VPN username and password fields

Verify Your Proton VPN Connection

After Privacy Hero reports Connected, confirm that a device on the router network is using your Proton VPN connection.

  1. Connect your testing device to the Privacy Hero WiFi or LAN network.
  2. Disable any Proton VPN app or other VPN application running directly on that device, so it does not create a second VPN connection.
  3. Open a private/incognito browser window.
  4. Visit Proton VPN’s IP Address Checker.
  5. Verify that the public IP address and approximate location correspond to the Proton VPN server configured in Privacy Hero.

Important: You can manage Privacy Hero from another WiFi network or cellular data. However, the device performing the VPN IP test must be connected to the Privacy Hero network.

Streaming Relocation and VPN Location

If Privacy Hero Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation location rather than the country selected in your Proton VPN configuration. See Privacy Hero Streaming Relocation.

Proton VPN Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, work through these checks:

  1. Confirm that you selected Custom as the VPN provider in Privacy Hero and chose the protocol that matches your configuration file.
  2. For WireGuard, create and download a fresh Proton VPN .conf file for an available server, then upload it again. Do not use an OpenVPN .ovpn file in the WireGuard section.
  3. For OpenVPN, verify that you entered Proton VPN’s separate OpenVPN username and password, not your regular Proton Account login.
  4. Download a fresh configuration for a different Proton VPN server and reconnect. Proton VPN occasionally changes server configurations.
  5. If using OpenVPN UDP and the connection still fails, download and try a TCP .ovpn configuration file to test for a protocol-related issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet works without the VPN. Re-enable your preferred Kill Switch setting once testing is complete.

VPN Disconnects and Devices Have No Internet?

The VPN Kill Switch may be intentionally blocking normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

Check the affected device for a second VPN app, iCloud Private Relay, Private DNS, browser proxy settings, or filtering software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Obtain your NordVPN manual Username and Password for OpenVPN

· ·

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

NordVPN login

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Go to the Service Credentials section and click Verify email. Enter in the verification code that was sent to your email.

Nord Email Verification
NordVPN verify code

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN OpenVPN.

NordVPN OpenVPN Credentials

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero Activation and Setup

· ·

Follow this article when you receive your new Privacy Hero router to create your Privacy Hero account, connect your Privacy Hero to the Internet, and customize your network so it is ready to use.

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone or your other Wi-Fi network.

Create your Privacy Hero account

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Select Create Account.

Privacy Hero create Account

3. Enter the Email address you want to set for your Privacy Hero account. This will be your login to the Privacy Hero settings moving forward. Click Create Account.

Privacy Hero Enter account email

4. Go to your Email inbox and check for an email from Privacy Hero and click the Confirm email address link. This email may be in your Promotions or Spam inbox if it is not appearing in your main inbox.

Privacy Hero Confirm Email

5. Enter the password that you want to use for your Privacy Hero account. Be sure to note this in a secure location so you do not forget. Click Submit.

Privacy Hero create password

6. You have now created your Privacy Hero account. You will use this login to access the Privacy Hero router settings.

Activate your Privacy Hero Internet and setup Wi-Fi

1. You will then be taken to the Router Activation steps. Connect the ethernet cable that the Privacy Hero came with from an open Ethernet port on your ISP modem or other router to the WAN/Internet (blue) port of the Privacy Hero.

Then power the Privacy Hero device on by connecting the power supply. This is shown in the video on the page as well. Wait about a minute or so for the Privacy Hero router to fully boot up and then click I’m Connected.

Wire Up Privacy Hero

2. The next page may say Router Found or ask you to enter the Activation Code. If it asks for the Activation Code that will be the code printed on the bottom of the Privacy Hero. Enter this code and click Next.

Privacy Hero Router Found

3. Set the Wi-Fi name and password for connecting your devices to the Privacy Hero network. Make sure it is not a duplicate name of an existing Wi-Fi network. Click Next.

Privacy Hero Set wifi name and password

4. To activate your 1 Year NordVPN code:

Click on Claim NordVPN 1 Year Code Now

NordVPN Claim Code

Go to the Account section of your router settings.

Copy the NordVPN code shown under Claim NordVPN 1 Year Code.

PH Nord Code

Go to the NordVPN activation page.

This code can be used with a new or existing NordVPN account.

NordVPN Activate Page

5. You are now all set to begin joining your devices to the new Privacy Hero network with the Wi-Fi name and password you entered and setting up some of the Privacy Hero features.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Setup on Roqos

· ·

Preparing for ExpressVPN Setup

Obtain your ExpressVPN login information

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN login page

2. Successfully log in with your account information. Select More.

ExpressVPN account page

3. Select Manual Configuration and copy the Username and Password that are displayed on the right hand side of the screen.

ExpressVPN Manual Configuration
ExpressVPN username and password

Connecting to ExpressVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos VPN Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose ExpressVPN.

Roqos ExpressVPN select provider

Enter your ExpressVPN information

In the Username and Password field enter the ExpressVPN OpenVPN Username and Password that you obtained.

ExpressVPN on FlashRouters Privacy App Setup - OpenVPN Specific Username and Password
Roqos VPN ExpressVPN enter username and password

Select an ExpressVPN server

Click the Server dropdown and type in or scroll to your preferred server location.

Roqos VPN ExpressVPN select server

Click the Save button.

Roqos VPN Save Settings

Connect to ExpressVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your ExpressVPN connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to ExpressVPN or only certain devices.

Roqos VPN Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to ExpressVPN. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to ExpressVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful ExpressVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit ExpressVPN’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath ExpressVPN.

Connect to a different ExpressVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from ExpressVPN

To disconnect from ExpressVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

Roqos Core Internet Setup and Activation

· ·

Follow this article when you receive your new Roqos Core router to create your Roqos account, connect your Roqos to the Internet, and customize your network so it is ready to use.

Create your Roqos account

1. From any device that has a browser such as a computer, smartphone, or tablet visit login.roqos.com

Roqos Login URL

2. Select Create Account.

Roqos Create Account

3. Enter the Email address and password you want to set for your Roqos account. This will be your login to the Roqos settings moving forward. Click Next.

Roqos Enter Email

4. Enter the name and phone number you want associated with your Roqos. Click Next.

Roqos Enter Name and Number

5. Enter the address where your Roqos is located. This section may require a CAPTCHA to be completed to authenticate you are human. Click Create Account.

Roqos Enter Address

6. You have now created your Roqos account. In a new tab proceed to open the email from Roqos and click the Activate account button.

Roqos email activation

Activate your Roqos Internet

1. From the Account created page click Next to begin the Internet Setup of the Roqos.

Roqos Account Created

2. Select the Roqos model Teal RC10-P. Click Next.

Roqos Model

3. Connect the ethernet cable that came with your Roqos from the port labeled INTERNET on the back of your Roqos to an open ethernet port on your ISP Modem or other router in your network.

Roqos Wiring

4. Then connect the power adapter that came with the Roqos to the back of the Roqos. Wait for the light on the Roqos to begin blinking blue. Once your see the blinking blue lights on the Roqos click Next.

Roqos Power On

If your Roqos lights does not begin blinking blue after a long while please see the steps in this article and contact us.

5. Enter in the Roqos serial number found on the bottom of the device exactly as it appears there. Click Next.

Roqos Activation Code

Setup your Roqos Network

1. Enter in a name that you would like to call the Roqos. This is just the Roqo’s device name and it is not the WiFi network name. Click Next.

Roqos Device Name

2. Select the Time Zone of your actual location from the dropdown. Click Next.

Roqos Time Zone

3. Set the WiFi name and password for the Roqos. The WiFi name should be unique and not a duplicate of an existing wireless network. This will be the name that appears in your wireless devices available network list and the password to join the devices to the network. Click Next.

Roqos Set WiFi Name and Password

4. Select the custom alert settings as you best see fit using the toggle switches. We typically recommend having the first two toggles selected for Email Alerts and Consolidate Security Alerts. Click Next.

Begin connecting your devices to the Roqos network

You are now done setting up your Roqos to connect to the Internet and can begin joining your wireless devices to the Roqos network and exploring the Roqos Core Features.

Roqos Setup Done

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Setup on Roqos

· ·

Preparing for NordVPN Setup

Obtain your NordVPN manual Username and Password

If you are not already a NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

NordVPN login

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

NordVPN setup manually

3. Enter in the verification code that was sent to your email.

NordVPN verify code

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

NordVPN credentials

Connecting to NordVPN in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos NordVPN Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose NordVPN.

Roqos NordVPN select provider

Enter your NordVPN information

In the Username and Password field enter the NordVPN OpenVPN Username and Password that you obtained.

NordVPN credentials
Roqos NordVPN enter username and password

Select a NordVPN server

Navigate to NordVPN server recommendation page. Click Recommended server and select the country you want to connect to and note the server number that appears.

Click the Location dropdown and type in or scroll to the preferred server country.

Roqos NordVPN Select Location

Click the Server dropdown and type in or scroll to the server number that was recommended. Select the UDP version of the server.

Roqos NordVPN select server number

Click the Save button.

Roqos NordVPN Save Settings

Connect to NordVPN

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your NordVPN connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to NordVPN or only certain devices.

Roqos NordVPN Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to NordVPN. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to NordVPN while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful NordVPN connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit NordVPN’s website to verify your new IP Address and Protected Status at the top of the page.

You should see Connected at the top of the page underneath NordVPN.

Connect to a different NordVPN server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from NordVPN

To disconnect from NordVPN click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

NordVPN Setup for Privacy Hero

· ·

Privacy Hero supports NordVPN using both NordLynx and OpenVPN.

NordLynx is recommended for most users. OpenVPN is also available and may be required for NordVPN Dedicated IP connections. Some Dedicated IP configurations require a private OpenVPN file imported as a Custom VPN.

Privacy Hero is cloud-managed, so you can complete the setup from any device with an internet connection. You do not need to be connected to Privacy Hero WiFi to change these settings.

NordVPN NordLynx Setup

NordLynx uses a NordVPN access token, not your regular NordVPN website email and password.

Open Privacy Hero and Select NordLynx

  1. From a computer, smartphone, or tablet, open app.privacyhero.com.
  2. Sign in with your Privacy Hero account email and password.
  3. Open the VPN section.
  4. Click Change and select NordVPN.
  5. Choose NordLynx.
NordVPN Protocol Privacy Hero

Generate Your NordVPN Access Token

  1. In another browser tab, open NordVPN Access Tokens and sign in to your NordVPN account.
  2. Complete any account or email verification requested by NordVPN.
  3. Select Generate new token; choose Doesn’t expire if available, then copy the token.

Important: Treat your NordVPN token as a password. Do not share it publicly.

Connect Privacy Hero to NordVPN

  1. Return to Privacy Hero, paste the token into the NordLynx token field, and click Save. The default country selection automatically chooses an available NordVPN server for that location.
  2. Wait for the VPN status to show Connected.
NordVPN Protocols Privacy Hero

NordVPN OpenVPN Setup

Use OpenVPN if you prefer the OpenVPN protocol or if your configuration requires it. OpenVPN requires NordVPN Manual Service Credentials, which are different from your website login email and password.

Select OpenVPN in Privacy Hero

  1. Open app.privacyhero.com and sign in.
  2. Open the VPN section.
  3. Click Change and select NordVPN.
  4. Select OpenVPN.
NordVPN Protocol Privacy Hero

Get Your Manual Service Credentials

  1. Open NordVPN Manual Service Credentials and sign in.
  2. Complete NordVPN’s verification if prompted, then copy the current Service Username and Service Password.

Important: Do not enter your normal NordVPN website email and password into Privacy Hero’s OpenVPN fields.

Save Your OpenVPN Connection

  1. Return to Privacy Hero and enter the manual service username and password in the OpenVPN credential fields. Click Save.
  2. Confirm Privacy Hero shows the connection as Connected.

Choose a NordVPN Country or Specific Server

Privacy Hero can select a NordVPN server automatically, or you can choose a country or specify a server hostname.

Choose a Country

  1. Open your NordVPN connection in Privacy Hero.
  2. Open the Country dropdown.
  3. Search for and select your preferred country.
  4. Click Save. Privacy Hero will use an available NordVPN server for the selected country.

Use a Specific NordVPN Server

  1. Open your NordVPN connection in Privacy Hero.
  2. Open Advanced Options.
  3. Enter the NordVPN server hostname, for example us12286.nordvpn.com.
  4. Click Save.

Use NordVPN’s server recommendation tool if you need a hostname. NordVPN servers can be retired or taken offline for maintenance; if your specific server stops working, choose another server or return to country selection.

NordVPN Dedicated IP Setup

NordVPN Dedicated IP can require either the regular NordVPN OpenVPN connection or a private .ovpn file imported as a Custom VPN.

Method 1: OpenVPN Advanced Options

Try this first if your Dedicated IP works with the standard NordVPN OpenVPN setup.

  1. Set up NordVPN → OpenVPN using your NordVPN Manual Service Credentials as described above.
  2. Open Advanced Options.
  3. Enter the Dedicated IP server hostname assigned to your account.
  4. Click Save and check whether the VPN connects.
  5. Verify that your public IP matches your assigned Dedicated IP.
Nord US Dedicated OpenVPN

If connected and the public IP matches, no additional configuration is needed.

Method 2: Custom VPN With a Private OpenVPN File

Some Dedicated IP servers require a private OpenVPN configuration file. If Method 1 does not connect, follow NordVPN’s Manual Dedicated IP Server Setup instructions.

Download Your Dedicated IP Configuration

  1. Sign in to the NordVPN account associated with the Dedicated IP.
  2. Locate your assigned Dedicated IP server using NordVPN’s manual setup instructions.
  3. Download its OpenVPN UDP configuration file.
  4. Save the .ovpn file to your computer or device.

Important: Use the private configuration file for your actual Dedicated IP, not a public NordVPN server file.

Upload the File as a Custom VPN

  1. Open app.privacyhero.com and select VPN → Change.
  2. Select Custom from the VPN provider dropdown, not NordVPN.
  3. Upload your Dedicated IP UDP .ovpn file.
  4. Enter your NordVPN Manual Service Username and Password.
  5. Save the configuration, enable the VPN, and wait for Connected.
  6. Verify the public IP matches your NordVPN Dedicated IP.

These are NordVPN’s separate manual service credentials, not your regular website login.

Verify Your NordVPN Connection

  1. Connect your testing device to the Privacy Hero WiFi.
  2. Disconnect any NordVPN or other VPN app running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit NordVPN What Is My IP.
  5. Confirm the public IP and location match your selected NordVPN server (or assigned Dedicated IP).

Running a VPN application directly on the device at the same time as the router VPN can produce double-VPN conflicts and unexpected IP or location results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation region instead of your VPN server region. See Privacy Hero Streaming Relocation.

NordVPN Not Connecting?

If the VPN displays Failed, Connecting, or a timeout error, check for:

  • A server undergoing maintenance or no longer available.
  • An expired, revoked, or outdated NordLynx access token.
  • Incorrect or changed OpenVPN Manual Service Credentials.
  • Recent account changes or an inactive NordVPN subscription.
  • A protocol-specific issue.
  • A Dedicated IP that requires a private .ovpn file and Custom provider selection.

Follow Privacy Hero NordVPN Not Connecting or Showing Timeout Errors for troubleshooting.

No Internet After NordVPN Disconnects?

If internet access stops when the VPN disconnects, the VPN Kill Switch may be blocking normal traffic as intended. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, Private Relay, Private DNS, antivirus, and browser settings. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Device Settings That Can Interfere With Your Router VPN

· ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.

Jump to a Section

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

  • An unexpected public IP address.
  • An unexpected VPN location.
  • Websites or applications not loading.
  • Streaming region problems.
  • DNS problems.
  • Slow or unstable connections.
  • One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

  1. Open Settings.
  2. Select Wi-Fi.
  3. Tap the information button next to the FlashRouter WiFi network.
  4. Find Limit IP Address Tracking.
  5. Turn it Off.
  6. Disconnect from WiFi and reconnect.
  7. Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

  1. Open Settings.
  2. Tap your Apple Account/name.
  3. Select iCloud.
  4. Select Private Relay.
  5. Temporarily turn Private Relay Off.
  6. Reconnect to the FlashRouter.
  7. Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

  1. Open Settings.
  2. Select Network & internet.
  3. Select Private DNS.
  4. Temporarily select Off.
  5. Save the setting.
  6. Reconnect to the FlashRouter WiFi.
  7. Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

  1. Open Settings.
  2. Select Network & internet.
  3. Select VPN.
  4. Select the configured VPN.
  5. Disable Always-on VPN while testing.
  6. Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

  • Web Protection.
  • Safe Browsing or Secure Web.
  • Network Protection.
  • DNS Protection.
  • HTTPS scanning.
  • Tracking protection.
  • Built-in VPN services.
  • Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

  • VPN services.
  • Proxy connections.
  • Secure DNS or DNS-over-HTTPS.
  • Privacy or filtering extensions.
  • Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

  • FlashRouter VPN: On
  • Device VPN: Off
  • iCloud Private Relay: Off while testing
  • Limit IP Address Tracking: Off while testing
  • Android Private DNS/custom DNS: Off while testing
  • Always-On VPN: Off while testing
  • Third-party network filtering: Off while testing

Then:

  1. Disconnect the affected device from WiFi.
  2. Reconnect it to the FlashRouter.
  3. Open a fresh private/incognito browser window.
  4. Check the device’s public IP address and location.
  5. Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

  1. Open app.privacyhero.com.
  2. Open the Devices section.
  3. Select the affected device.
  4. Confirm VPN protection is enabled for that device.
  5. Disconnect any VPN application running directly on the device.
  6. Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.

Related FlashRouters Guides

What are some extra steps I can take to secure my network?

· ·

DD-WRT open source firmware removes many firmware vulnerabilities and backdoor access issues that may cause problems in stock firmware. DD-WRT is also updated more frequently than stock firmware, so be sure to always check with the FlashRouter support team to see which DD-WRT build we recommend for the highest level of security for your router at any time.

Aside from avoiding common issues and flaws with stock firmware, DD-WRT give you more control over the firmware settings and allows you to take some extra steps to really lock down your network security. In this article we highlight additional options for WiFi network security and also preventative measures for remote execution attacks.

Wireless MAC Filtering

Navigate to Wireless > MAC Filter

Access FlashRouters DD-WRT Admin Enable MAC Filtering
  1. Set Use Filter to Enable.
  2. Select either Prevent or Permit
    • Choose Prevent to add MAC addresses that you don’t want to join your network.
    • Choose Permit to add MAC addresses that you do want to join your network, automatically blocking all others.
  3. Select Edit MAC Filter List.
  4. Add the MAC Address of the wireless devices you want to prevent or permit. Be sure to use the xx:xx:xx:xx:xx:xx format. Hint: You can see a list of connected devices MAC Address by clicking Wireless Client MAC List.
  5. Click Save.
  6. Replicate the steps above for each wireless band.
  7. Click Apply Settings.

Disable Remote Access

Navigate to Services > Services

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access
  1. Set SNMP to Disable – this setting disables Simple Network Management Protocol, which prevents software from polling your network for information about connected devices.
  2. Set SSHd to Disable – disabling the Secure Shell is a simple way to prevent root access and brute force attacks on your network.
  3. Set Telnet to Disable – Telnet is a less secure version of SSH to manage your local router network via command line.
  4. Click Apply Settings.

Navigate to Administration > Management

Access FlashRouters DD-WRT Admin Settings and Disable Remote Access 2
  1. Set Web GUI Management to Disable.
  2. Set SSH Management to Disable.
  3. Set Telnet Management to Disable.
  4. Set Allow Any Remote IP to Enable – Even though this setting is set to Enable there is no remote access because Web GUI Management is already set to Disable. 
  5. Click Apply Settings.

Privacy Hero VPN Kill Switch Troubleshooting: No Internet or WiFi

· ·

If your Privacy Hero router suddenly loses internet access, devices report that WiFi has no internet, or devices will not stay connected after a VPN failure, the VPN Kill Switch may be blocking normal internet traffic.

The VPN Kill Switch is designed to prevent traffic from passing through Privacy Hero without VPN protection. If the VPN disconnects or fails while the Kill Switch is enabled, normal internet access is intentionally blocked.

Important: You can still access app.privacyhero.com to manage Privacy Hero, turn off the Kill Switch, or repair the VPN connection.

Privacy Hero is cloud-managed, so you do not need to be connected to the Privacy Hero WiFi to change these settings. You can also access the dashboard using cellular data, your main router’s WiFi, or another internet connection as long as Privacy Hero remains connected to the internet and Privacy Hero cloud.

Jump to a Section

Common Privacy Hero Kill Switch Symptoms

A failed VPN connection combined with an enabled Kill Switch can make the Privacy Hero network appear unavailable even though the router itself may still be functioning.

Common symptoms include:

  1. Your device connects to Privacy Hero WiFi but websites and apps will not load.
  2. Your phone, computer, television, or streaming device reports that WiFi has no internet.
  3. A device refuses to remain connected because it detects that the WiFi network does not currently provide normal internet access.
  4. Your phone automatically switches from Privacy Hero WiFi to cellular data or another saved WiFi network.
  5. Your computer displays “No Internet” or “Connected without Internet.”
  6. The VPN displays Failed, Disconnected, Connecting, or a timeout error.
  7. Privacy Hero was working normally and suddenly stopped providing internet access.

If the Privacy Hero WiFi network itself is completely missing and cannot be detected by any device, that is different from normal Kill Switch behavior. Continue with WiFi or router connectivity troubleshooting instead.

Restore Internet Access

The fastest way to determine whether the Kill Switch is responsible is to temporarily disable it and test Privacy Hero without VPN.

  1. Open app.privacyhero.com.
  2. Sign in to your Privacy Hero account.
  3. Open the VPN section.
  4. Check the current VPN status.
  5. If the VPN shows Failed or Disconnected, turn the VPN Kill Switch Off.
  6. Turn the failed VPN connection off.
  7. Connect a device to the Privacy Hero network.
  8. Test normal internet access.

If internet access returns with the VPN and Kill Switch disabled, Privacy Hero’s basic internet connection is working and the problem is isolated to the VPN connection.

Important: Disabling the Kill Switch allows normal non-VPN internet traffic through Privacy Hero. Leave it disabled only while troubleshooting if continuous VPN protection is required.

VPN Still Fails to Connect

Do not turn the Kill Switch back on until the VPN is connected and working.

If you are using NordVPN and the VPN shows Failed, Connecting, or a timeout error, continue with our dedicated Privacy Hero NordVPN Not Connecting or Showing Timeout Errors guide.

That guide covers:

  • Selecting a different NordVPN server.
  • Replacing a failed Auto Country connection with a specific NordVPN server.
  • Generating a new NordVPN NordLynx access token.
  • Verifying NordVPN OpenVPN manual service credentials.
  • Avoiding double-VPN conflicts while testing.

If you use another VPN provider, try another available VPN server or protocol and verify that your VPN account and credentials remain active.

Verify the VPN Before Re-Enabling the Kill Switch

Once the VPN reconnects:

  1. Confirm Privacy Hero displays the VPN as Connected.
  2. Connect a device to the Privacy Hero WiFi.
  3. Make sure a separate VPN application is not connected directly on the testing device.
  4. Check your public IP address.
  5. Confirm the IP address and location reflect the VPN server you selected.
  6. Test normal websites and applications.
  7. Return to Privacy Hero and enable the VPN Kill Switch.

If you enable the Kill Switch while the VPN is still failing, normal internet access will be blocked again.

What If Privacy Hero Appears Offline?

If Privacy Hero shows Offline in the dashboard, the router may not currently be communicating with the Privacy Hero cloud.

  1. Confirm Privacy Hero is powered on.
  2. Confirm the Ethernet cable from your ISP gateway or primary router is connected to the Privacy Hero WAN/Internet port.
  3. Confirm your ISP gateway or primary router has working internet access.
  4. Restart Privacy Hero and allow it to finish booting.
  5. Using another internet connection, open app.privacyhero.com.
  6. Check whether Privacy Hero returns online.

If the router returns online, check the VPN and Kill Switch status before enabling the VPN again.

Privacy Hero Has a WAN IP but Devices Have No Internet

Privacy Hero can receive an IP address from your ISP gateway while the Kill Switch is still blocking normal internet traffic.

Before changing IP Passthrough, bridge mode, firewall settings, or other ISP gateway settings:

  1. Check the VPN status.
  2. Check whether the Kill Switch is enabled.
  3. Disable the VPN and Kill Switch temporarily.
  4. Test internet access again.

If internet access returns, troubleshoot the VPN connection rather than changing the ISP gateway configuration.

Kill Switch, WiFi, or WAN Problem?

WiFi Connects but There Is No Internet

If the VPN shows Failed or Disconnected and the Kill Switch is enabled, the Kill Switch is likely blocking normal internet traffic.

Device Will Not Stay Connected to Privacy Hero WiFi

Some devices automatically leave a WiFi network when they detect that it does not provide internet access. Use cellular data or another internet connection to access app.privacyhero.com and check the VPN and Kill Switch.

Privacy Hero WiFi Is Completely Missing

The Kill Switch does not normally cause the WiFi network itself to stop broadcasting. If no devices can detect the Privacy Hero WiFi network, troubleshoot the WiFi or router connection separately.

Privacy Hero Is Not Receiving a WAN IP Address

Check the Ethernet connection between Privacy Hero and your ISP gateway or primary router and confirm the upstream internet connection is working.

VPN Shows Connected but One Device Has the Wrong IP

If the VPN works correctly on other devices, the Kill Switch is probably not the issue. Check that device’s Privacy Hero VPN assignment and its own VPN, privacy, DNS, or security settings.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Frequently Asked Questions

Why does Privacy Hero WiFi say no internet?

If the VPN has failed while the Kill Switch is enabled, normal internet traffic is intentionally blocked. Your device may therefore report that Privacy Hero WiFi has no internet.

Can I access Privacy Hero settings while the Kill Switch is blocking internet?

Yes. Open app.privacyhero.com. You can use the Privacy Hero network, cellular data, your main router’s WiFi, or another internet connection.

Do I have to be connected to Privacy Hero WiFi to change the settings?

No. Privacy Hero is cloud-managed and can be managed remotely while the router remains connected to the Privacy Hero cloud.

Why does my phone keep leaving the Privacy Hero WiFi?

Some phones automatically switch to cellular data or another saved WiFi network when the current WiFi connection does not provide normal internet access.

Should I turn the Kill Switch back on immediately?

Only after the VPN is connected and you have confirmed that your internet traffic is using the VPN.

Related Privacy Hero Guides

PrivateInternetAccess (PIA) Setup on Roqos

· ·

Preparing for PIA Setup

Obtain your PIA login information

If you are not already an PIA user Sign Up Now.

1. Visit PIA’s website login page.

PIA login

2. Successfully log in with your account information.

Connecting to PIA in the Roqos Core

Access the Roqos Core UI

1. Login to the Roqos Core web app in a browser on any computer or smart device.

2. Click VPN from the navigation menu and then click VPN OUT.

Roqos VPN Out

3. Click the Connect to box.

Roqos PIA Connect to

4. In the Connect dropdown choose 3rd Party VPN Providers and for the VPN Provider dropdown choose Private_Internet_Access.

Roqos PIA select provider

Enter your PIA information

In the Username and Password field enter the PIA Username and Password that you logged in with.

Roqos PIA enter username and password

Select a PIA server

Click the Server dropdown and type in or scroll to your preferred server location.

Roqos PIA server select

Click the Save button.

Roqos PIA Save Settings

Connect to PIA

Once you click Save you will be returned to the VPN OUT menu.

Click the Connect button to start your PIA connection. Please be patient as the router connects your entire network through VPN.

Roqos VPN Connect

Assign devices to connect to VPN

By default there are no devices assigned to the VPN tunnel. Click Included Devices. From this page you can choose if all devices should connect to PIA or only certain devices.

Roqos PIA Included Devices

From the dropdown select Include all devices if you want every device that connects to the Roqos to connect to PIA. Then click Save.

Roqos VPN Include All Devices

If you only want specific devices to connect to PIA while others bypass the VPN connection select Include selected devices from the dropdown and then toggle the sliders for the devices you want connected to VPN. Click Save.

Roqos VPN Include Selected devices

Verify a successful PIA connection

Make sure you are connected to the Roqos network via WiFi or ethernet connection on your device.

Visit PIA’s IP Check to verify your new IP Address and virtual location.

You should see Connected at the top of the page underneath Private_Internet_Access.

Connect to a different PIA server

To change your server click Disconnect on the VPN OUT page then return to the Connect To section to select a new server from the Server dropdown and click Save. Now click Connect once again on the VPN Out page.

Disconnect from PIA

To disconnect from PIA click the Disconnect button.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

Wireless Guest Network Setup – Bridged (Advanced)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a Bridged Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting SSID for Guest Network
  1. Under the 2.4GHz or 5GHz Interface click the Add button.
  2. In the Wireless Network Name (SSID) field enter the unique network name of the guest network.
  3. Click Save.

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Setting Guest Network Wireless Password
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Create Bridge

Navigate to Setup > Networking

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Create Bridge
  1. Under Create Bridge click Add. Name the newly created bridge br1.
  2. Click Apply Settings

Assign to Bridge

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Assign Bridge
  1. Under Assign to Bridge select br1 from the Assignment dropdown. Select wl1.1 or ath1.1 depending on your router model.
  2. Click Apply Settings.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Network Configuration br1

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure Bridge DNS Redirection
  1. Under Network Configuration br1 select Enable for Forced DNS Redirection.
  2. Set Optional DNS Target to 208.67.220.220
  3. Set IP Address to 192.168.12.1
  4. Set Subnet Mask to 255.255.255.0
  5. Click Apply Settings.

Multiple DHCP Server

Bridged Wireless Guest Network Setup on DD-WRT FlashRouter – Configure DHCP Server Settings
  1. Under Multiple DHCP Server click Add.
  2. Set the first dropdown to br1.
  3. Click Apply Settings.
  4. Reboot your router.

Firewall Rules

Navigate to Administration > Commands

  1. Copy the fire script from below and paste into the empty Commands shell
  2. Click Save Firewall.
  3. Wait one minute and then reboot your router.

iptables -I FORWARD -i br1 -o br0 -m state –state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state –state NEW -j DROP
iptables -I INPUT -i br1 -p tcp –dport telnet -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport ssh -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport www -j REJECT –reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp –dport https -j REJECT –reject-with tcp-reset

You will now have a working Bridged Guest Network on the FlashRouter. By inputting the firewall rules, this will also prevent any guests on your network from gaining access to your router settings.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Wireless Guest Network Setup – Unbridged (Recommended)

· ·

If you would like to prevent visitors from connecting to your main WiFi network then you can create a separate Guest Network that will prevent access to the main router. This setup also allows you to create different rules for different WiFi SSID’s in your home ranging from QoS controls, access restrictions, VPN network segmentation, and more.

Preparing for Wireless Guest Network Setup

If you have a Dual-band or Tri-Band router you can setup a WiFi Guest Network, creating a separate VLAN (virtual local area network) for your visitors, or in order to segment your VPN networks on any band you like. We recommend using the 2.4GHz network for your DD-WRT Guest Wireless Network so it is compatible with the most possible WiFi devices. Setting up a guest network for visitors in your home allows you to keep them off of your main WiFi network.

We recommend performing this setup while connected to the FlashRouter via ethernet cable. If your computer does not have an ethernet port and you must proceed via wireless connection to the FlashRouter. Be sure to pay attention to the wireless connection as you may need to rejoin the FlashRouter’s network after making changes.

DD-WRT Router Setup for Wireless Guest Network

Enter Wireless settings

Navigate to Wireless > Basic Settings

FlashRouter DD-WRT Wireless Guest Network Settings Unbridged

Under the 2.4GHz or 5GHz Interface click the Add button.

Wireless Network Name (SSID)

Enter the a unique network name for the guest network.

Network Configuration

Unbridged

Force DNS Redirection

Enable

Optional DNS Target

208.67.220.220

IP Address

192.168.12.1

Subnet Mask

255.255.255.0

CLICK SAVE

Enter Wireless Security settings

Navigate to Wireless > Wireless Security

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged
  1. Duplicate the wireless security settings that are set for the other bands for the newly created virtual interface.
  2. Click Apply Settings.
  3. Reboot your router.

Enable DHCP for Guest Network

Navigate to Setup > Networking

Wireless Guest Network Setup on DD-WRT FlashRouter Unbridged Setting DHCP Server
  1. Scroll to the very bottom of the page and under DHCPD click Add.
  2. Select wl0.1 or ath1.1 depending on your router model.
  3. Click Apply Settings.
  4. Reboot your router.

Depending on the router model and WiFi band you are using, the wireless interfaces will be labelled differently.

This setting can be labelled wl1.1, ath0.1, wl2.1, and so on. Make sure when you get up to the bridge assignment section that you are using the correct guest network Virtual Interface.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit our Troubleshooting section to diagnose common problems here.

Troubleshoot Here

Hotspot Shield Manual OpenVPN Setup

· ·

Preparing for Manual Hotspot Shield Setup

Obtain your Hotspot Shield OpenVPN Information

If you are not already a Hotspot Shield user Sign Up Now.

1. Log in to your account on the Hotspot Shield website.

2. Click Hotspot Shield on the left side navigation.

Hotspot Shield - Website Admin

3. Under Choose your device click Router.

Hotspot Shield - Select Router

4. In the Set up your router section Select your desired virtual location and then click Download file.

Open the file that was downloaded with NotePad++ for Windows or TextEdit for Apple. You only need the <cert> and <key> from the .ovpn file. All Hotspot Shield servers have different keys and certificates.

Hotspot Shield - Download Configuration File

5. Copy the VPN Username, and Password that appear under Step 2 to a notepad, you will need this information later in the setup process.

Hotspot Shield - OpenVPN username and password

DD-WRT Router Setup for Hotspot Shield

Navigate to Services > VPN

Enter Hotspot Shield settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

At the top of the .ovpn file you downloaded above, there is a line e.g.:
remote universitycalendar.us 8041
universitycalendar.us is your Hotspot Shield server name. Enter the server name in this field.

Port

8041

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

AES-128-CBC

Hash Algorithm

SHA256

User Pass Authentication

Enable

Username

Enter the Username you obtained in your Hotspot Shield account.

Password

Enter the Password you obtained in your Hotspot Shield account.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

No

NAT

Enable

Firewall Protection

Enable

Additional Config

resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
reneg-sec 0
remote-cert-tls server

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

—–BEGIN CERTIFICATE—–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=
—–END CERTIFICATE—–
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–

Public Client Cert

In the .ovpn file Copy and Paste all contents in between the <cert> and </cert> lines from your .ovpn file starting and ending with:
—–BEGIN CERTIFICATE—–
…
—–END CERTIFICATE—–

Private Client Key

In the .ovpn file Copy and Paste all contents in between the <key> and </key> lines from your .ovpn file starting and ending with:
—–BEGIN PRIVATE KEY—–
…
—–END PRIVATE KEY—–

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Hotspot Shield connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit Hotspot Shield’s website to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Hotspot Shield.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Hotspot Shield server

  1. Follow the instructions for obtaining the OpenVPN information from above.
  2. Enter the new Server Address in the Server IP/Name field.
  3. Enter the new Username and Password.
  4. Enter the new Public Client Cert and Private Client Key.
  5. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero Bypass certain devices from VPN

· ·

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone, other Wi-Fi network, or the Privacy Hero network.

If you have certain devices in your network that you do NOT want connecting to VPN you can follow these steps to bypass these devices from the Privacy Hero’s VPN connection.

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Enter your Privacy Hero account email and password. Click Login.

Privacy Hero Access Settings

If you have not created your Privacy Hero account yet please follow these instructions.

3. Click the Devices symbol.

Privacy Hero Devices

4. Click the name of the Device you want to bypass from VPN.

Privacy Hero Select Device

5. Set the VPN toggle to Off. You can also do the same for Adblocking and Device Protection as needed.

Privacy Hero VPN off by device

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish AsusWRT OpenVPN Setup

· ·

Preparing for IPVanish AsusWRT Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

IPVanish login

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

IPVanish download ovpn

AsusWRT Router Setup for IPVanish

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in IPVanish New York.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.

7. In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

8. Click Apply and Enable at the bottom of the page.

Asus IPVanish profile

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus IPVanish Connected

Verify a successful IPVanish connection

  1. You should now see a CONNECTED message.
  2. Visit IPVanish’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.

How to change the IPVanish server

  1. Follow the steps at the top of the page to obtain a new .ovpn file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark AsusWRT WireGuard Setup

· ·

Preparing for Surfshark AsusWRT Setup

Copy your Surfshark Private Key

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.

Surfshark Private Key

AsusWRT Router Setup for Surfshark

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in Surfshark.

5. In the VPN Type dropdown select Surfshark.

6. In the Region dropdown select the Surfshark location you want to connect to.

7. In the Private Key field paste in the Surfshark Private Key obtained earlier.

8. Click Apply and Enable at the bottom of the page.

Asus Surfshark profile

If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus Surfshark Connected

Verify a successful Surfshark connection

  1. You should now see a CONNECTED message.
  2. Visit Surfshark’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Use the profile service state toggle to disconnect the currently connected location.
  2. Then click into the Surfshark profile in the router’s settings.
  3. Then adjust the Region dropdown to a new location.
  4. Click Apply all settings.
  5. Use the profile service state toggle to connect the new location.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Flint/Slate GL.iNet Internet Setup

· ·

Follow this article when you receive your new Flint or Slate GL.iNet router to connect it to the Internet.

1. Connect the ethernet cable that came with the router from an open LAN ethernet port on your ISP modem or other router to the WAN port of the Flint or Slate GL.iNet router.

Flint Internet
Slate Internet

2. Connect the power to the router and wait about 2 minutes for the router to fully boot up.

3. Connect your computer, phone, or tablet to the GL.iNet router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

4. Once connected via wireless or ethernet on your device open your browser and go to 192.168.8.1

GL.iNet router access

5. Enter openwrt as the admin password to access the GL.iNet firmware settings.

GL.iNet admin password enter

6. Verify that your Flint/Slate GL.iNet router is receiving a WAN IP Address and webpages are loading while connected to its network.

GL.iNet WAN Settings

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here