FlashRouters Support Portal

Prioritizing Privacy

Search Results for: setting default browser

Device Settings That Can Interfere With Your Router VPN

· ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.

Jump to a Section

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

  • An unexpected public IP address.
  • An unexpected VPN location.
  • Websites or applications not loading.
  • Streaming region problems.
  • DNS problems.
  • Slow or unstable connections.
  • One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

  1. Open Settings.
  2. Select Wi-Fi.
  3. Tap the information button next to the FlashRouter WiFi network.
  4. Find Limit IP Address Tracking.
  5. Turn it Off.
  6. Disconnect from WiFi and reconnect.
  7. Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

  1. Open Settings.
  2. Tap your Apple Account/name.
  3. Select iCloud.
  4. Select Private Relay.
  5. Temporarily turn Private Relay Off.
  6. Reconnect to the FlashRouter.
  7. Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

  1. Open Settings.
  2. Select Network & internet.
  3. Select Private DNS.
  4. Temporarily select Off.
  5. Save the setting.
  6. Reconnect to the FlashRouter WiFi.
  7. Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

  1. Open Settings.
  2. Select Network & internet.
  3. Select VPN.
  4. Select the configured VPN.
  5. Disable Always-on VPN while testing.
  6. Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

  • Web Protection.
  • Safe Browsing or Secure Web.
  • Network Protection.
  • DNS Protection.
  • HTTPS scanning.
  • Tracking protection.
  • Built-in VPN services.
  • Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

  • VPN services.
  • Proxy connections.
  • Secure DNS or DNS-over-HTTPS.
  • Privacy or filtering extensions.
  • Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

  • FlashRouter VPN: On
  • Device VPN: Off
  • iCloud Private Relay: Off while testing
  • Limit IP Address Tracking: Off while testing
  • Android Private DNS/custom DNS: Off while testing
  • Always-On VPN: Off while testing
  • Third-party network filtering: Off while testing

Then:

  1. Disconnect the affected device from WiFi.
  2. Reconnect it to the FlashRouter.
  3. Open a fresh private/incognito browser window.
  4. Check the device’s public IP address and location.
  5. Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

  1. Open app.privacyhero.com.
  2. Open the Devices section.
  3. Select the affected device.
  4. Confirm VPN protection is enabled for that device.
  5. Disconnect any VPN application running directly on the device.
  6. Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.

Related FlashRouters Guides

Surfshark Setup for Privacy Hero

· ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.

Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Privacy Hero VPN Kill Switch Setup

· ·

The Privacy Hero VPN Kill Switch prevents regular internet traffic from passing through your router if its VPN disconnects or fails to connect. This helps prevent devices from using your normal ISP connection without VPN protection.

Before enabling: Make sure your VPN is already Connected and that internet access works through the VPN. The Kill Switch is optional, but useful if you prefer internet access to stop rather than continue unprotected when the VPN goes down.

Privacy Hero is managed at app.privacyhero.com. You can make changes using a computer, phone, or tablet.

How to Enable the VPN Kill Switch

  1. Open app.privacyhero.com and sign in using your Privacy Hero account. If the router has not been activated yet, follow the Privacy Hero Activation and Setup guide first.
  2. Open the VPN section of your Privacy Hero settings.
  3. Confirm that your selected VPN provider is active and its connection status shows Connected. If the VPN is failing, fix the connection before proceeding.
  4. Find VPN Killswitch (VPN Kill Switch) and move its toggle to On (orange). The setting is enabled when its toggle is On.
  5. Keep a device connected to the Privacy Hero WiFi or LAN and confirm that ordinary websites work with the VPN connected.
Privacy Hero Security and Privacy VPN Killswitch toggle enabled, highlighted on the right side of the settings page
In Privacy Hero, the VPN Killswitch toggle is shown directly below the VPN provider setting.

Tip: To check the router’s VPN IP address, use a browser on a device connected to Privacy Hero, not on a phone using cellular data or another WiFi network. Disable any separate VPN app on the test device so you can verify the router VPN independently.

What Happens When the Kill Switch Is On?

VPN status Kill Switch Normal internet traffic
Connected On Allowed through the VPN
Disconnected or Failed On Blocked until the VPN reconnects or you turn the Kill Switch off
Disconnected or Failed Off May use the normal ISP connection without VPN protection

The Kill Switch does not turn off the WiFi network. Your device may stay connected to Privacy Hero WiFi but report No Internet when the VPN is unavailable. Some phones and computers may automatically switch to cellular data or another saved WiFi network.

Access Privacy Hero Even When the Kill Switch Is Blocking Internet

Important: Privacy Hero includes a built-in exception for its cloud management dashboard. If the VPN is down and the Kill Switch blocks normal internet traffic, you can still access app.privacyhero.com while connected to the Privacy Hero WiFi or LAN network, provided the router itself still has its upstream/cloud connection.

This means you can sign in, check the VPN status, change the server or protocol, or switch off the Kill Switch without first leaving the Privacy Hero network.

You can also access the cloud dashboard through another working WiFi connection or cellular data. If the router shows Offline in the dashboard, that indicates a separate WAN or cloud-connectivity problem rather than normal Kill Switch behavior.

How to Turn Off the Kill Switch or Restore Internet

If your VPN has stopped connecting and you need to restore ordinary internet access temporarily:

  1. Open app.privacyhero.com, including from the Privacy Hero network if the Kill Switch is blocking regular internet.
  2. Open VPN and check the current VPN status.
  3. Move VPN Killswitch to Off.
  4. If the VPN remains Failed or Disconnected, temporarily switch the VPN connection Off and test internet access using a device on the Privacy Hero network.
  5. Repair the VPN connection, confirm Connected, and verify that ordinary internet traffic works through the VPN before turning the Kill Switch back On.

Security note: With the Kill Switch off, devices may access the internet without VPN protection if the VPN is disconnected. Re-enable it after testing if preventing non-VPN traffic is your goal.

VPN showing Failed? Privacy Hero includes a Reset option that removes all saved third-party VPN settings. With an active Privacy Premium subscription, the router reconnects using the built-in Privacy Hero VPN. With Privacy Core, it returns to your normal ISP connection without a router VPN.

Before using Reset, see our How to Reset a Failed VPN Connection on Privacy Hero guide.

For a complete diagnosis of WiFi connected but no internet, VPN failures, and router Offline status, follow the Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Related Privacy Hero Guides

How to Reset a Failed VPN Connection on Privacy Hero

· ·

If your Privacy Hero VPN connection shows Failed, you can use the new Reset button to clear the saved third-party VPN settings and return the router to its available default connection. This is useful when a VPN setup is stuck or you want to start again without manually removing the existing third-party VPN configuration.

Important: A VPN reset removes all saved third-party VPN settings from Privacy Hero. You will need to configure that provider again if you want to use it later. The connection Privacy Hero uses after resetting depends on your subscription plan.

When Should You Use the VPN Reset Button?

Use Reset when the current VPN connection is in a Failed state and you want to remove the third-party VPN setup and restore a working default connection. It is a more complete action than simply retrying the same VPN server.

  • Use it if the third-party VPN settings are no longer working and you want to start over.
  • Use it if you no longer want the saved third-party VPN configuration.
  • Do not use it if you need to preserve the existing VPN configuration. First try reconnecting or choosing a different VPN server or protocol.

The Reset action addresses the VPN configuration. It does not repair a disconnected WAN cable, an ISP outage, or a router that cannot reach the Privacy Hero cloud.

How to Reset a Failed VPN Connection

  1. Open app.privacyhero.com in a browser and sign in to your Privacy Hero account.
  2. Select your Privacy Hero router, then open its VPN settings.
  3. Confirm the existing VPN connection is showing Failed.
  4. Find the new Reset button in the failed VPN connection area. Before clicking, be aware that this action will remove all third-party VPN settings saved on the router.
  5. Click Reset. If a confirmation message appears, review it before confirming. Allow the dashboard to apply the reset and update the VPN connection status.
  6. Check the resulting connection using the subscription comparison below, then verify internet access from a device connected to Privacy Hero.

Dashboard access during a Kill Switch block: Privacy Hero permits access to app.privacyhero.com over its WiFi or LAN even when the VPN Kill Switch blocks ordinary internet traffic, as long as the router maintains its upstream/cloud connection. You can also manage the router from cellular data or another working internet connection.

What Happens After Reset? Privacy Premium vs. Privacy Core

VPN Reset: Side-by-Side Plan Comparison
Privacy Premium Active subscription Privacy Core
Third-party VPN settingsRemoved Third-party VPN settingsRemoved
Connection after resetBuilt-in Privacy Hero VPN Connection after resetNormal ISP internet
VPN protection afterwardYes, when the built-in VPN is connected VPN protection afterwardNo router VPN is active

Privacy Core users: After resetting, your normal internet access is not VPN-protected by Privacy Hero. If you want a third-party VPN again, you must configure it again in Privacy Hero.

Privacy Premium users: Check that the built-in Privacy Hero VPN shows Connected before assuming your traffic is going through the VPN. A working upstream internet connection and active Premium subscription are still required.

What Information Does the Reset Remove?

The VPN Reset button clears the third-party VPN configuration stored in Privacy Hero. This means any saved third-party provider details will need to be entered or imported again before that provider can be used.

Depending on the provider and protocol you had configured, this may include the saved VPN provider selection, server details, credentials or tokens, and custom OpenVPN or WireGuard settings. Have your provider login or configuration materials available if you plan to set up that VPN again.

This is a VPN configuration reset, not a request to cancel your third-party VPN subscription. It should not be confused with a full router factory reset.

How to Verify Internet and VPN Status After Reset

  1. Refresh the Privacy Hero dashboard and reopen VPN.
  2. If you have Privacy Premium, verify that the built-in Privacy Hero VPN is selected and shows Connected.
  3. If you have Privacy Core, verify that the third-party VPN configuration is gone and ordinary internet access is available through your ISP connection.
  4. Connect a computer or phone to the Privacy Hero WiFi or LAN. To test the router by itself, turn off any VPN application running directly on that device.
  5. Load a regular website, then check your public IP address using ipleak.net. Premium should show a VPN IP if its built-in VPN is connected; Core will normally show your ISP public IP.

If you have Streaming Relocation enabled, some streaming services may use their separately selected location; that is not necessarily the same location shown by a general public IP check.

Reset Complete but Still No Internet?

  1. Check the VPN Kill Switch. If it is still enabled while there is no working VPN connection, it may block ordinary internet traffic. Review the Kill Switch setting before assuming the router has lost WiFi.
  2. Check the connection status. A router listed as Offline may have a WAN, ISP, or cloud-communication problem. The VPN reset cannot fix an upstream internet outage.
  3. Check the network wiring. Confirm your main router or ISP gateway has internet access and the cable is connected to the Privacy Hero WAN/Internet port.
  4. Check a device on Privacy Hero WiFi or LAN. Make sure you are testing the Privacy Hero network rather than another WiFi or cellular connection.
  5. Check your subscription. An active Privacy Premium subscription is required for the built-in Privacy Hero VPN fallback described above. Privacy Core returns to ordinary ISP internet access.

For Kill Switch behavior and restoring internet, see Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting. To learn when to enable the feature, see Privacy Hero VPN Kill Switch Setup.

Related Privacy Hero Articles

Private Internet Access (PIA) Setup for Privacy Hero

· ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

How do I reset and reconfigure my FlashRouter?

· ·

When is a router reset needed?

A reset of the FlashRouter should only be performed in the following instances:

  • You have exhausted all other troubleshooting methods and cannot access your router settings.
  • A backup file was saved of your previously working settings.
  • Username and password to access the FlashRouter’s settings are not working.
  • Power light on the router is blinking steadily.
  • Firmware upgrade was performed with Reset to Default settings selected.

Reset Router

Asus FlashRouters:

  1. While the router is powered off press and hold the WPS button on the back or side of the router. Power up the router while continuing to hold the WPS. Continue to hold for 15 seconds as the router powers on (note this could be up to 45 seconds on some models before lights flash).
  2. You will see the lights on the router flashing steadily and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Linksys and Netgear FlashRouters:

  1. While the router is plugged in, find the reset button located on the back of the router. You will need a pin or pencil to hold down the button for 15 seconds.
  2. You will see the lights on the back of the router flash simultaneously and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “dd-wrt” and will likely not require a password to join. If it does require a password to join the password will be the default wireless password found on the bottom of the router.

2. Open your web browser and enter 192.168.1.1 in the URL.

Reset FlashRouters DD-WRT Settings Back to Default Settings

3. Delete the dots and enter the new administration login in the Router Username, Router Password, and Re-enter to confirm fields.

TYPE CAREFULLY when setting the administration login as a typo will result in needing to reset the router again.

Change Local IP Address and DNS

Navigate to Setup > Basic Setup

1. Set the Local IP Address to 192.168.11.1

2. Set the Static DNS 1 to 8.8.8.8

3. Set the Static DNS 2 to 8.8.4.4

4. Set the Static DNS 3 to 208.67.220.220

Enter New Local IP Address and DNS Servers After FlashRouter DD-WRT Reset

CLICK SAVE

Setup WiFi

Navigate to Wireless > Basic Settings

Find your FlashRouter model in the WiFi Setup section and replicate the wireless settings on this page.

CLICK APPLY SETTINGS

REBOOT ROUTER

Connect to the FlashRouter's network

You will be able to connect to the newly setup wireless network using the details you set. The router will now be accessible at 192.168.11.1

Back up your settings

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How do I reset and reconfigure my ExpressVPN/Aircove FlashRouter?

· ·

When is a router reset needed?

A reset of the FlashRouter should only be performed in the following instances:

  • You have exhausted all other troubleshooting methods and cannot access your router settings.
  • Password to access the FlashRouter’s settings are not working.
  • Power light on the router is blinking steadily.
  • Router is not accessible after upgrading the firmware

Reset Router

Asus FlashRouters:

  1. While the router is powered off press and hold the WPS button on the back or side of the router. Power up the router while continuing to hold the WPS. Continue to hold for 15 seconds as the router powers on (note this could be up to 45 seconds on some models before lights flash).
  2. You will see the lights on the router flashing steadily and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Aircove, Linksys and Netgear FlashRouters:

  1. While the router is plugged in, find the reset button located on the back of the router. You will need a pin or pencil to hold down the button for 15 seconds.
  2. You will see the lights on the back of the router flash simultaneously and this is how you know you have reset the router.
  3. Let the router sit for about a minute and then reboot the router.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Click Get Started on the ExpressVPN page that is displayed.

ExpressVPN Get Started

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

ExpressVPN Activation Code

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

ExpressVPN Wiring

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

ExpressVPN Share Crash Report

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

ExpressVPN Set WiFi Name and Password

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

ExpressVPN admin password

8. Your ExpressVPN FlashRouter is now fully setup!

ExpressVPN Connected

ExpressVPN/Aircove FlashRouter Internet Setup and Activation

· ·

Follow this article when you receive your new ExpressVPN FlashRouter to connect your FlashRouter to the Internet via ExpressVPN and customize your network so it is ready to use.

Obtain your ExpressVPN Activation Code

If you are not already an ExpressVPN user Sign Up Now.

1. Visit ExpressVPN’s website login page.

ExpressVPN on FlashRouters Privacy App Setup - Sign Into ExpressVPN Dashboard

2. Copy your ExpressVPN Activation code and paste it into a document or leave this page open while you proceed with the instructions.

Access Router Settings

1. Connect to the FlashRouter’s network via ethernet cable or wireless.

The wireless network will appear as “Aircove”, “Linksys##”, “Netgear##”, or “Asus” and the password to join the network will be the default wireless password printed on the bottom of the router.

2. Open your web browser and enter expressvpnrouter.com or 192.168.132.1 in the URL.

ExpressVPNrouter.com
192.168.132.1

3. Click Get Started on the ExpressVPN page that is displayed.

ExpressVPN Get Started

4a. If your FlashRouter is wired to the Internet correctly then you will be prompted to enter your ExpressVPN Activation Code found in your ExpressVPN account. Paste that in and click Sign in to ExpressVPN.

ExpressVPN Activation Code

4b. If your FlashRouter is not wired correctly or is not receiving Internet properly make sure you are wired as detailed in the diagram that appears. If you are stuck at this screen we recommend powering off your ISP modem and any other router that the ExpressVPN FlashRouter is wired to and then powering them back up one by one.

Proceed with step “4a” above once the router is receiving Internet and you are prompted to enter the Activation Code.

ExpressVPN Wiring

5. Select if you want to share anonymous crash report data with ExpressVPN to help them improve the firmware for future releases.

ExpressVPN Share Crash Report

6. Set the WiFi name and password your wireless devices will use to connect to the FlashRouter’s network. Make sure the WiFi name is unique and not a duplicate of an existing WiFi name if you change it. You can also leave it as the default information if you like. Click Continue.

ExpressVPN Set WiFi Name and Password

7. Enter the admin password you will use to access the ExpressVPN router settings. Be sure to TYPE CAREFULLY when setting the admin password as a typo will result in needing to reset the router again. Note this password in a secure location or commit it to memory.

ExpressVPN admin password

8. Your ExpressVPN FlashRouter is now fully setup!

ExpressVPN Connected

CyberGhost AsusWRT OpenVPN Setup

· ·

Preparing for CyberGhost Setup

Obtain your CyberGhost OpenVPN information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

CyberGhost Website Login

2. Select VPN.

CyberGhost VPN

3. Click Configure New Device.

CyberGhost Configure Device

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost protocol and location

5. Press View configuration.

CyberGhost view configuration

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the folder that was downloaded. Then open the ca.crt the client.crt, and client.key files with NotePad++ for Windows or TextEdit for Apple. All CyberGhost servers have different keys and certificates.

AsusWRT Router Setup for CyberGhost

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in USA so I have entered in CyberGhost USA.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the openvpn.ovpn file from the folder you downloaded earlier. Then click Upload.

7. In the Username and Password fields enter in the CyberGhost assigned username and password that you obtained earlier.

8. After uploading the openvpn.ovpn file you will get a message that says “Complete, Lack of Client Key!, Lack of Client Certificate, Lack of Certificate Authority”. For CyberGhost you need to enter in these details manually. Click Import the CA file or edit the .ovpn file manually and then click the edit icon next to Content modification of Keys and Certificate.

Asus CyberGhost import certs and keys

9. In the Certificate Authority field paste in the entire content of the ca.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

10. In the Client Certificate field paste in the entire content of the client.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

11. In the Client Key field paste in the entire content of the client.key file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Then click OK.

Asus CyberGhost enter certs and keys

8. Click Apply and Enable at the bottom of the page.

Asus CyberGhost profile

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus CyberGhost connected

Verify a successful CyberGhost connection

  1. You should now see a CONNECTED message.
  2. Visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to CyberGhost.

How to change the CyberGhost server

  1. Follow the steps at the top of the page to create a new CyberGhost location profile in your account.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish Setup for Privacy Hero

· ·

Privacy Hero supports IPVanish VPN through WireGuard (recommended) and OpenVPN. Both are configured in Privacy Hero using the Custom VPN provider option. You will need an active IPVanish VPN subscription and the configuration file for the protocol and server location you select.

Choose your method: WireGuard uses a generated .conf file and generally provides better performance. OpenVPN uses a downloaded .ovpn file plus your IPVanish VPN username and password.

Privacy Hero is cloud-managed. You can sign in and adjust VPN settings from a computer, phone, or tablet connected to any internet connection. You do not need to be on the Privacy Hero WiFi network to configure the router.

Download an IPVanish WireGuard Configuration (Recommended)

Use the WireGuard configuration generator in your IPVanish account to create a server file for your router. A generated WireGuard file contains the connection keys and server details, so keep it private.

  1. Open the IPVanish account sign-in page and log in.
  2. Open WireGuard in the account navigation to access the WireGuard Configuration Generator.
  3. Select your preferred IPVanish server location and choose Generate to download the WireGuard configuration file. Save the downloaded .conf file to the device you are using for setup.

Important: Do not publicly share your WireGuard configuration file. To switch server locations later, generate and upload a new configuration.

Add IPVanish WireGuard to Privacy Hero

  1. Sign in to the Privacy Hero dashboard at app.privacyhero.com.
  2. Open the VPN section, select Change beside the provider, and choose Custom.
  3. Choose WireGuard and upload the IPVanish .conf file you just generated.
  4. Click Save to apply the settings. Wait for Privacy Hero to report Connected.
Privacy Hero Custom WireGuard configuration with WireGuard file upload

WireGuard authentication is contained in the generated configuration file; there is no separate OpenVPN username/password step in this method.

Download an IPVanish OpenVPN Configuration File

OpenVPN is a good alternative if WireGuard is unavailable or fails to connect on your network. It requires an IPVanish .ovpn configuration file and VPN login credentials.

  1. Open the IPVanish OpenVPN server configuration list.
  2. Download an .ovpn file for your preferred available server location. If IPVanish provides both UDP and TCP files, start with UDP and keep a TCP file as a fallback.
  3. Have your IPVanish account username and password available for the OpenVPN setup. Use the credentials accepted by your IPVanish VPN account; these are not Privacy Hero login credentials.

If the linked server directory has changed, check the latest manual OpenVPN configuration downloads offered by IPVanish before selecting a file.

Add IPVanish OpenVPN to Privacy Hero

  1. Sign in at app.privacyhero.com and open VPN.
  2. Select Change, choose Custom, and select OpenVPN.
  3. Upload the IPVanish .ovpn file you downloaded.
  4. Enter your IPVanish username and password in the Custom OpenVPN fields. Do not enter the Privacy Hero account login.
  5. Click Save and wait for the connection status to show Connected.
Privacy Hero Custom OpenVPN configuration showing server file upload and username and password fields

Tip: If OpenVPN UDP times out or cannot connect, try an available IPVanish OpenVPN TCP configuration or another server location.

Verify Your IPVanish VPN Connection

After Privacy Hero displays Connected, verify that a device on the router is actually using IPVanish.

  1. Connect the device you want to test to the Privacy Hero WiFi or LAN network.
  2. Temporarily disconnect any IPVanish app, other VPN app, or device-level VPN connection on that device so you test the router VPN alone.
  3. Open a new private/incognito browser window and visit IPVanish What Is My IP Address.
  4. Confirm that your public IP address and approximate location correspond to the VPN server you selected.

Note: Privacy Hero settings can be managed remotely, but the device used for this IP test must be on the Privacy Hero network.

Streaming Relocation and Your VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use the configured Streaming Relocation location instead of the IPVanish server location. See Privacy Hero Streaming Relocation.

IPVanish Not Connecting?

If Privacy Hero remains on Connecting, displays Failed, or reports a timeout, check the following:

  1. Make sure your IPVanish subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. For WireGuard, generate a fresh configuration from your IPVanish account and upload that .conf file again.
  3. For OpenVPN, confirm your IPVanish username/password and upload a fresh .ovpn file for a different server.
  4. Try a different server location. With OpenVPN, also try switching between available UDP and TCP files.
  5. Temporarily disable the Privacy Hero VPN connection and test normal internet access. If enabled, temporarily turn off the VPN Kill Switch for this test, then restore your preferred Kill Switch setting.
  6. Check whether a device-level VPN app, private DNS, proxy, or security software is interfering with the router VPN connection.

VPN Disconnected and No Internet?

The VPN Kill Switch can intentionally block internet access when the VPN disconnects. Review Privacy Hero VPN Kill Switch Setup.

VPN Connected but One Device Shows the Wrong IP?

If only one device shows an unexpected IP address, look for another VPN app, iCloud Private Relay, Private DNS, browser proxy/DNS settings, or security software on that device. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

CyberGhost Merlin OpenVPN Setup

· ·

Preparing for CyberGhost Setup

Obtain your CyberGhost OpenVPN information

If you are not already a CyberGhost user Sign Up Now.

1. Log in to your account on the CyberGhost website.

CyberGhost Website Login

2. Select VPN.

CyberGhost VPN

3. Click Configure New Device.

CyberGhost Configure Device

4. Set Protocol to OpenVPN. Select the Country you would like to connect to. Select the Server Group. Name the device in the Device Name field. Click Save Configuration.

CyberGhost protocol and location

5. Press View configuration.

CyberGhost view configuration

6. Copy the Username, and Password that appear to a notepad, since you will need this information later in the setup process. Click Download Configuration.

CyberGhost Website OpenVPN Configuration Files Generator 1

Open the folder that was downloaded. Then open the ca.crt the client.crt, and client.key files with NotePad++ for Windows or TextEdit for Apple. All CyberGhost servers have different keys and certificates.

Merlin Router Setup for CyberGhost

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Click Choose file and select the .ovpn file from the folder you downloaded earlier. Then click Upload.

Merlin Choose File Upload

4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.

Merlin Automatic Start at boot time

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location here. Our example server was in USA so I have entered in CyberGhost USA.

Merlin CyberGhost Description field

6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.

Merlin Accept DNS configuration Redirect Internet and Kill Switch

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.

7. Enter your CyberGhost OpenVPN username and password that you obtained earlier. Do not enter your account login.

Merlin VPN Username and Password

8. Click the Edit button in the Keys and Certificates area.

Merlin Keys and Certificates Edit button

9. In the Certificate Authority field paste in the entire content of the ca.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Merlin Certificate Authority

10. In the Client Certificate field paste in the entire content of the client.crt file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Merlin Client Certificate

11. In the Client Key field paste in the entire content of the client.key file.

—– BEGIN xxx —– / —– END xxx —– block (including those two lines).

Merlin Client Key

12. Click Save at the bottom of that window.

13. Click Apply at the bottom of the page.

14. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Merlin Service State All Providers

Verify a successful CyberGhost connection

  1. You should now see a CONNECTED message.
  2. Visit What is my IP Address from a private/incognito browser to verify your new IP address and virtual location.

TROUBLESHOOTING

Still having issues? Visit the FR Privacy App Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

· ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup Method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. Click Choose a location.

Surfshark Choose a Location

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Surfshark download conf file

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Select WireGuard as the VPN Protocol.

Merlin VPN Client WireGuard

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

Merlin WireGuard Choose File Upload

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

Merlin WireGuard ProtonVPN Description

6. Set Enable WireGuard to Yes.

Merlin Enable WireGuard

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

Merlin WireGuard Connected

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

WireGuard select VPN Director

9. On the VPN Director page click the + symbol next to Add new rule.

WireGuard VPN Director Add new rule

10. Select the new WireGuard profile in the Interface dropdown.

WireGuard VPN Director select Interface

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Follow the steps at the top of the page to obtain a new .conf file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Setup for Privacy Hero

· ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

  1. Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
  2. In the left navigation, select Set Up Devices.
  3. Under Applications, expand Advanced setup and choose Manual Configuration.
  4. Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

  1. On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
  2. Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section.
  3. Click Change beside the VPN provider and choose Custom.
  4. Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
  5. Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.
Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

  1. If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
  2. Click Save to apply the configuration and establish the VPN connection.
  3. Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.
Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

  1. Connect the testing device to the Privacy Hero WiFi or LAN network.
  2. Disconnect the ExpressVPN app or any other VPN application running directly on that device.
  3. Open a fresh private/incognito browser window.
  4. Visit ExpressVPN What Is My IP.
  5. Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

  1. Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
  2. Check that you selected Custom in Privacy Hero, rather than another VPN provider.
  3. Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
  4. Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
  5. Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
  6. Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

ProtonVPN Setup for Privacy Hero

· ·

Privacy Hero supports Proton VPN through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It uses a downloadable .conf configuration file. OpenVPN uses a downloadable .ovpn file and a separate Proton VPN OpenVPN username and password (not your regular Proton Account login).

Privacy Hero is cloud-managed. You can configure the VPN from a computer, smartphone, or tablet connected to any internet network; you do not need to be on the Privacy Hero WiFi to change settings.

Proton VPN WireGuard Setup (Recommended)

WireGuard uses a configuration file generated by Proton VPN. You do not need an OpenVPN username and password for this method.

Generate Your Proton VPN WireGuard Configuration

  1. Open your Proton VPN account and sign in.
  2. Go to Downloads → WireGuard configuration.
  3. Enter a recognizable configuration name and select Router as the platform.
  4. Choose your preferred VPN options and an available server or country. For a straightforward setup, select a standard server configuration.
  5. Click Create, then Download to save the generated WireGuard .conf file to your device.

Important: A WireGuard configuration contains a private key. Keep the downloaded file private; do not paste its contents into public posts or unprotected support messages. For detailed Proton account instructions, see Proton VPN: Download WireGuard Configuration Files.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change beside the VPN provider, and choose Custom.
  3. Select WireGuard and upload the Proton VPN .conf file you downloaded.
  4. Click Save to apply the configuration and connect. Confirm that Privacy Hero reports Connected.
Privacy Hero Custom WireGuard configuration screen showing the configuration file upload

Proton VPN OpenVPN Setup

OpenVPN is an alternative to WireGuard. You need a Proton VPN OpenVPN-specific username and password and a server .ovpn configuration file.

Get Your Proton VPN OpenVPN Credentials

  1. Sign in to your Proton VPN account.
  2. Open Account → OpenVPN username to find your separate OpenVPN username and password.
  3. Copy these credentials or keep the page open. Do not use your usual Proton Account email and password for the manual OpenVPN connection.

For help locating these credentials, see Proton VPN: How to Sign In / OpenVPN Credentials.

Download Your Proton VPN OpenVPN Server File

  1. In your Proton VPN account, go to Downloads → OpenVPN configuration files.
  2. Select Router as the platform and UDP as the protocol (recommended starting point). If UDP does not work on your network, you can try a TCP configuration later.
  3. Select an available country or individual server from the standard configuration list, then click Download to save its .ovpn file.

For additional details about the file download options, see Proton VPN: Download OpenVPN Configuration Files.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section, click Change, and select Custom as the VPN provider.
  3. Choose OpenVPN and upload the Proton VPN .ovpn file you downloaded.
  4. Enter your separate Proton VPN OpenVPN username and password into the Custom VPN fields.
  5. Click Save, then confirm Privacy Hero displays Connected.
Privacy Hero Custom OpenVPN setup with configuration file upload and separate VPN username and password fields

Verify Your Proton VPN Connection

After Privacy Hero reports Connected, confirm that a device on the router network is using your Proton VPN connection.

  1. Connect your testing device to the Privacy Hero WiFi or LAN network.
  2. Disable any Proton VPN app or other VPN application running directly on that device, so it does not create a second VPN connection.
  3. Open a private/incognito browser window.
  4. Visit Proton VPN’s IP Address Checker.
  5. Verify that the public IP address and approximate location correspond to the Proton VPN server configured in Privacy Hero.

Important: You can manage Privacy Hero from another WiFi network or cellular data. However, the device performing the VPN IP test must be connected to the Privacy Hero network.

Streaming Relocation and VPN Location

If Privacy Hero Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation location rather than the country selected in your Proton VPN configuration. See Privacy Hero Streaming Relocation.

Proton VPN Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, work through these checks:

  1. Confirm that you selected Custom as the VPN provider in Privacy Hero and chose the protocol that matches your configuration file.
  2. For WireGuard, create and download a fresh Proton VPN .conf file for an available server, then upload it again. Do not use an OpenVPN .ovpn file in the WireGuard section.
  3. For OpenVPN, verify that you entered Proton VPN’s separate OpenVPN username and password, not your regular Proton Account login.
  4. Download a fresh configuration for a different Proton VPN server and reconnect. Proton VPN occasionally changes server configurations.
  5. If using OpenVPN UDP and the connection still fails, download and try a TCP .ovpn configuration file to test for a protocol-related issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet works without the VPN. Re-enable your preferred Kill Switch setting once testing is complete.

VPN Disconnects and Devices Have No Internet?

The VPN Kill Switch may be intentionally blocking normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

Check the affected device for a second VPN app, iCloud Private Relay, Private DNS, browser proxy settings, or filtering software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Change WiFi name and password on Merlin

· ·

Set a custom WiFi network name and password for your devices to join the Merlin FlashRouter’s network.

Login to Asus Merlin firmware settings in a browser on any computer or smart device.

1. Under General select Network Map.

Merlin Wifi change name and pass

2. In the Network name (SSID) field enter the name you want your Asus WiFi to appear as. This can be the same or different for both 2.4GHz and 5GHz bands. We typically advise setting different names for each so you can connect your streaming devices to the 5GHz band as that is the faster WiFi band.

3. In the WPA-PSK key field enter the password you want to join your devices to the Merlin WiFi network. If your WiFi names are the same for 2.4GHz and 5GHz make sure they have the exact same wireless password set.

4. Click Apply and then rejoin the new wireless network.

ProtonVPN Merlin WireGuard Setup

· ·

Preparing for ProtonVPN Merlin Setup

Download your ProtonVPN .conf file

If you are not already an ProtonVPN user Sign Up Now.

1. Log in to your account on the ProtonVPN website.

ProtonVPN Account Sign in

2. Click Downloads.

ProtonVPN Downloads

3. Scroll down to WireGuard configuration and name the device FlashRouter.

ProtonVPN WireGuard Configuration Name

4. Select Router as the platform.

ProtonVPN WireGuard select Platform

5. Select the VPN options that best fit your needs. We typically use the settings as seen in the screenshot here if you are unsure.

ProtonVPN WireGuard VPN options

6. Next select the server that you would like to connect to and click Create. At the top of the page you’ll see ProtonVPN’s recommended server which we recommend using unless you need to connect to a specific location.

If you need a specific server location find it in the list and click Create.

ProtonVPN WireGuard recommended server
ProtonVPN WireGuard specific server

7. After clicking Create a new window will appear. Click Download to download the .conf file to your computer.

Merlin Router Setup for ProtonVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Select WireGuard as the VPN Protocol.

Merlin VPN Client WireGuard

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

Merlin WireGuard Choose File Upload

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in US-NY#61 so I have entered in ProtonVPN NY-61.

Merlin WireGuard ProtonVPN Description

6. Set Enable WireGuard to Yes.

Merlin Enable WireGuard

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

Merlin WireGuard Connected

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

WireGuard select VPN Director

9. On the VPN Director page click the + symbol next to Add new rule.

WireGuard VPN Director Add new rule

10. Select the new WireGuard profile in the Interface dropdown.

WireGuard VPN Director select Interface

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful ProtonVPN connection

Visit ProtonVPN’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to ProtonVPN.

How to change the ProtonVPN server

  1. Follow the steps at the top of the page to obtain a new .conf file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PureVPN Merlin WireGuard Setup

· ·

Preparing for PureVPN Merlin Setup

Download your PureVPN .conf file

If you are not already an PureVPN user Sign Up Now.

1. Log in to your account on the PureVPN website.

PureVPN Login

2. Select Manual Configuration.

PureVPN Manual Configuration

3. Select the Server Location you want to connect to and then click Download.

PureVPN select server location

4. In the Select Protocol dropdown choose WireGuard.

PureVPN WireGuard

5. In the Select Device dropdown choose DD-WRT. Then click Generate Configuration. This will save a .conf file to your computer.

PureVPN Generate Config

Merlin Router Setup for PureVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Select WireGuard as the VPN Protocol.

Merlin VPN Client WireGuard

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

Merlin WireGuard Choose File Upload

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here.

Merlin WireGuard ProtonVPN Description

6. Set Enable WireGuard to Yes.

Merlin Enable WireGuard

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

Merlin WireGuard Connected

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

WireGuard select VPN Director

9. On the VPN Director page click the + symbol next to Add new rule.

WireGuard VPN Director Add new rule

10. Select the new WireGuard profile in the Interface dropdown.

WireGuard VPN Director select Interface

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful PureVPN connection

Visit PureVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PureVPN.

How to change the PureVPN server

  1. Follow the steps at the top of the page to obtain a new .conf file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IPVanish AsusWRT OpenVPN Setup

· ·

Preparing for IPVanish AsusWRT Setup

Download your IPVanish .ovpn file

If you are not already an IPVanish user Sign Up Now.

1. Log in to your account on the IPVanish website.

IPVanish login

2. Successfully log in with your account information then go to IPVanish .ovpn file page.

3. Click on the .ovpn file for the server location you want to use to dowloand the .ovpn file. Do not open this file.

IPVanish download ovpn

AsusWRT Router Setup for IPVanish

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in IPVanish New York.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.

7. In the Username and Password fields paste in the IPVanish email and password you use to successfully login to your IPVanish website account.

8. Click Apply and Enable at the bottom of the page.

Asus IPVanish profile

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus IPVanish Connected

Verify a successful IPVanish connection

  1. You should now see a CONNECTED message.
  2. Visit IPVanish’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to IPVanish.

How to change the IPVanish server

  1. Follow the steps at the top of the page to obtain a new .ovpn file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark AsusWRT WireGuard Setup

· ·

Preparing for Surfshark AsusWRT Setup

Copy your Surfshark Private Key

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.

Surfshark Private Key

AsusWRT Router Setup for Surfshark

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in Surfshark.

5. In the VPN Type dropdown select Surfshark.

6. In the Region dropdown select the Surfshark location you want to connect to.

7. In the Private Key field paste in the Surfshark Private Key obtained earlier.

8. Click Apply and Enable at the bottom of the page.

Asus Surfshark profile

If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus Surfshark Connected

Verify a successful Surfshark connection

  1. You should now see a CONNECTED message.
  2. Visit Surfshark’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Use the profile service state toggle to disconnect the currently connected location.
  2. Then click into the Surfshark profile in the router’s settings.
  3. Then adjust the Region dropdown to a new location.
  4. Click Apply all settings.
  5. Use the profile service state toggle to connect the new location.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero Activation and Setup

· ·

Follow this article when you receive your new Privacy Hero router to create your Privacy Hero account, connect your Privacy Hero to the Internet, and customize your network so it is ready to use.

Your Privacy Hero router uses Cloud Based router management which means you can access the router settings from anywhere on any device that has an internet connection. You can follow these steps while connected to your phone or your other Wi-Fi network.

Create your Privacy Hero account

1. From any device that has a browser such as a computer, smartphone, or tablet visit app.privacyhero.com

App.PrivacyHero.com

2. Select Create Account.

Privacy Hero create Account

3. Enter the Email address you want to set for your Privacy Hero account. This will be your login to the Privacy Hero settings moving forward. Click Create Account.

Privacy Hero Enter account email

4. Go to your Email inbox and check for an email from Privacy Hero and click the Confirm email address link. This email may be in your Promotions or Spam inbox if it is not appearing in your main inbox.

Privacy Hero Confirm Email

5. Enter the password that you want to use for your Privacy Hero account. Be sure to note this in a secure location so you do not forget. Click Submit.

Privacy Hero create password

6. You have now created your Privacy Hero account. You will use this login to access the Privacy Hero router settings.

Activate your Privacy Hero Internet and setup Wi-Fi

1. You will then be taken to the Router Activation steps. Connect the ethernet cable that the Privacy Hero came with from an open Ethernet port on your ISP modem or other router to the WAN/Internet (blue) port of the Privacy Hero.

Then power the Privacy Hero device on by connecting the power supply. This is shown in the video on the page as well. Wait about a minute or so for the Privacy Hero router to fully boot up and then click I’m Connected.

Wire Up Privacy Hero

2. The next page may say Router Found or ask you to enter the Activation Code. If it asks for the Activation Code that will be the code printed on the bottom of the Privacy Hero. Enter this code and click Next.

Privacy Hero Router Found

3. Set the Wi-Fi name and password for connecting your devices to the Privacy Hero network. Make sure it is not a duplicate name of an existing Wi-Fi network. Click Next.

Privacy Hero Set wifi name and password

4. To activate your 1 Year NordVPN code:

Click on Claim NordVPN 1 Year Code Now

NordVPN Claim Code

Go to the Account section of your router settings.

Copy the NordVPN code shown under Claim NordVPN 1 Year Code.

PH Nord Code

Go to the NordVPN activation page.

This code can be used with a new or existing NordVPN account.

NordVPN Activate Page

5. You are now all set to begin joining your devices to the new Privacy Hero network with the Wi-Fi name and password you entered and setting up some of the Privacy Hero features.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

TP-Link Change Wireless Channel

· ·

Follow this guide to change the Wireless channel on your TP-Link FlashRouter.

1. Connect your computer, phone, or tablet to the TP-Link router via wireless (FlashRouter24 / FlashRouter50) or via ethernet cable to one of the LAN ports on the router.

The FlashRouter WiFi password is printed on the sheet that came with the router and is set to Wireless#[First 5 characters of your router MAC]. The router MAC can be found on the bottom of your router if you cannot locate the sheet. For e.g. if your MAC is 1459C07E70A8 then your WiFi password is Wireless#1459C

Be sure to capitalize the W.

2. Once connected via wireless or ethernet on your device open your browser and go to the TP-Link firmware settings.

TP-Link URL Access

3. Enter tp-link as the admin password to access the TP-Link firmware settings.

TP-Link admin password

4. Click Wireless.

TP-Link Wireless tab

5. Change the Channel setting to the number that you want to use. Click Save.

TP-Link Change Wireless Channel

6. Connect your devices to the wireless network again as they may have been disconnected when making this change.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

PrivateInternetAccess (PIA) AsusWRT OpenVPN Setup

· ·

Preparing for PIA AsusWRT Setup

Download your PIA .ovpn file

If you are not already a PIA user Sign Up Now.

1. Log in to your account on the PIA website.

PIA login

2. Successfully log in with your account information then go to PIA’s OpenVPN Config Generator.

3. On the OpenVPN Configuration Generator select the following:

OpenVPN Version: OpenVPN 2.4 or newer

Select Platform: Linux

Select Region: Choose the server location you’d like to connect to

Select Port: Typically we recommend UDP/1198 RSA-2048 AES-128-CBC SHA1 for best speeds but feel free to select the one you want to use.

4. Click Generate to download the .ovpn file. Do not open this file once it is downloaded.

PIA Generate .ovpn file

AsusWRT Router Setup for PIA

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in New York so I have entered in PIA New York.

5. In the VPN Type dropdown select OpenVPN.

6. Click Import .ovpn file and select the .ovpn file you downloaded earlier. Then click Upload.

7. In the Username and Password fields paste in the PIA username and password you use to successfully login to your PIA website account.

8. Click Apply and Enable at the bottom of the page.

Asus PIA profile

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus PIA Connected

Verify a successful PIA connection

  1. You should now see a CONNECTED message.
  2. Visit PIA’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.

How to change the PIA server

  1. Follow the steps at the top of the page to obtain a new .ovpn file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here