Search Results for: show me the mon

Device Settings That Can Interfere With Your Router VPN

Dave · Oct 6, 2026 ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

An unexpected public IP address.
An unexpected VPN location.
Websites or applications not loading.
Streaming region problems.
DNS problems.
Slow or unstable connections.
One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

Open Settings.
Select Wi-Fi.
Tap the information button next to the FlashRouter WiFi network.
Find Limit IP Address Tracking.
Turn it Off.
Disconnect from WiFi and reconnect.
Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

Open Settings.
Tap your Apple Account/name.
Select iCloud.
Select Private Relay.
Temporarily turn Private Relay Off.
Reconnect to the FlashRouter.
Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

Open Settings.
Select Network & internet.
Select Private DNS.
Temporarily select Off.
Save the setting.
Reconnect to the FlashRouter WiFi.
Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

Open Settings.
Select Network & internet.
Select VPN.
Select the configured VPN.
Disable Always-on VPN while testing.
Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

Web Protection.
Safe Browsing or Secure Web.
Network Protection.
DNS Protection.
HTTPS scanning.
Tracking protection.
Built-in VPN services.
Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

VPN services.
Proxy connections.
Secure DNS or DNS-over-HTTPS.
Privacy or filtering extensions.
Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

FlashRouter VPN: On
Device VPN: Off
iCloud Private Relay: Off while testing
Limit IP Address Tracking: Off while testing
Android Private DNS/custom DNS: Off while testing
Always-On VPN: Off while testing
Third-party network filtering: Off while testing

Then:

Disconnect the affected device from WiFi.
Reconnect it to the FlashRouter.
Open a fresh private/incognito browser window.
Check the device’s public IP address and location.
Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

Open app.privacyhero.com.
Open the Devices section.
Select the affected device.
Confirm VPN protection is enabled for that device.
Disconnect any VPN application running directly on the device.
Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.

Related FlashRouters Guides

How to Reset a Failed VPN Connection on Privacy Hero

Dave · Oct 24, 2026 ·

If your Privacy Hero VPN connection shows Failed, you can use the new Reset button to clear the saved third-party VPN settings and return the router to its available default connection. This is useful when a VPN setup is stuck or you want to start again without manually removing the existing third-party VPN configuration.

Important: A VPN reset removes all saved third-party VPN settings from Privacy Hero. You will need to configure that provider again if you want to use it later. The connection Privacy Hero uses after resetting depends on your subscription plan.

When Should You Use the VPN Reset Button?

Use Reset when the current VPN connection is in a Failed state and you want to remove the third-party VPN setup and restore a working default connection. It is a more complete action than simply retrying the same VPN server.

Use it if the third-party VPN settings are no longer working and you want to start over.
Use it if you no longer want the saved third-party VPN configuration.
Do not use it if you need to preserve the existing VPN configuration. First try reconnecting or choosing a different VPN server or protocol.

The Reset action addresses the VPN configuration. It does not repair a disconnected WAN cable, an ISP outage, or a router that cannot reach the Privacy Hero cloud.

How to Reset a Failed VPN Connection

Open app.privacyhero.com in a browser and sign in to your Privacy Hero account.
Select your Privacy Hero router, then open its VPN settings.
Confirm the existing VPN connection is showing Failed.
Find the new Reset button in the failed VPN connection area. Before clicking, be aware that this action will remove all third-party VPN settings saved on the router.
Click Reset. If a confirmation message appears, review it before confirming. Allow the dashboard to apply the reset and update the VPN connection status.
Check the resulting connection using the subscription comparison below, then verify internet access from a device connected to Privacy Hero.

Dashboard access during a Kill Switch block: Privacy Hero permits access to app.privacyhero.com over its WiFi or LAN even when the VPN Kill Switch blocks ordinary internet traffic, as long as the router maintains its upstream/cloud connection. You can also manage the router from cellular data or another working internet connection.

What Happens After Reset? Privacy Premium vs. Privacy Core

VPN Reset: Side-by-Side Plan Comparison
Privacy Premium Active subscription	Privacy Core
Third-party VPN settingsRemoved	Third-party VPN settingsRemoved
Connection after resetBuilt-in Privacy Hero VPN	Connection after resetNormal ISP internet
VPN protection afterwardYes, when the built-in VPN is connected	VPN protection afterwardNo router VPN is active

Privacy Core users: After resetting, your normal internet access is not VPN-protected by Privacy Hero. If you want a third-party VPN again, you must configure it again in Privacy Hero.

Privacy Premium users: Check that the built-in Privacy Hero VPN shows Connected before assuming your traffic is going through the VPN. A working upstream internet connection and active Premium subscription are still required.

What Information Does the Reset Remove?

The VPN Reset button clears the third-party VPN configuration stored in Privacy Hero. This means any saved third-party provider details will need to be entered or imported again before that provider can be used.

Depending on the provider and protocol you had configured, this may include the saved VPN provider selection, server details, credentials or tokens, and custom OpenVPN or WireGuard settings. Have your provider login or configuration materials available if you plan to set up that VPN again.

This is a VPN configuration reset, not a request to cancel your third-party VPN subscription. It should not be confused with a full router factory reset.

How to Verify Internet and VPN Status After Reset

Refresh the Privacy Hero dashboard and reopen VPN.
If you have Privacy Premium, verify that the built-in Privacy Hero VPN is selected and shows Connected.
If you have Privacy Core, verify that the third-party VPN configuration is gone and ordinary internet access is available through your ISP connection.
Connect a computer or phone to the Privacy Hero WiFi or LAN. To test the router by itself, turn off any VPN application running directly on that device.
Load a regular website, then check your public IP address using ipleak.net. Premium should show a VPN IP if its built-in VPN is connected; Core will normally show your ISP public IP.

If you have Streaming Relocation enabled, some streaming services may use their separately selected location; that is not necessarily the same location shown by a general public IP check.

Reset Complete but Still No Internet?

Check the VPN Kill Switch. If it is still enabled while there is no working VPN connection, it may block ordinary internet traffic. Review the Kill Switch setting before assuming the router has lost WiFi.
Check the connection status. A router listed as Offline may have a WAN, ISP, or cloud-communication problem. The VPN reset cannot fix an upstream internet outage.
Check the network wiring. Confirm your main router or ISP gateway has internet access and the cable is connected to the Privacy Hero WAN/Internet port.
Check a device on Privacy Hero WiFi or LAN. Make sure you are testing the Privacy Hero network rather than another WiFi or cellular connection.
Check your subscription. An active Privacy Premium subscription is required for the built-in Privacy Hero VPN fallback described above. Privacy Core returns to ordinary ISP internet access.

For Kill Switch behavior and restoring internet, see Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting. To learn when to enable the feature, see Privacy Hero VPN Kill Switch Setup.

ASUS Guest WiFi With or Without VPN: Setup Guide

Dave · Oct 26, 2026 ·

On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.

The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.

What You Need Before Starting

Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.

Create a Dedicated WiFi Network That Uses the VPN

Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.

Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
Review any options for local-network access, guest isolation, and bands, then click Apply.
Connect a test device to the new Home-VPN WiFi SSID and check its public IP.

ASUS official walkthrough: Guest Network Pro / VPN Network Setup.

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

In Guest Network Pro / Network, open the existing Guest Network profile.
Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.

ASUS also documents this path: Assign a VPN to Guest Network Pro.

Create a Separate WiFi Network Without a VPN

Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.

Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
Set a clear name such as Home-ISP and secure it with a strong password.
In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.

Confirm Each WiFi Network Uses the Intended Internet Route

Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.

Every network still uses the VPN

Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.

A phone reports the wrong IP although the guest VPN profile is correct

Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.

Guest devices cannot reach local printers or other LAN devices

Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

NordVPN Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports NordVPN using both NordLynx and OpenVPN.

NordLynx is recommended for most users. OpenVPN is also available and may be required for NordVPN Dedicated IP connections. Some Dedicated IP configurations require a private OpenVPN file imported as a Custom VPN.

Privacy Hero is cloud-managed, so you can complete the setup from any device with an internet connection. You do not need to be connected to Privacy Hero WiFi to change these settings.

NordVPN NordLynx Setup

NordLynx uses a NordVPN access token, not your regular NordVPN website email and password.

Open Privacy Hero and Select NordLynx

From a computer, smartphone, or tablet, open app.privacyhero.com.
Sign in with your Privacy Hero account email and password.
Open the VPN section.
Click Change and select NordVPN.
Choose NordLynx.

Generate Your NordVPN Access Token

In another browser tab, open NordVPN Access Tokens and sign in to your NordVPN account.
Complete any account or email verification requested by NordVPN.
Select Generate new token; choose Doesn’t expire if available, then copy the token.

Important: Treat your NordVPN token as a password. Do not share it publicly.

Connect Privacy Hero to NordVPN

Return to Privacy Hero, paste the token into the NordLynx token field, and click Save. The default country selection automatically chooses an available NordVPN server for that location.
Wait for the VPN status to show Connected.

NordVPN OpenVPN Setup

Use OpenVPN if you prefer the OpenVPN protocol or if your configuration requires it. OpenVPN requires NordVPN Manual Service Credentials, which are different from your website login email and password.

Select OpenVPN in Privacy Hero

Open app.privacyhero.com and sign in.
Open the VPN section.
Click Change and select NordVPN.
Select OpenVPN.

Get Your Manual Service Credentials

Open NordVPN Manual Service Credentials and sign in.
Complete NordVPN’s verification if prompted, then copy the current Service Username and Service Password.

Important: Do not enter your normal NordVPN website email and password into Privacy Hero’s OpenVPN fields.

Save Your OpenVPN Connection

Return to Privacy Hero and enter the manual service username and password in the OpenVPN credential fields. Click Save.
Confirm Privacy Hero shows the connection as Connected.

Choose a NordVPN Country or Specific Server

Privacy Hero can select a NordVPN server automatically, or you can choose a country or specify a server hostname.

Choose a Country

Open your NordVPN connection in Privacy Hero.
Open the Country dropdown.
Search for and select your preferred country.
Click Save. Privacy Hero will use an available NordVPN server for the selected country.

Use a Specific NordVPN Server

Open your NordVPN connection in Privacy Hero.
Open Advanced Options.
Enter the NordVPN server hostname, for example us12286.nordvpn.com.
Click Save.

Use NordVPN’s server recommendation tool if you need a hostname. NordVPN servers can be retired or taken offline for maintenance; if your specific server stops working, choose another server or return to country selection.

NordVPN Dedicated IP Setup

NordVPN Dedicated IP can require either the regular NordVPN OpenVPN connection or a private .ovpn file imported as a Custom VPN.

Method 1: OpenVPN Advanced Options

Try this first if your Dedicated IP works with the standard NordVPN OpenVPN setup.

Set up NordVPN → OpenVPN using your NordVPN Manual Service Credentials as described above.
Open Advanced Options.
Enter the Dedicated IP server hostname assigned to your account.
Click Save and check whether the VPN connects.
Verify that your public IP matches your assigned Dedicated IP.

If connected and the public IP matches, no additional configuration is needed.

Method 2: Custom VPN With a Private OpenVPN File

Some Dedicated IP servers require a private OpenVPN configuration file. If Method 1 does not connect, follow NordVPN’s Manual Dedicated IP Server Setup instructions.

Download Your Dedicated IP Configuration

Sign in to the NordVPN account associated with the Dedicated IP.
Locate your assigned Dedicated IP server using NordVPN’s manual setup instructions.
Download its OpenVPN UDP configuration file.
Save the .ovpn file to your computer or device.

Important: Use the private configuration file for your actual Dedicated IP, not a public NordVPN server file.

Upload the File as a Custom VPN

Open app.privacyhero.com and select VPN → Change.
Select Custom from the VPN provider dropdown, not NordVPN.
Upload your Dedicated IP UDP .ovpn file.
Enter your NordVPN Manual Service Username and Password.
Save the configuration, enable the VPN, and wait for Connected.
Verify the public IP matches your NordVPN Dedicated IP.

These are NordVPN’s separate manual service credentials, not your regular website login.

Verify Your NordVPN Connection

Connect your testing device to the Privacy Hero WiFi.
Disconnect any NordVPN or other VPN app running directly on that device.
Open a fresh private/incognito browser window.
Visit NordVPN What Is My IP.
Confirm the public IP and location match your selected NordVPN server (or assigned Dedicated IP).

Running a VPN application directly on the device at the same time as the router VPN can produce double-VPN conflicts and unexpected IP or location results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation region instead of your VPN server region. See Privacy Hero Streaming Relocation.

NordVPN Not Connecting?

If the VPN displays Failed, Connecting, or a timeout error, check for:

A server undergoing maintenance or no longer available.
An expired, revoked, or outdated NordLynx access token.
Incorrect or changed OpenVPN Manual Service Credentials.
Recent account changes or an inactive NordVPN subscription.
A protocol-specific issue.
A Dedicated IP that requires a private .ovpn file and Custom provider selection.

Follow Privacy Hero NordVPN Not Connecting or Showing Timeout Errors for troubleshooting.

No Internet After NordVPN Disconnects?

If internet access stops when the VPN disconnects, the VPN Kill Switch may be blocking normal traffic as intended. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, Private Relay, Private DNS, antivirus, and browser settings. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

IPVanish Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports IPVanish VPN through WireGuard (recommended) and OpenVPN. Both are configured in Privacy Hero using the Custom VPN provider option. You will need an active IPVanish VPN subscription and the configuration file for the protocol and server location you select.

Choose your method: WireGuard uses a generated .conf file and generally provides better performance. OpenVPN uses a downloaded .ovpn file plus your IPVanish VPN username and password.

Privacy Hero is cloud-managed. You can sign in and adjust VPN settings from a computer, phone, or tablet connected to any internet connection. You do not need to be on the Privacy Hero WiFi network to configure the router.

Download an IPVanish WireGuard Configuration (Recommended)

Use the WireGuard configuration generator in your IPVanish account to create a server file for your router. A generated WireGuard file contains the connection keys and server details, so keep it private.

Open the IPVanish account sign-in page and log in.
Open WireGuard in the account navigation to access the WireGuard Configuration Generator.
Select your preferred IPVanish server location and choose Generate to download the WireGuard configuration file. Save the downloaded .conf file to the device you are using for setup.

Important: Do not publicly share your WireGuard configuration file. To switch server locations later, generate and upload a new configuration.

Add IPVanish WireGuard to Privacy Hero

Sign in to the Privacy Hero dashboard at app.privacyhero.com.
Open the VPN section, select Change beside the provider, and choose Custom.
Choose WireGuard and upload the IPVanish .conf file you just generated.
Click Save to apply the settings. Wait for Privacy Hero to report Connected.

Privacy Hero Custom WireGuard configuration with WireGuard file upload

WireGuard authentication is contained in the generated configuration file; there is no separate OpenVPN username/password step in this method.

Download an IPVanish OpenVPN Configuration File

OpenVPN is a good alternative if WireGuard is unavailable or fails to connect on your network. It requires an IPVanish .ovpn configuration file and VPN login credentials.

Open the IPVanish OpenVPN server configuration list.
Download an .ovpn file for your preferred available server location. If IPVanish provides both UDP and TCP files, start with UDP and keep a TCP file as a fallback.
Have your IPVanish account username and password available for the OpenVPN setup. Use the credentials accepted by your IPVanish VPN account; these are not Privacy Hero login credentials.

If the linked server directory has changed, check the latest manual OpenVPN configuration downloads offered by IPVanish before selecting a file.

Add IPVanish OpenVPN to Privacy Hero

Sign in at app.privacyhero.com and open VPN.
Select Change, choose Custom, and select OpenVPN.
Upload the IPVanish .ovpn file you downloaded.
Enter your IPVanish username and password in the Custom OpenVPN fields. Do not enter the Privacy Hero account login.
Click Save and wait for the connection status to show Connected.

Privacy Hero Custom OpenVPN configuration showing server file upload and username and password fields

Tip: If OpenVPN UDP times out or cannot connect, try an available IPVanish OpenVPN TCP configuration or another server location.

Verify Your IPVanish VPN Connection

After Privacy Hero displays Connected, verify that a device on the router is actually using IPVanish.

Connect the device you want to test to the Privacy Hero WiFi or LAN network.
Temporarily disconnect any IPVanish app, other VPN app, or device-level VPN connection on that device so you test the router VPN alone.
Open a new private/incognito browser window and visit IPVanish What Is My IP Address.
Confirm that your public IP address and approximate location correspond to the VPN server you selected.

Note: Privacy Hero settings can be managed remotely, but the device used for this IP test must be on the Privacy Hero network.

Streaming Relocation and Your VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use the configured Streaming Relocation location instead of the IPVanish server location. See Privacy Hero Streaming Relocation.

IPVanish Not Connecting?

If Privacy Hero remains on Connecting, displays Failed, or reports a timeout, check the following:

Make sure your IPVanish subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
For WireGuard, generate a fresh configuration from your IPVanish account and upload that .conf file again.
For OpenVPN, confirm your IPVanish username/password and upload a fresh .ovpn file for a different server.
Try a different server location. With OpenVPN, also try switching between available UDP and TCP files.
Temporarily disable the Privacy Hero VPN connection and test normal internet access. If enabled, temporarily turn off the VPN Kill Switch for this test, then restore your preferred Kill Switch setting.
Check whether a device-level VPN app, private DNS, proxy, or security software is interfering with the router VPN connection.

VPN Disconnected and No Internet?

The VPN Kill Switch can intentionally block internet access when the VPN disconnects. Review Privacy Hero VPN Kill Switch Setup.

VPN Connected but One Device Shows the Wrong IP?

If only one device shows an unexpected IP address, look for another VPN app, iCloud Private Relay, Private DNS, browser proxy/DNS settings, or security software on that device. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

NordVPN Merlin OpenVPN Setup

TeamFlashRouters · Jan 11, 2023 ·

Preparing for NordVPN Merlin Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

1. There are two options for obtaining the .ovpn file. The first and recommended is to navigate to NordVPN’s server recommendation page. Click Recommended Server to display the fastest server based on your actual location. You can adjust the country if you don’t want to connect to the recommended country.

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

The second method to obtain a server is for connecting to a specific server number that you know you want to use. This applies to NordVPN Dedicated IP servers if you are signed up for that service. Go to NordVPN’s .ovpn file page. Then search for the server number that you want to use and click Download UDP.

Merlin Router Setup for NordVPN

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

4. Set Automatic Start at boot time to Yes if you want the VPN connection to begin automatically when the router is powered off and back on.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here. Our example server was in us5835.nordvpn.com so I have entered in NordVPN us5835.

6. Set Accept DNS Configuration to Strict. Set Redirect Internet traffic through tunnel to Yes (all). Set Kill Switch to Yes or No depending on if you want the Internet to be killed if the VPN connection drops.

Merlin Accept DNS configuration Redirect Internet and Kill Switch

If you only want certain devices to connect to the OpenVPN Client profile you are setting up instead of all the devices connected to the FlashRouter’s network please set the Redirect Internet traffic through tunnel to VPN Director. Then complete the instructions on this page and then view our VPN Director guide.

7. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.

8. Click Apply at the bottom of the page.

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to NordVPN.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

What do the lights on my Roqos Core mean?

TeamFlashRouters · Mar 3, 2022 ·

White (looks blueish white on Teal colored Roqos Cores): System startup
Solid Red: System is up, but there is no internet connection. Roqos Core cannot detect a network link either.
Flashing Red: System is up and there is an ethernet cable connected to Internet port, however Roqos Core is unable to reach the internet. Usually happens with bad ethernet cable, or cable modem/ISP modem not giving IP address to Roqos Core due to ISP provisioning issues, or some other type of network setting blocking Roqos Core’s access to the internet. First thing to try in this scenario is to reboot the ISP router/modem upstream of Roqos Core.
Flashing Blue: Roqos Core is up and connected to the internet, but it is not yet activated. Brand new Roqos Cores, or Roqos Cores that are factory reset will show this behavior when they are ready to be activated again.
Blue (deep blue color, different from #1): Roqos Core is up and activated, everything is normal.

NordVPN Asus AX1800S OpenVPN Setup

TeamFlashRouters · Feb 26, 2024 ·

Preparing for NordVPN Asus AX1800S Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

Asus AX1800S Router Setup for NordVPN

1. Navigate to the VPN tab.

2. Navigate to the VPN Client tab.

3. Click Add Profile.

4. Click Choose file and select the .ovpn file you downloaded earlier. Then click Upload.

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location or server number here.

6. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password. Click OK.

7. Click the Activate button.

Verify a successful NordVPN connection

You should now see a check mark in the Connection Status area.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.
Be sure to deactivate a previously active connection before activating the new one. You do not want to connect to two at the same time.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Mullvad WireGuard Setup

TeamFlashRouters · Aug 19, 2021 ·

Preparing for Mullvad WireGuard Setup

Verify your Mullvad login information

If you are not already a Mullvad user Sign Up Now.

Log in to your account on the Mullvad website.

Select Manage ports and WireGuard Keys displayed on the account page.

DD-WRT Router Setup for Mullvad WireGuard

Navigate to Setup > Tunnels

Enter Mullvad WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

3. Select Wireguard from the dropdown.

4. Click Add Peer.

5. Set Endpoint to Enable.

6. Set Router Allowed IP’s via tunnel and Use Pre-shared Key to Disable.

Setup - Tunnel - Disable Preshare Key and Allow IP

7. Click Generate Key.

8. Set Advanced Settings to Enable.

Setup - Tunnel - Enable Advanced Settings

9. Copy the Local Private Key.

10. In a new tab (leave the DD-WRT settings opened), go to your Mullvad Account and click Manage Ports and WireGuard Keys.

Mullvad Account - Manage ports and Wireguard Keys

11. Click WireGuard configuration file.

12. Select Linux as your Platform.

13. Click Manage Keys.

14. Paste the copied Local Private key to the Manage WireGuard Keys field and click Import Keys.

15. Select your Country, City, and Server number that you want to connect to.

16. Click Advanced Settings.

17. Set the Tunnel Traffic to Only IPv4.

18. Click Download File.

19. Open the config file that was downloaded to your computer with NotePad or Notepad++ for Windows or TextEdit for Mac.

20. In the downloaded config file under [Interface] enter the Address into the IP Addresses/Netmask(CIDR) field in the DD-WRT settings.

Setup - Tunnel - IP Address Netmask Note

Certain DD-WRT builds will show two separate fields here: IP Address and Subnet Mask. If that is the case set the IP Address field to the Address without the /32 added and set the Subnet Mask to 255.255.255.255

21. In the config file under [Peer] copy the PublicKey and paste it into the Peer Public Key field in the DD-WRT Settings.

22. In the config file under [Peer] copy the Endpoint and paste it into the Endpoint Address field.

23. At the bottom of the page click Save and then click Apply Settings.

Enter Mullvad WireGuard Commands

Navigate to Administration > Commands

1. Copy and paste the text below and click Save Startup.

sleep 30
echo "Update route table on startup..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
mkdir -p /tmp/etc/config
ln -s /tmp/custom.sh /tmp/etc/config/wg-route-fix.wanup
echo "... Done route table update."

2. Copy and paste the text below and click Save Custom.

#!/bin/sh
sleep 5
echo "Update route table on wanup ..."
WGSERVER=$(/usr/sbin/nvram get oet1_rem0)
WANGW=$(/usr/sbin/nvram get wan_gateway)
WANIF=$(/usr/sbin/nvram get wan_iface)
route add -host $WGSERVER gw $WANGW dev $WANIF
route del default
route add default dev oet1
ip route flush cache
echo "... Done route table update."

3. Copy and paste the text below and click Save Firewall.

WANIF=$(/usr/sbin/nvram get wan_iface)
iptables -t nat -I POSTROUTING -o oet1 -j MASQUERADE
iptables -I FORWARD -i br0 -o $WANIF -m state –state NEW -j REJECT –reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -p tcp -o $WANIF -m state –state NEW -j REJECT –reject-with tcp-reset

Set Mullvad DNS servers

Navigate to Setup > Basic Setup

Set Static DNS 1 to 10.64.0.1

Set Static DNS 2 to 193.138.218.74

Click Apply Settings.

Reboot the FlashRouter

Navigate to Administration > Management

Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.

Verify a successful Mullvad connection

Navigate to Setup > Tunnels

You should see Endpoint, Latest handshake, and Transfer in the WireGuard status area.
Visit Mullvad’s IP Check to verify your status as using Mullvad.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN Cudy OpenVPN Setup

TeamFlashRouters · Feb 29, 2024 ·

Preparing for NordVPN Cudy Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

Cudy Router Setup for NordVPN

Login to Cudy firmware settings in a browser on any computer or smart device connected to the Cudy FlashRouter’s network.

1. Click General Settings.

2. Click VPN.

3. Toggle the Enable switch to On.

4. Select OpenVPN Client from the Protocol dropdown.

5. Click Browse and select the .ovpn file you downloaded earlier. You should see the server file name listed next to Current Config File after doing so.

6. Enter your NordVPN username and password that you obtained earlier in the Username and Password. Note that these are different from your NordVPN email login and password.

Cudy NordVPN enter username and password

7. Click Save & Apply at the bottom of the page.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

IVPN WireGuard Setup

TeamFlashRouters · Oct 13, 2021 ·

Preparing for IVPN WireGuard Setup

Verify your IVPN login information

If you are not already a IVPN user Sign Up Now.

Log in to your account on the IVPN website.

DD-WRT Router Setup for IVPN WireGuard

Navigate to Setup > Tunnels

Enter IVPN WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

3. Select Wireguard from the dropdown.

3. Set MTU to 1412.

4. Click Generate Key.

9. Copy the Local Public Key.

10. In a new tab (leave the DD-WRT settings opened), go to your IVPN Account and click WireGuard and then click WireGuard Key Management.

11. Click Add New Key.

12. Paste the copied Local Public key to the Public Key field and click Add Key.

13.Copy the IP Address assigned to your public key and add it to the IP Addresses/Netmask(CIDR) field followed by a /32 subnet mask.

14. Click Add Peer.

15. Set the Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to 172.16.0.1

16. Set Endpoint to Enable.

17. Go to the IVPN Server Status page and copy the server name for the WireGuard server location you want to connect to.

Be sure to copy the WireGuard server address and not the OpenVPN server address.

18. Paste the server name you copied into the Endpoint Address field and set the Port to 2049.

19. On the IVPN Server Status page copy the Public Key of the server location you entered. Paste the Public Key into the Peer Public Key field.

20. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.

21. At the bottom of the page click Save and then click Apply Settings.

Set IVPN DNS servers

Navigate to Setup > Basic Setup

Set Static DNS 1 to 172.16.0.1

Set Static DNS 2 to 198.245.51.147

Click Apply Settings.

Reboot the FlashRouter

Navigate to Administration > Management

Scroll to the bottom of the page and click the red Reboot Router button. Wait for the FlashRouter to reboot and then reconnect.

Verify a successful IVPN connection

Navigate to Setup > Tunnels

You should Endpoint, Latest handshake, and Transfer in the WireGuard status area.
Visit IVPN’s website to verify your status as using IVPN.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

NordVPN TP-Link OpenVPN Setup

TeamFlashRouters · Apr 16, 2024 ·

Preparing for NordVPN TP-Link Setup

Obtain your NordVPN manual Username and Password

If you are not already an NordVPN user Sign Up Now.

1. Log in to your account on the NordVPN website.

2. Click NordVPN on the left hand side and then click Setup NordVPN manually.

3. Enter in the verification code that was sent to your email.

4. Copy and paste your NordVPN manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to NordVPN.

Download your NordVPN .ovpn file

Then click Show Available Protocols. Click Download Config next to OpenVPN UDP. This will download the .ovpn file to your computer for this server. Do not open this file.

TP-Link Router Setup for NordVPN

1. Navigate to the Advanced tab.

2. Navigate to the VPN Client tab.

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

4. Click the Add button in the Server List area.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the NordVPN username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

Verify a successful NordVPN connection

You should now see a CONNECTED message.
Visit NordVPN’s IP Check to verify your new IP address and virtual location.

How to change the NordVPN server

Follow the steps at the top of the page to obtain a new .ovpn file.
Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Privacy Hero NordVPN Not Connecting or Showing Timeout Errors

Dave · Sep 22, 2026 ·

If NordVPN will not connect on Privacy Hero, shows a timeout error, remains stuck on Connecting, or displays Failed, the Privacy Hero router itself may still be working normally.

NordVPN connections can occasionally stop working when servers are placed into maintenance, removed or cycled out of service, account credentials change, or a previously saved NordVPN access token or manual service credential is no longer valid.

Start by confirming that Privacy Hero has normal internet access, then troubleshoot the NordVPN connection.

Jump to a Section

Confirm Privacy Hero Has Internet
Reconnect NordVPN
Try Another NordVPN Server
Update Your NordLynx Token
Update OpenVPN Credentials
Recent NordVPN Account Changes
Verify the VPN Connection

First: Confirm Privacy Hero Has Internet

Before changing your NordVPN settings, confirm that Privacy Hero itself has normal internet access.

Open app.privacyhero.com.
Open the VPN section.
If the VPN Kill Switch is enabled, temporarily turn it Off.
Turn the failed NordVPN connection off.
Connect a device to the Privacy Hero network.
Test normal internet access.

If internet access works normally with NordVPN and the Kill Switch disabled, the underlying Privacy Hero internet connection is working. Continue troubleshooting the NordVPN connection.

If your internet stopped working because NordVPN failed while the VPN Kill Switch was enabled, follow our Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting guide.

Reconnect NordVPN

A temporary NordVPN server or connection issue may resolve without changing your account information.

Open the VPN section at app.privacyhero.com.
Turn the NordVPN connection off.
Wait a few seconds.
Turn NordVPN back on.
Allow the connection time to establish.
Check whether the VPN status changes to Connected.

If NordVPN still shows Failed, Connecting, or a timeout error, continue with the steps below.

Try Another NordVPN Server

NordVPN regularly maintains, replaces, and cycles servers in its network. A specific NordVPN server that worked previously may eventually be taken offline, removed, or temporarily unavailable.

If your Privacy Hero NordVPN connection is configured to use a specific server and suddenly stops working, try another server or return to the normal country selection.

Open app.privacyhero.com.
Open the VPN section.
Select your NordVPN connection.
If you previously entered a specific NordVPN server under Advanced Options, remove or replace that server.
Select the country or location you want to use.
Save the settings.
Reconnect NordVPN.
Check whether the status changes to Connected.

If you specifically need to use an individual NordVPN server, make sure that server is still active before continuing to use it.

Important: A previously working specific server should not be assumed to remain available indefinitely. NordVPN may change its server network over time.

Update Your NordVPN Token for NordLynx

Privacy Hero uses a NordVPN access token to authenticate NordLynx connections.

If the saved token is expired, revoked, replaced, or otherwise no longer valid, NordLynx may show Failed, Connecting, or a timeout error.

Generating a new token is a good troubleshooting step if your NordVPN account information has changed or the existing token is no longer working.

Sign in to your NordVPN account.
Open the NordVPN Access Tokens page.
Generate a new access token.
Select Doesn’t expire if NordVPN provides that option.
Copy the new token.
Open app.privacyhero.com.
Open the NordVPN settings.
Confirm that NordLynx is the selected protocol.
Replace the existing token with the newly generated token.
Save the settings.
Reconnect NordVPN.

Important: NordVPN access tokens are sensitive account credentials. Do not post or share your token publicly.

For complete setup instructions, see Privacy Hero NordVPN / NordLynx Setup.

Update NordVPN Manual Service Credentials for OpenVPN

If you are using OpenVPN instead of NordLynx, Privacy Hero uses NordVPN’s Manual Service Credentials.

These are different from the email address and password you normally use to sign in to the NordVPN website or application.

If the saved credentials are no longer valid, update them:

Sign in to your NordVPN account.
Open NordVPN Manual Service Credentials.
Copy the current service username and password.
Open app.privacyhero.com.
Open your NordVPN settings.
Confirm that OpenVPN is the selected protocol.
Replace the existing manual service credentials with the current credentials from NordVPN.
Save the settings.
Reconnect NordVPN.

Do not enter your regular NordVPN website email address and password in place of the manual service credentials.

Did You Recently Change Your NordVPN Account Information?

If NordVPN stopped connecting after an account change, update the authentication information stored in Privacy Hero.

This is especially important after changes such as:

Changing your NordVPN account password.
Changing or updating NordVPN account security settings.
Generating or replacing NordVPN access tokens.
Changes to NordVPN manual service credentials.
Renewing, changing, or restoring your NordVPN subscription.

The credentials used by Privacy Hero depend on the VPN protocol:

NordLynx: Uses a NordVPN access token.
OpenVPN: Uses NordVPN manual service credentials.

Your regular NordVPN website login should not be entered as the router’s OpenVPN credentials.

If you are unsure whether the existing authentication information is still valid, retrieve current credentials directly from your NordVPN account and update Privacy Hero.

Confirm Your NordVPN Subscription Is Active

Privacy Hero cannot establish a NordVPN connection if the NordVPN account being used no longer has active VPN service.

Sign in to your NordVPN account and confirm that your subscription is active before continuing with server, token, or credential troubleshooting.

Try Another VPN Protocol

If your NordVPN account, credentials, and server selection are correct but the connection still fails, try another NordVPN protocol available in Privacy Hero.

For example, if NordLynx is not connecting, testing OpenVPN can help determine whether the issue is specific to the protocol or authentication method.

Remember that changing protocols also changes the required NordVPN authentication:

NordLynx requires a NordVPN access token.
OpenVPN requires NordVPN manual service credentials.

Important: Do Not Run Two VPNs at Once

Do not leave the NordVPN application connected directly on your phone or computer while testing the Privacy Hero VPN.

Running a VPN application on the device while also routing that device through the Privacy Hero VPN creates a double-VPN connection and can cause routing, connectivity, or IP-location problems.

Disconnect the device-level NordVPN app before testing the router VPN.

Verify the NordVPN Connection

Once Privacy Hero displays NordVPN as Connected:

Connect your device to the Privacy Hero WiFi.
Make sure the NordVPN app on the device is disconnected.
Open a fresh private/incognito browser window.
Visit NordVPN What Is My IP.
Confirm that the public IP address and location correspond to your selected NordVPN location.
Test several websites or applications.

If you use the Privacy Hero VPN Kill Switch, enable it only after confirming that NordVPN is connected and working.

NordVPN Is Connected but One Device Shows the Wrong IP

If Privacy Hero shows NordVPN as Connected and other devices display the correct VPN IP, the NordVPN connection itself is likely working.

Check the affected device’s Privacy Hero VPN assignment and review any VPN, privacy, DNS, browser, antivirus, firewall, or security settings running directly on that device.

See Device Privacy, DNS, VPN, and Security Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

Private Internet Access (PIA) Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

Open app.privacyhero.com and sign in to your Privacy Hero account.
Open the VPN section. Select Change beside your current VPN provider.
Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.

Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.

To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.

Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)

bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network

South America (9 locations)

ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network

Europe (51 locations)

al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network

Asia (26 locations)

ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network

Oceania (7 locations)

au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network

Africa (5 locations)

dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

Sign in to the PIA Client Control Panel using your PIA VPN account.
Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

Open Privacy Hero, go to VPN, click Change, and select Custom.
Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
Click Save and confirm Privacy Hero shows Connected.

Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.

Verify Your Private Internet Access Connection

Connect a device to the Privacy Hero WiFi or LAN network.
Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
Open a private/incognito browser window and visit PIA What Is My IP.
Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.

PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

Windscribe WireGuard Setup

TeamFlashRouters · Oct 13, 2021 ·

Preparing for Windscribe WireGuard Setup

Verify your Windscribe login information

If you are not already a Windscribe user Sign Up Now.

Log in to your account on the Windscribe website.

Go to the Windscribe WireGuard config generator page and select the Server location and Port you would like to use. Click Download Config.

Windscribe Wireguard select server location

Open the .conf file that is downloaded using Notepad in Windows or TextEdit in Mac.

DD-WRT Router Setup for Windscribe WireGuard

Navigate to Setup > Tunnels

Enter Winscribe WireGuard settings

1. Click Add Tunnel.

2. Set Tunnel to Enable.

3. Select Wireguard from the dropdown.

3. Set CVE-2019-14899 Mitigation to Enable. Set NAT via Tunnel to Enable. Set Local Port to 51820. Set MTU to 1420.

4. Check Firewall inbound and Kill Switch.

Windscribe Wireguard enable Firewall and Kill Switch

5. Set Advanced Settings to Enable and copy the PrivateKey from the .conf file and paste it into the Local Private Key field.

Windscribe Wireguard conf file PrivateKey

6. Click Add Peer.

7. Set Peer Tunnel IP to 0.0.0.0. Set Peer Tunnel DNS to the DNS found in the .conf file.

Windscribe Wireguard Peer Tunnel IP and DNS

8. Set Endpoint to Enable. Copy and Paste the Endpoint from the .conf file and paste it into the Endpoint Address field. Enter the same Port that appears next to the Endpoint.

9. Leave Allowed IPs as 0.0.0.0/0. Set Router Allowed IP’s via tunnel to Enable. Set Persistent Keep Alive to 25.

10. Copy and Paste the PublicKey from the .conf file and paste it into the Peer Public Key field.

Windscribe Wireguard conf file PublicKey

11. Set Use Pre-shared Key to Enable. Copy and Paste the Presharedkey from the .conf file and paste it into the Pre-Shared Key field.

Windscribe Wireguard conf file PresharedKey

12. Copy the Address from the .conf file and paste it into the IP Addresses/Netmask(CIDR) field.

21. At the bottom of the page click Save and then click Apply Settings.

Verify a successful Winscribe connection

Navigate to Setup > Tunnels

You should Endpoint, Latest handshake, and Transfer in the WireGuard status area.
Visit whatismyipaddress.com to verify your status as using Winscribe.

Back up your settings

Navigate to Administration > Backup

Click the Backup button.
A file named nvrambak.bin will be saved to your computer.
You can load nvrambak.bin to restore your settings in the event of a reset.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

ExpressVPN Setup for Privacy Hero

TeamFlashRouters · Aug 14, 2025 ·

Privacy Hero supports ExpressVPN using OpenVPN. To connect, you need your ExpressVPN Manual Configuration username and password and an OpenVPN (.ovpn) configuration file for your preferred server location.

Important: In Privacy Hero, choose Custom as the VPN provider. Upload the ExpressVPN .ovpn file and enter your separate Manual Configuration credentials, not your regular ExpressVPN website login.

Privacy Hero is cloud-managed, so you can complete setup from any computer, smartphone, or tablet with an internet connection. You do not need to be connected to Privacy Hero WiFi while changing the settings.

Get Your ExpressVPN Manual Configuration Credentials

ExpressVPN provides separate credentials for manual OpenVPN connections. These are different from your normal ExpressVPN website email and password.

Open ExpressVPN Set Up Devices and sign in to your ExpressVPN account.
In the left navigation, select Set Up Devices.
Under Applications, expand Advanced setup and choose Manual Configuration.
Find your unique Username and Password under Manual Configuration. Keep this tab open so you can copy them into Privacy Hero.

Important: Do not use your regular ExpressVPN account password, and do not share your manual configuration credentials publicly.

Download Your ExpressVPN OpenVPN Server File

Each available ExpressVPN location has its own OpenVPN configuration file. The file determines the server location used by Privacy Hero.

On the same Manual Configuration page, locate the server regions, such as Americas, Europe, Asia Pacific, or Middle East & Africa.
Expand your preferred region and download the UDP .ovpn file for an available location. Save it to the device you are using to configure Privacy Hero.

Only locations offered on your ExpressVPN Manual Configuration page can be used for this setup. To change locations later, download the corresponding .ovpn file and upload it to Privacy Hero.

Add ExpressVPN to Privacy Hero as a Custom VPN

ExpressVPN uses Privacy Hero’s Custom VPN configuration rather than a dedicated ExpressVPN provider option.

Upload the OpenVPN File and Enter Credentials

Open app.privacyhero.com and sign in to your Privacy Hero account.
Open the VPN section.
Click Change beside the VPN provider and choose Custom.
Choose OpenVPN if prompted, then upload the UDP .ovpn file downloaded from ExpressVPN.
Copy the separate ExpressVPN Manual Configuration Username and Password into the corresponding Privacy Hero fields.

Privacy Hero Custom OpenVPN configuration showing file upload and manual username and password fields

Check the UDP Configuration and Connect

If Privacy Hero displays the OpenVPN configuration in an editor, confirm that the downloaded UDP configuration specifies proto udp. If the directive is missing, add proto udp at the beginning of the configuration. Do not add a conflicting second protocol directive.
Click Save to apply the configuration and establish the VPN connection.
Confirm Privacy Hero displays Connected for the Custom OpenVPN connection.

Privacy Hero Custom OpenVPN configuration editor with proto udp directive

Verify Your ExpressVPN Connection

After Privacy Hero reports Connected, check that devices on the Privacy Hero network are actually using the VPN.

Connect the testing device to the Privacy Hero WiFi or LAN network.
Disconnect the ExpressVPN app or any other VPN application running directly on that device.
Open a fresh private/incognito browser window.
Visit ExpressVPN What Is My IP.
Confirm the public IP address and approximate location correspond to the ExpressVPN server selected in your .ovpn file.

Important: You can manage Privacy Hero’s VPN settings from another network or cellular data. However, to verify the router’s VPN IP, the testing device must be connected to the Privacy Hero network. Running another VPN app on the device can produce double-VPN results.

Streaming Relocation and VPN Location

If Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the location defined in the ExpressVPN configuration file. See Privacy Hero Streaming Relocation.

ExpressVPN Not Connecting?

If Privacy Hero shows Failed, stays on Connecting, or displays a timeout error, try these checks:

Confirm your ExpressVPN subscription is active and you entered the separate Manual Configuration username and password.
Check that you selected Custom in Privacy Hero, rather than another VPN provider.
Download a fresh UDP .ovpn file for an available ExpressVPN server location and upload it again.
Check that the OpenVPN configuration uses proto udp without conflicting protocol directives.
Temporarily disable the VPN Kill Switch while testing whether normal internet access works without the VPN, then restore your preferred Kill Switch setting.
Try another ExpressVPN server location or reconnect the VPN.

No Internet After the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected, but One Device Shows the Wrong IP?

If other devices show the correct VPN IP, check the affected device’s VPN apps, iCloud Private Relay, Private DNS, antivirus filtering, browser proxy/DNS settings, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Search Results for: show me the mon

Jump to a Section

Start Here: Is the Problem the Router or One Device?

Disconnect VPN Applications Running on the Device

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Limit IP Address Tracking

iCloud Private Relay

Android: Check Private DNS and Always-On VPN

Private DNS

Always-On VPN

Check Antivirus, Firewall, Browser, and Work Security Settings

Antivirus and Internet Security Software

Third-Party Firewalls

Browser VPN, Proxy, and Secure DNS

Work and Corporate Devices

Run a Clean Router VPN Test

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Related FlashRouters Guides

When Should You Use the VPN Reset Button?

How to Reset a Failed VPN Connection

What Happens After Reset? Privacy Premium vs. Privacy Core

What Information Does the Reset Remove?

How to Verify Internet and VPN Status After Reset

Reset Complete but Still No Internet?

Related Privacy Hero Articles

What You Need Before Starting

Create a Dedicated WiFi Network That Uses the VPN

Alternative: Assign a VPN to an Existing Guest Network Pro SSID

Create a Separate WiFi Network Without a VPN

Confirm Each WiFi Network Uses the Intended Internet Route

Common Issues and What to Check

I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”

Every network still uses the VPN

A phone reports the wrong IP although the guest VPN profile is correct

Guest devices cannot reach local printers or other LAN devices

Related AsusWRT Guides

Explore the Latest WiFi 7 ASUS FlashRouters

NordVPN NordLynx Setup

Open Privacy Hero and Select NordLynx

Generate Your NordVPN Access Token

Connect Privacy Hero to NordVPN

NordVPN OpenVPN Setup

Select OpenVPN in Privacy Hero

Get Your Manual Service Credentials

Save Your OpenVPN Connection

Choose a NordVPN Country or Specific Server

Choose a Country

Use a Specific NordVPN Server

NordVPN Dedicated IP Setup

Method 1: OpenVPN Advanced Options

Method 2: Custom VPN With a Private OpenVPN File

Download Your Dedicated IP Configuration

Upload the File as a Custom VPN

Verify Your NordVPN Connection

Streaming Relocation and VPN Location

NordVPN Not Connecting?

No Internet After NordVPN Disconnects?

VPN Connected, but One Device Shows the Wrong IP?

Related Privacy Hero Guides

Download an IPVanish WireGuard Configuration (Recommended)

Add IPVanish WireGuard to Privacy Hero

Download an IPVanish OpenVPN Configuration File

Add IPVanish OpenVPN to Privacy Hero

Verify Your IPVanish VPN Connection

Streaming Relocation and Your VPN Location

IPVanish Not Connecting?

VPN Disconnected and No Internet?

VPN Connected but One Device Shows the Wrong IP?

Related Privacy Hero Guides

Preparing for NordVPN Merlin Setup

Obtain your NordVPN manual Username and Password

Download your NordVPN .ovpn file

Merlin Router Setup for NordVPN

Verify a successful NordVPN connection

How to change the NordVPN server

Preparing for NordVPN Asus AX1800S Setup

Obtain your NordVPN manual Username and Password

Download your NordVPN .ovpn file

Asus AX1800S Router Setup for NordVPN

Verify a successful NordVPN connection