• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

FlashRouters Support Portal

Prioritizing Privacy

  • SETUP GUIDES
    • Privacy Hero Router Setup Guide
    • ASUS-WRT Router Setup Guide
    • AsusWRT-Merlin Router Setup Guide
    • DD-WRT Router Setup Guide
    • ExpressVPN Router Setup Guide
    • GL.iNet Router Setup Guide
    • Roqos Core Router Setup Guide
  • TROUBLESHOOTING
    • Router Access
    • WiFi Connectivity
    • Internet Connection Issues
    • General VPN Issues
    • DD-WRT Firmware
    • TeamViewer Remote Support
  • FAQs
    • Router FAQs
    • VPN FAQs
    • Warranty and Returns FAQs
    • Sales FAQs
    • Shipping FAQs
    • Service Plan FAQs
  • Show Search
Hide Search

Search Results for: surfshark vpn router

Surfshark Setup for Privacy Hero

TeamFlashRouters · Sep 23, 2025 ·

Privacy Hero supports Surfshark through WireGuard and OpenVPN using the Custom VPN provider option.

WireGuard is recommended for most users. It requires a Surfshark WireGuard key pair and a downloaded server configuration file. OpenVPN uses a downloaded .ovpn file and Surfshark’s separate Manual Setup credentials, not your usual Surfshark login email and password.

Privacy Hero is cloud-managed. You can change these settings from any computer, smartphone, or tablet with an internet connection; you do not need to be on the Privacy Hero WiFi to configure the VPN.

Choose Your Surfshark Setup

Select the connection method or instructions you need.

WireGuard Setup →Recommended · Key pair and server fileOpenVPN Setup →Manual credentials and UDP .ovpn fileUpload WireGuard →Import your configuration into Privacy HeroUpload OpenVPN →Add the file and service credentialsVerify Connection →Check your VPN IP and locationTroubleshooting →Fix connection failures and no internet

Surfshark WireGuard Setup (Recommended)

WireGuard uses a key pair for authentication. A separate Surfshark username and password is not needed for the WireGuard configuration.

Create or Select Your Surfshark WireGuard Key Pair

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose the Router setup option, and select WireGuard.
  3. If you already registered a key pair with Surfshark, select I have a key pair and follow the prompts to register your public key. Otherwise, select I don’t have a key pair.
  4. If generating a new key pair, enter a name and choose Generate a new key pair. Save the generated keys securely when prompted.

Important: Your WireGuard private key is sensitive. Do not publish or send it in a support ticket. Surfshark notes that you may not be able to view the generated keys again after leaving that screen.

Download a Surfshark WireGuard Server File

  1. After setting up the key pair, select Choose a location or open the Locations section.
  2. Choose an available Surfshark server and download its WireGuard configuration file to your device.

Do not download the WireGuard configuration before setting up the key pair. Surfshark warns that a file downloaded too early can be missing the required key information. For more detail, see Surfshark’s manual WireGuard router instructions.

Upload WireGuard to Privacy Hero

  1. Open app.privacyhero.com and log in to your Privacy Hero account.
  2. Open the VPN section, click Change, and choose Custom as the VPN provider.
  3. Select WireGuard and upload the Surfshark WireGuard configuration file you downloaded.
  4. Click Save and allow Privacy Hero to establish the connection. Confirm the VPN status shows Connected.
Privacy Hero Custom WireGuard configuration and file upload panel

Surfshark OpenVPN Setup

OpenVPN is an alternative to WireGuard. It requires a Surfshark Manual Setup username and password and a downloaded OpenVPN configuration (.ovpn) file.

Get Your Surfshark OpenVPN Credentials

  1. Sign in to your Surfshark account.
  2. Open VPN → Manual Setup, choose Router, and select OpenVPN.
  3. Open the Credentials tab. If credentials are not yet available, select Generate credentials.
  4. Copy the Manual Setup username and password, or keep the tab open to enter them into Privacy Hero later.

Important: These are not your regular Surfshark website email and password. Keep the service credentials private.

Download a Surfshark OpenVPN Server File

  1. In Surfshark’s OpenVPN Manual Setup area, open the Locations tab.
  2. Select a country or server and download its UDP .ovpn configuration file. UDP is the recommended starting option; a TCP configuration may be worth trying later if needed.

Download a new .ovpn file whenever you want to switch to a different Surfshark server location. See Surfshark’s manual server selection instructions.

Upload OpenVPN to Privacy Hero

  1. Open app.privacyhero.com, sign in, and select the VPN section.
  2. Click Change, select Custom, and choose OpenVPN.
  3. Upload the Surfshark UDP .ovpn file you downloaded.
  4. Enter the Surfshark Manual Setup username and password into the Custom OpenVPN fields.
  5. Click Save, then confirm the VPN status shows Connected.
Privacy Hero Custom OpenVPN screen with configuration file upload and username and password fields

Verify Your Surfshark Connection

Privacy Hero showing Connected confirms the router connection status. Test a device on the Privacy Hero network to confirm it is using Surfshark.

  1. Connect your device to the Privacy Hero WiFi or LAN.
  2. Disconnect the Surfshark app or any other VPN app running directly on the testing device.
  3. Open a fresh private/incognito browser window.
  4. Visit Surfshark’s IP address checker.
  5. Confirm the displayed public IP and approximate location correspond to your selected Surfshark server.

You can change Privacy Hero settings while using another WiFi network or cellular data, but the device performing this VPN IP test must be connected to Privacy Hero. Avoid running a separate VPN app on the same testing device, as that creates a double-VPN connection.

Streaming Relocation and Your VPN Location

When Streaming Relocation is enabled for a supported streaming service, that service may use its Streaming Relocation region instead of the Surfshark VPN server region. See Privacy Hero Streaming Relocation.


Surfshark Not Connecting?

If Privacy Hero displays Failed, remains on Connecting, or reports a timeout, try these steps:

  1. Confirm your Surfshark subscription is active and that Custom is selected as the VPN provider in Privacy Hero.
  2. If using WireGuard, confirm that the key pair was created or registered before downloading the server file. If necessary, generate a new key pair, download a fresh configuration, and upload it again.
  3. If using OpenVPN, double-check your separate Surfshark Manual Setup username and password, not your regular website login.
  4. Download a fresh server configuration for another available Surfshark location and try again.
  5. If OpenVPN UDP continues to fail, try a Surfshark TCP .ovpn configuration file to check for a protocol-specific issue.
  6. Temporarily disable the VPN Kill Switch while checking whether internet access works without the VPN, then restore your preferred Kill Switch setting.

No Internet After Surfshark Disconnects?

The VPN Kill Switch may intentionally block normal internet traffic when the VPN connection is unavailable. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other Privacy Hero devices display the expected Surfshark VPN IP, review the affected device for VPN apps, iCloud Private Relay, Private DNS, proxy settings, antivirus filtering, or other security software. See Device Settings That Can Interfere With Your Router VPN.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • VPN Kill Switch: No Internet or WiFi
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

Surfshark Manual OpenVPN Setup

TeamFlashRouters · Apr 24, 2019 ·

Preparing for Manual Surfshark Setup

Obtain your Surfshark OpenVPN information

If you are not already an Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

2. Successfully log in with your account information and Navigate to the Manual Connection Guide. Here you will find the OpenVPN Specific Username and Password required for manual configuration.

FlashRouters Privacy App - SurfShark OpenVPN Specific Username and Password

Surfshark Server Addresses

View a full list of Surfshark servers.

United States

Atlanta:
us-atl.prod.surfshark.com
Buffalo:
us-buf.prod.surfshark.com
Chicago:
us-chi.prod.surfshark.com
Dallas:
us-dal.prod.surfshark.com
Las Vegas:
us-las.prod.surfshark.com
Los Angeles:
us-lax.prod.surfshark.com
Miami:
us-mia.prod.surfshark.com
New York City:
us-nyc.prod.surfshark.com
Phoenix:
us-phx.prod.surfshark.com
San Fransisco:
us-sfo.prod.surfshark.com
Seattle:
us-sea.prod.surfshark.com

DD-WRT Router Setup for Surfshark

Navigate to Services > VPN

Enter Surfshark settings

OpenVPN Client

Start OpenVPN Client

If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

Copy and paste the server you would like to connect to from the server list above. Be sure there are no extra spaces or characters.

If you wish to change Surfshark connection locations, THIS IS THE ONLY FIELD YOU NEED TO CHANGE.

Port

1194

Tunnel Device

TUN

Tunnel Protocol

UDP

Encryption cipher

None

Hash Algorithm

SHA512

Userpass Authentication

Enable

Username

Enter your OpenVPN specific Username.

Password

Enter your OpenVPN specific Password.

Advanced Options

Enable

TLS Cipher

None

LZO Compression

Disabled

NAT

Enable

Firewall Protection

Enable

TLS Auth Key

-----BEGIN OpenVPN Static key V1-----
b02cb1d7c6fee5d4f89b8de72b51a8d0
c7b282631d6fc19be1df6ebae9e2779e
6d9f097058a31c97f57f0c35526a44ae
09a01d1284b50b954d9246725a1ead1f
f224a102ed9ab3da0152a15525643b2e
ee226c37041dc55539d475183b889a10
e18bb94f079a4a49888da566b9978346
0ece01daaf93548beea6c827d9674897
e7279ff1a19cb092659e8c1860fbad0d
b4ad0ad5732f1af4655dbd66214e552f
04ed8fd0104e1d4bf99c249ac229ce16
9d9ba22068c6c0ab742424760911d463
6aafb4b85f0c952a9ce4275bc821391a
a65fcd0d2394f006e3fba0fd34c4bc4a
b260f4b45dec3285875589c97d3087c9
134d3a3aa2f904512e85aa2dc2202498
-----END OpenVPN Static key V1-----

Additional Config

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0
cipher AES-256-GCM
log /tmp/vpn.log

Policy Based Routing

This field can be used for split VPN and Dual Gateway routing.

CA Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

CLICK APPLY SETTINGS

Leave all settings not mentioned above as their default setting.

Verify a successful Surfshark connection

Navigate to Status > OpenVPN

  1. You should now see a CONNECTED SUCCESS message.
  2. Visit WhatIsMyIPAddress to verify your new IP address, virtual location, and status as Protected at the top of the page.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark VPN.

Back up your settings

Navigate to Administration > Backup

  1. Click the Backup button.
  2. A file named nvrambak.bin will be saved to your computer.
  3. You can load nvrambak.bin to restore your settings in the event of a reset.

How to change the Surfshark server

  1. Visit the Surfshark Manual setup page and scroll down to Section 3.
  2. Copy and paste one of the server IP Address into the Server IP/Name field.
  3. Click Apply Settings.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Sales FAQs

admin · Jan 29, 2019 ·

Sales FAQs

Can My Router Be Preconfigured With My VPN Information?

Plug and Play VPN Support

Yes you can!

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

 

To have your router VPN preconfigured:

  1. Check the “Connect To VPN For Me” box under VPN – Preconfiguration on the Product Page during check out.
  2. Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
  3. You’ll receive an email after purchase with detailed instructions. If you have any questions our team is happy to help!
Please note:  If you do give a server location, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

 

Privacy Hero 2 Only:

While our team isn’t able to pre-configure the Privacy Hero 2 VPN Router before shipping it out since you’ll have to make a Privacy Hero user account and register your router, we can assist you with the VPN set up process once you receive the router and create your Privacy Hero user account via 1-on-1 remote session, email, or live chat on our site.

You can also use our step-by-step Privacy Hero VPN Router Setup Guide to complete the process.

Can I Use My Dedicated IP Address With A FlashRouter?

Dedicated IP Addresses from NordVPN, SurfShark, & TorGuard are supported on almost all of our FlashRouter options.

Check out our Dedicated IP Addresses Blog Post for more details!

Can I Use A FlashRouter With My Current Mesh System?

Yes!

You will be able to connect the FlashRouter of your choosing to your current mesh router via ethernet port as shown below:

ISP Modem/Router —- FlashRouter (VPN) —- Main Mesh Router (VPN from FlashRouter) 

This setup will allow you to keep your mesh network with added VPN protection, as well as add the FlashRouter wireless network for your devices.

You can disable the wifi on the FlashRouter also if you only wanted to use the mesh network for wifi.

Can You Flash My Router and Connect me to VPN?

At FlashRouters, we offer expert router flashing and VPN configuration services through our Flash My Router plans. Whether your router needs custom firmware flashing or just a VPN configuration, we ensure it’s set up for maximum security, privacy, and streaming performance with your chosen VPN provider.

The appointment will take place via remote software. During the appointment, our team will also answer any questions you may have about using the VPN on the router. Flashing is done out of the East Coast of the United States – we will do our best to accommodate your time zone difference if you are located in another part of the United States or another country.

👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans


🔹 How It Works

✅ Flashing vs. Configuration: Some routers require custom firmware (flashing) to enable VPN, while others can be configured without flashing.
✅ Fully Optimized: Our team ensures your router is ready to securely connect to your VPN, block ISP tracking, and enhance your streaming experience.
✅ Remote Assistance Available: Get expert help setting up your VPN connection remotely if needed.


Flashing vs. Configuration: Router Compatibility

At FlashRouters, we handle VPN setup differently based on your router brand and model. Some routers require flashing custom firmware (like DD-WRT or AsusWRT-Merlin), while others can be configured without flashing.

🛠 Router Setup Types by Brand

🔹 Flashing Required (Custom Firmware Installation)

These routers require firmware flashing (DD-WRT or AsusWRT-Merlin) to enable VPN compatibility.

  • Asus – Flashed with AsusWRT-Merlin or updated to the latest AsusWRT build. Some models only require configuration.
  • Linksys – Flashed with DD-WRT firmware.
  • Netgear – Flashed with DD-WRT firmware.

🔹 Configuration Only (No Flashing Required)

These routers have built-in VPN support and only require proper setup.

  • TP-Link – Configured without flashing.
  • GL.iNet – Configured without flashing.
  • Cudy – Configured without flashing.

📌 Other brands are not supported at this time. If you have a different router, we recommend checking out our pre-flashed router options.


✅ Supported VPN Providers

We work with a wide range of VPN providers, including:

  • NordVPN
  • ExpressVPN
  • Surfshark
  • CyberGhost
  • IPVanish
  • Private Internet Access (PIA)
  • VyprVPN
  • ProtonVPN
  • PureVPN
  • Windscribe
  • IVPN
  • Mullvad
  • StrongVPN
  • AzireVPN
  • AstrillVPN
  • HotspotShield VPN

(If your provider isn’t listed, reach out – we may still be able to support it!)


🔗 Get Started Today!

👉 Explore our Flash My Router plans:
🔗 Flash My Router Plans

🔹 Need help selecting the right option? Contact our support team! We’re happy to assist.

How Can I Add The 1 Year NordVPN Service From My FlashRouters.com Order To My Current NordVPN Account?

You can easily combine the free 1 year of NordVPN included with your FlashRouter purchase once you receive the NordVPN Activation Code Email from FlashRouters.com. The email is typically received within 24 hours of order completion and will contain a link as well as an activation code.

This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.

 

Privacy Hero 2 Only:

You can easily combine the free 1 year of NordVPN included with the Privacy Hero 2 VPN Router during the router activation process.

After activating the router, you’ll receive a NordVPN activation code within your privacy hero account dashboard. This code can be entered at nordvpn.com/activate with the email address associated with your current NordVPN account to add the 1 year of free service to your existing service.

What Are the Differences Between New, Recertified, And Open Box FlashRouters?

New

  • Direct from manufacturer, in new box.
  • Custom flashed on demand at time of the order.
  • 30 Day Satisfaction Guarantee / 1 Year Warranty.

Recertified (RM)

  • Direct from manufacturer/reseller, may be reboxed.
  • Custom flashed on demand at time of the order.
  • Specialists tested to guarantee same functionality as NEW routers.
  • 30 Day Satisfaction Guarantee / 1 Year Warranty.

Open Box

  • Limited quantity, discount items reboxed that may have cosmetic imperfections.
  • Same testing and functionality level and New and RM.
  • 30 Day Satisfaction Guarantee / No Warranty.

Will a FlashRouter Work With My Internet Service Provider?

US Customers (Single Router Solution):

Almost all Internet Service Providers(ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port. 

US Customers (Dual Router Solution): 

Yes, FlashRouters are compatible with your ISP in what is called a Dual Router Set Up.

For this type of setup, you would use your current router or modem router to connect to your local ISP while using a FlashRouter to connect to your VPN. This is recommended as you will not overhaul your network with a new router, and you will be able to use your selected VPN service on the devices you wish to use it with.

This set up would result in the creation of two networks, which can be seen as the “Local Network” and the “FlashRouter Network”. All devices connected to the FlashRouter Network will go through the VPN service. 

For any device you would prefer to use without a VPN, you can connect to the local network. The chain of devices would be connected from LAN ton your modem or modem/router to WAN on the FlashRouter, with your current router connected to the FlashRouter via Ethernet cable. 

 

International Customers (Single Router Solution):

Almost all Internet Service Providers (ISPs) require a modem in place to establish a connection to their service, however a modem by itself doesn’t provide the wifi connectivity needed in the home or office. A FlashRouter can connect directly to all known modems provided by major ISPs to create a wireless network so long as there is an Ethernet port on the modem to connect to the FlashRouter Internet port. 

International Customers (Dual Router Solution):

ISPs should all be compatible. Some providers require VLAN tagging/VID settings when wiring directly from modem to FlashRouter. 

For this type of setup, you would use your current router or modem router to connect to your local ISP while using a FlashRouter to connect to your VPN. This is recommended as you will not overhaul your network with a new router, and you will be able to use your selected VPN service on the devices you wish to use it with.

This set up would result in the creation of two networks, which can be seen as the “Local Network” and the “FlashRouter Network”. All devices connected to the FlashRouter Network will go through the VPN service. 

For any device you would prefer to use without a VPN, you can connect to the local network. The chain of devices would be connected from LAN ton your modem or modem/router to WAN on the FlashRouter, with your current router connected to the FlashRouter via Ethernet cable. 

What Stock Firmware Features Will I Lose If I Flash My Router

Open Source firmware like DD-WRT or Assu Merlin has many features equivalent to what stock firmware has, in addition to adding new features to a router. However, some features are lost from the stock firmware when a router is flashed.

These are typically features that are put into the stock firmware by the manufacturers themselves. Things like the Linksys App and the NetGear Genie are examples of what would not be available or compatible on the router after flashing.

Most routers also have a WPS button. By default, the WPS button’s functionality is disabled when a router is flashed as it can be vulnerable and a security risk. It can be re-enabled by following this guide but we do not recommend it.

Does a FlashRouter or Service Plan Purchase Include a VPN Subscription?

A subscription to a VPN does not come with a FlashRouter or Service plan. If you are planning to use a VPN, you would need to sign up for one separately, directly from a provider.

Need assistance in finding a VPN Provider? Please visit our recent VPN Provider Best Seller List.

Plug and Play VPN Support

Unlike other VPN Router providers, FlashRouters is proud to offer free VPN service integration with any purchase.

To receive a plug and play with VPN device, you will need to provide our team with the credentials from your VPN provider subscription.

IMPORTANT NOTE: This is not required but recommended for users who wish to have the simplest, most seamless experience when the FlashRouter arrives. You can always change the password when the device arrives if you wish as well.

Shows what to look for when you want to preconfigure your router.

To have your router VPN pre-configured:

  1. Select Yes from the “Want Your Router Preconfigured?” on the Payment Page during checkout.
  2. Select your VPN provider. If you don’t see your VPN listed select “Other” and you will see an additional field to input who your provider is.
  3. Enter your your VPN username and password
  4. For ExpressVPN Firmware Routers there will be an additional box for your activation code.

Please note:  If you do not enter a server location request in “Order Comments”, we will automatically start the device with the closest/optimal server for the location we are shipping the device by default. A location has to be added to the initial configuration for plug and play encryption security to occur on the device.

Can I Use A FlashRouter To Work From Home?

Yes! A large number of our customers use their FlashRouters to “work from home” no matter where your travels take you. Check out our Working Remotely Blog Post for more details.

What is the Difference Between Business VPNs and VPN Services?

Location: VPN Services offer many server locations to encrypt your traffic through. They are located in several countries worldwide for creating a private VPN tunnel for your online activities. A business VPN connects to specific central servers for data or directly to your office, creating a direct tunnel for accessing sensitive work documents and information.

Logging: Most VPN services offer log-free connections for total anonymity and security when connected (it is important to check out their terms of service and privacy policy for full details). A business VPN is monitored and maintained by employers such as corporations, hospitals or universities.

Protection: VPN services secure your family’s personal data while using computers, SmartTVs and various Internet of Things devices. Business VPNs protect the data of the company while you are tunneling into work.

Are There VPN Service Providers That Offer VPN for Business?

There are in fact several trusted VPN providers that have services specially tailored for business use. NordVPN Teams and VyprVPN for Business offer a full suite of solutions like user management tools, dedicated IPs, personal product managers, global server access, business pricing, and more.

These solutions allow you to quickly deploy a safe and secure corporate network without building and maintaining your own servers. If you are a small business looking to quickly secure remote workers as they shift to work from home, and you do not have an in-house IT expert, then you should consider NordVPN Teams or VyprVPN for Business.

Even better, when choosing a business VPN provider like NordVPN or VyprVPN, employees can use routers with direct NordVPN and VyprVPN integration already included through the FR Privacy App. Meaning that a full network kill switch, routing by device, automatic connections, and more are all included as features with your business VPN connection.

Can I use a VPN on a FlashRouter With My Work/Corporate VPN?

Many of our customers have found that they can connect to both their corporate and personal VPN, however due to the variables beyond our control, we cannot guarantee this for every unique situation.

Using two VPNs at once can lead to unpredictable results. Bouncing your network traffic to multiple servers before finally arriving at it’s intended destination can sometimes introduce speed and connection issues.

Please consider that some employers and agencies are more vigilant regarding third party VPN use than others. There are tools readily available that detect the use of VPN services.

While these tools cannot decrypt and view your network traffic, they can tell your employer that you are potentially using a VPN, which can be against company policy.

If your corporate and personal VPN do not work together, then you can always set the computer using your work VPN to bypass the FlashRouter’s VPN tunnel by accessing the router admin panel for your device.

This way, your computer would only use the work VPN. Keep in mind however, your location would appear as your actual location to your work.

Every FlashRouter also comes with a 30 Day Satisfaction Guarantee.

If in the event you determine the FlashRouter is not working out for you, you can return the device within the first 30 Days. A $25 restocking fee does apply.

Can I Use a FlashRouter to Connect to a Dedicated Business VPN Network?

Of course! If you have an OpenVPN server running on a local machine or hosted on a cloud provider like Amazon Web Services (AWS), FlashRouters can create a custom router client configuration to connect the entire router and all connected devices to your OpenVPN server. Instead of employees connecting device-by-device, a router-based VPN connection allows for always-on secure VPN tunneling.

Our service team is here to work with you to test and ensure compatibility before purchasing. Interested in a router based custom client VPN solution for your remote workers? Please do not hesitate to contact us.

And, if you’re looking for a specific router, take a look at some of our most popular options!

How can I Reset the Password for My FlashRouters.com Customer Account?

To reset your password, you’ll want to click the “Account” icon in the upper right hand corner on our main website (Flashrouters.com). Once clicked, a menu will open where you can enter your login information, or select the “Forgot Password” button to trigger a reset email.

If you’re still having issues accessing your FlashRouters.com customer account after attempting a password reset, please reach out to us at support@flashrouters.com for further assistance.

What Payment Methods does FlashRouters Accept?

We accept Apple Pay, Google Pay, and all major cred/debit card providers on our payment method options page during checkout.

 

If you’d like to complete a purchase using PayPal as a payment method, please contact our team at support@flashrouters.com to request an invoice.

Can I Make Change/Update/Cancel My Order?

We strive to process and ship all orders within one business day. If you wish to make changes or cancellations, please contact us within 24 hours of placing your order at support@flashrouters.com with your order number and the changes you’d like to make.

While we will do our best to accommodate your request, please note that we cannot guarantee changes or cancellations.

Please note that if you need to update the shipping address, the order will require reapproval through our fraud prevention system with the new address.

Trouble Checking Out

Some customers have found that trying the methods below have helped solve any checkout errors they may have encountered:

⚡️Clearing cache
⚡️Refreshing web page
⚡️Switching web browsers
⚡️Using an incognito/private window
⚡️Confirming all billing information is accurate
⚡️Disable VPN if one is enabled
⚡️Disable Ad & Script Blockers if enabled
⚡️If you’re using a mobile device, switching to a computer or laptop would be ideal.

Surfshark AsusWRT WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark AsusWRT Setup

Copy your Surfshark Private Key

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. A Public Key and Private Key will then appear. Use the copy box to copy the Private Key. You will not need the public key.

Surfshark Private Key

AsusWRT Router Setup for Surfshark

Login to AsusWRT firmware settings in a browser on any computer or smart device connected to the AsusWRT FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Fusion tab.

Asus VPN Fusion

3. Click Add profile.

Asus Add profile

4. In the Connection Name field enter in Surfshark.

5. In the VPN Type dropdown select Surfshark.

6. In the Region dropdown select the Surfshark location you want to connect to.

7. In the Private Key field paste in the Surfshark Private Key obtained earlier.

8. Click Apply and Enable at the bottom of the page.

Asus Surfshark profile

If you only want certain devices to connect to the Surfshark profile you are setting up instead of all the devices connected to the FlashRouter’s network click into the profile and disable Apply to all devices. Then click Devices and select the devices that you want to connect to VPN.

Asus VPN devices
Asus VPN select devices

9. At the top of the page set the Service State toggle to ON to activate the VPN connection.

Asus Surfshark Connected

Verify a successful Surfshark connection

  1. You should now see a CONNECTED message.
  2. Visit Surfshark’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Use the profile service state toggle to disconnect the currently connected location.
  2. Then click into the Surfshark profile in the router’s settings.
  3. Then adjust the Region dropdown to a new location.
  4. Click Apply all settings.
  5. Use the profile service state toggle to connect the new location.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark TP-Link OpenVPN Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .ovpn file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup method.

Surfshark setup method Router

4. Select OpenVPN as the Protocol.

Surfshark OpenVPN Protocol

5. Copy and paste your Surfshark manual username and password to a secure location. This is the username and password you will enter into the router settings to connect to Surfshark.

Surfshark OpenVPN credentials

6. Click Location and select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the UDP .ovpn file for this Surfshark server location.

Surfshark download .ovpn file

TP-Link Router Setup for Surfshark

Login to TP-Link firmware settings in a browser on any computer or smart device connected to the FlashRouter’s network.

1. Navigate to the Advanced tab.

TP-Link Advanced settings

2. Navigate to the VPN Client tab.

TP-Link VPN Client

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

TP-Link VPN Client enable

4. Click the Add button in the Server List area.

TP-Link Add server button

5. In the Description field enter in the name you’d like to use for this OpenVPN Client profile. We typically advise entering in the location. Our example server was New York so I have entered in Surfshark New York.

Set the VPN Type to OpenVPN.

In the Username and Password fields paste in the Surfshark username and password we obtained earlier.

Click Browse and select the .ovpn file you downloaded earlier. Then click Save.

TP-Link Surfshark OpenVPN

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

TP-Link add devices to VPN tunnel

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

TP-Link Surfshark OpenVPN connected

Verify a successful Surfshark connection

  1. You should now see a CONNECTED message.
  2. Visit Surfshark’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Follow the steps at the top of the page to obtain a new .ovpn file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Device Settings That Can Interfere With Your Router VPN

Dave · Oct 6, 2026 ·

If your router VPN is connected and working on other devices but one phone, tablet, computer, or streaming device shows the wrong IP address, wrong location, cannot access certain websites, or behaves differently, check the affected device before changing the router.

VPN applications, privacy features, custom DNS settings, antivirus software, firewalls, browser settings, and corporate security software can all change how traffic is handled directly on a device.

This guide applies to all FlashRouter types and VPN providers.


Jump to a Section

  • Start Here: Router or Device?
  • Device VPN Applications
  • iPhone & iPad Privacy Settings
  • Android VPN & DNS Settings
  • Security, Firewall & Browser Settings
  • Run a Clean VPN Test

Start Here: Is the Problem the Router or One Device?

Before changing your router VPN configuration, compare the affected device with another device connected to the same FlashRouter.

If several devices show the correct VPN IP and location while only one device does not, the router VPN is already demonstrating that it can route traffic through the VPN.

Focus troubleshooting on the affected device.

If every device connected to the FlashRouter has the same VPN problem, continue with router-level VPN troubleshooting instead.

Privacy Hero users should also check the Privacy Hero dashboard. If the VPN itself displays Failed, Disconnected, Connecting, or a timeout error, troubleshoot that connection before changing device settings.

  • Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting
  • Privacy Hero NordVPN Not Connecting or Showing Timeout Errors

Disconnect VPN Applications Running on the Device

Do not run a VPN application directly on the device while troubleshooting a VPN running on your router.

This includes applications from NordVPN, ExpressVPN, Surfshark, Proton VPN, IPVanish, Private Internet Access, Mullvad, corporate VPN providers, and other VPN services.

If both the router VPN and device VPN are active, the device VPN can take control of that device’s traffic after it passes through the router.

This can cause:

  • An unexpected public IP address.
  • An unexpected VPN location.
  • Websites or applications not loading.
  • Streaming region problems.
  • DNS problems.
  • Slow or unstable connections.
  • One device behaving differently from other devices on the same router.

Disconnect the VPN application completely before testing the router VPN.

Closing the VPN app window may not disconnect the VPN. Confirm in the application or device network settings that the device-level VPN is actually disconnected.

iPhone and iPad: Check Private Relay and Limit IP Address Tracking

Apple devices include privacy features that can change how supported internet traffic is handled and make router VPN testing more difficult.

Limit IP Address Tracking

To temporarily disable Limit IP Address Tracking for your FlashRouter WiFi network:

  1. Open Settings.
  2. Select Wi-Fi.
  3. Tap the information button next to the FlashRouter WiFi network.
  4. Find Limit IP Address Tracking.
  5. Turn it Off.
  6. Disconnect from WiFi and reconnect.
  7. Test the connection again.

This setting is configured per WiFi network, so make sure you are changing it for the FlashRouter network being tested.

iCloud Private Relay

iCloud Private Relay can also alter IP address visibility for supported traffic.

For troubleshooting:

  1. Open Settings.
  2. Tap your Apple Account/name.
  3. Select iCloud.
  4. Select Private Relay.
  5. Temporarily turn Private Relay Off.
  6. Reconnect to the FlashRouter.
  7. Test the IP address and connection again.

These settings can be restored after testing.

Android: Check Private DNS and Always-On VPN

Android devices can have DNS and VPN settings that operate independently of the router.

Private DNS

Android Private DNS can send DNS requests to a selected DNS provider instead of relying solely on the DNS configuration supplied by the router.

If you are troubleshooting DNS, website access, streaming, filtering, or location behavior:

  1. Open Settings.
  2. Select Network & internet.
  3. Select Private DNS.
  4. Temporarily select Off.
  5. Save the setting.
  6. Reconnect to the FlashRouter WiFi.
  7. Test again.

Android menus vary by manufacturer and Android version. Search the device Settings for Private DNS if necessary.

Always-On VPN

An Android VPN application can be configured to automatically reconnect even after you believe the VPN has been disconnected.

  1. Open Settings.
  2. Select Network & internet.
  3. Select VPN.
  4. Select the configured VPN.
  5. Disable Always-on VPN while testing.
  6. Check whether Block connections without VPN is enabled and temporarily disable it if necessary for testing.

Then reconnect to the FlashRouter and test the router VPN again.

Check Antivirus, Firewall, Browser, and Work Security Settings

If the problem affects a computer or only occurs in one browser, check for software that modifies network traffic directly on the device.

Antivirus and Internet Security Software

Security applications may include network features such as:

  • Web Protection.
  • Safe Browsing or Secure Web.
  • Network Protection.
  • DNS Protection.
  • HTTPS scanning.
  • Tracking protection.
  • Built-in VPN services.
  • Firewall controls.

Temporarily disable the relevant network protection feature and test again. You do not normally need to disable the entire antivirus product.

Third-Party Firewalls

A third-party firewall can block applications, DNS requests, VPN-related traffic, or specific network interfaces.

Temporarily disable the firewall and test the connection. If the problem disappears, re-enable the firewall and review its network rules.

Browser VPN, Proxy, and Secure DNS

Browsers and browser extensions can also use their own:

  • VPN services.
  • Proxy connections.
  • Secure DNS or DNS-over-HTTPS.
  • Privacy or filtering extensions.
  • Location-changing extensions.

If the problem occurs only in one browser, test another browser without extensions or custom networking settings.

Work and Corporate Devices

Company-managed computers and mobile devices may use corporate VPN clients, DNS filtering, web filtering, endpoint security, device-management profiles, or zero-trust networking software.

These systems may intentionally override the local router’s network behavior.

If a personal device works correctly on the same FlashRouter while a company-managed device does not, the company security configuration may be responsible.

Run a Clean Router VPN Test

For the cleanest test, temporarily remove device-level networking variables and let the FlashRouter VPN handle the connection.

  • FlashRouter VPN: On
  • Device VPN: Off
  • iCloud Private Relay: Off while testing
  • Limit IP Address Tracking: Off while testing
  • Android Private DNS/custom DNS: Off while testing
  • Always-On VPN: Off while testing
  • Third-party network filtering: Off while testing

Then:

  1. Disconnect the affected device from WiFi.
  2. Reconnect it to the FlashRouter.
  3. Open a fresh private/incognito browser window.
  4. Check the device’s public IP address and location.
  5. Compare the result with another device connected to the same FlashRouter.

If the second device shows the correct VPN IP but the affected device does not, continue troubleshooting settings or software on the affected device.

If all devices show the same incorrect IP address or all devices fail to use the VPN, continue with router-level VPN troubleshooting.

Privacy Hero VPN Connected but Device Still Shows the Wrong IP?

Privacy Hero provides device-level VPN controls. Make sure the affected device is actually assigned to use the VPN.

  1. Open app.privacyhero.com.
  2. Open the Devices section.
  3. Select the affected device.
  4. Confirm VPN protection is enabled for that device.
  5. Disconnect any VPN application running directly on the device.
  6. Test the public IP address again.

If other Privacy Hero devices show the correct VPN IP and only one device remains incorrect, continue with the device-level checks above.


Related FlashRouters Guides

  • Should I Be Using My Computer, Phone, or Tablet VPN App While Connected to the FlashRouter?
  • What Is a DNS Leak and How Can I Prevent a DNS Leak in My Router?
  • FlashRouters VPN FAQs
  • FlashRouters Router Troubleshooting
  • Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting
  • Privacy Hero NordVPN Not Connecting or Showing Timeout Errors
  • Privacy Hero VPN Kill Switch Setup

How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Dave · Oct 26, 2026 ·

ASUS VPN Fusion lets supported AsusWRT routers run VPN client profiles and decide which connected devices use each VPN connection. You can send the entire network through one VPN, use separate VPN profiles for selected devices, or leave certain devices on the regular ISP connection.

This guide covers how to use ASUS VPN Fusion to assign devices to specific VPN connections, manage multiple VPN profiles simultaneously, and choose which devices use a VPN or connect directly through your ISP. These features work with supported VPN providers and protocols, including WireGuard and OpenVPN.

In This Guide

Before You Start →Connect and open VPN FusionApply VPN to All Devices →Default VPN routeAssign Selected Devices →Per-device VPN or ISPMultiple VPN Profiles →WireGuard and OpenVPNVerify & Troubleshoot →Check each device’s public IPGuest Network Routing →VPN WiFi and ISP WiFi

Open VPN Fusion

  1. Connect your computer or phone to your ASUS FlashRouter’s WiFi or LAN.
  2. Open http://www.asusrouter.com or the router’s LAN IP (often 192.168.50.1) and log in. See How to Access Your AsusWRT FlashRouter Settings.
  3. Go to VPN > VPN Fusion. Add and configure at least one working VPN client profile before assigning devices.
ASUS VPN Fusion page with Add Profile and Internet Connection
VPN Fusion displays your saved VPN profiles and the Add Profile option.

The exact menu names, profile limits, and available VPN types depend on your ASUS model and firmware. Some older ASUS routers use a different VPN Client interface and do not have the full VPN Fusion controls.

Method 1: Apply One VPN to All Devices

Use this option when you want the selected VPN profile to be your router’s default connection.

  1. In VPN Fusion, open the VPN profile that should provide the default internet route.
  2. Enable Apply to all devices (or Default Connection in firmware that uses that label).
  3. Click Apply all settings, then enable the VPN profile.
  4. Connect a test device to the router and check its IP. If you use per-device overrides, verify those rules separately.
ASUS VPN Fusion Apply to all devices setting and device count
Enable Apply to all devices to use the selected VPN as the default connection.

Do not assume every active VPN profile applies to every device. The default route and any device-specific policies determine which connection a device uses.

Method 2: Send Only Selected Devices Through a VPN

  1. In VPN Fusion, turn off Apply to all devices for a profile when you do not want that VPN used network-wide.
  2. Open the profile’s Device area using the pencil/edit icon or the firmware’s device-assignment control.
  3. Select the intended devices (for example, a TV and streaming box), confirm with OK, then click Apply all settings.
  4. Enable the VPN profile and verify the selected devices’ public IPs.
  5. For devices that should use the normal ISP internet, leave them on the Internet Connection route or explicitly set the Internet/bypass rule available in your firmware. Remove any conflicting VPN assignments.

Important: A device being connected to ASUS WiFi does not guarantee that it is assigned to the desired VPN. Check the assigned profile and the actual public IP.

How Multiple VPN Connections Work

On supported models, VPN Fusion can keep several VPN connections active and route different devices through different providers at the same time. For example:

TVNordVPN — WireGuard
LaptopProton VPN — OpenVPN
Streaming deviceSurfshark — OpenVPN
Work computerRegular ISP connection

You may be able to run one WireGuard profile and multiple OpenVPN profiles concurrently, but connection limits and supported combinations vary by ASUS router model and firmware. Adding many saved OpenVPN profiles is not the same as having all of them connected at once.

  1. Create separate profiles with clear names, such as Nord-US-WG, Proton-US-OVPN, and Surfshark-UK-OVPN.
  2. Enable only the profiles you need and confirm each shows connected.
  3. Assign each client device to the appropriate active profile; avoid applying conflicting default routes.
  4. Verify each device’s observed IP and server country. If one tunnel fails, test it individually with the other profiles temporarily disabled.

ASUS reference: How VPN Fusion handles multiple tunnels and devices.

Confirm a Device Is Actually Using the VPN

  1. In VPN Fusion, confirm the target profile’s connection status is active.
  2. Check the device’s assignment in the ASUS VPN Fusion interface.
  3. On that same device, visit IPLeak.net or another public-IP checker.
  4. Compare the reported public IP and location with the VPN server assigned to that device.
  5. If the device still shows your ISP IP, test with its own VPN app and iCloud Private Relay / Private DNS / browser proxy disabled. Use Device Settings That Can Interfere With Your Router VPN.

Quick isolation test

  1. Turn off VPN Fusion routing for a test device and confirm ISP internet works.
  2. Turn on just one known-working VPN profile for that device.
  3. Recheck public IP. If it now works, reintroduce other profiles/assignments individually.

Want a Separate WiFi Network With or Without VPN?

Rather than selecting devices one at a time, supported ASUS routers offer Guest Network Pro or Network > VPN Network features that can associate a WiFi SSID with VPN routing. See ASUS Guest WiFi With or Without VPN: Setup Guide.

On routers with only the traditional Guest Network feature, available VPN-by-SSID behavior may differ; do not assume the standard guest SSID bypasses a network-wide VPN default.

Related AsusWRT Guides

  • NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN
  • ASUS Guest WiFi With or Without VPN: Setup Guide
  • Device Settings That Can Interfere With Your Router VPN
  • How to Access Your AsusWRT FlashRouter Settings

Upgrade your ASUS router

Explore the Latest WiFi 7 ASUS FlashRouters

Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.

Shop ASUS WiFi 7 Routers →

Surfshark TP-Link WireGuard Setup

TeamFlashRouters · Apr 29, 2024 ·

Preparing for Surfshark TP-Link Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. Click Choose a location.

Surfshark Choose a Location

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Surfshark download conf file

TP-Link Router Setup for Surfshark

Login to TP-Link firmware settings in a browser on any computer or smart device connected to the FlashRouter’s network.

1. Navigate to the Advanced tab.

TP-Link Advanced settings

2. Navigate to the VPN Client tab.

TP-Link VPN Client

3. Check the Enable box next to VPN Client. Then click Save at the bottom of the page.

TP-Link VPN Client enable

4. Click the Add button in the Server List area.

TP-Link Add server button

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location. Our example server was New York so I have entered in Surfshark New York.

Set the VPN Type to WireGuard.

Click Browse and select the .conf file you downloaded earlier. Then click Save.

TP-Link Surfshark WireGuard

By default no devices will be assigned to the VPN Tunnel. With TP-Link firmware you must manually assign the devices that you want connected to the VPN tunnel. Proceed with the next steps to do so for all devices you want connected to VPN.

6. Click the Add button in the Device List area.

TP-Link add devices to VPN tunnel

7. A list of devices connected to the FlashRouter’s network will appear. Check the devices that you want to connect to VPN. Then click OK.

TP-Link select devices to add to VPN tunnel

8. Now that the devices have been assigned to the VPN connection click the Enable toggle in the Server List area.

TP-Link Surfshark WireGuard Connected

Verify a successful Surfshark connection

  1. You should now see a CONNECTED message.
  2. Visit Surfshark’s IP Check to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Follow the steps at the top of the page to obtain a new .conf file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Surfshark Merlin WireGuard Setup

TeamFlashRouters · Mar 30, 2023 ·

Preparing for Surfshark Merlin Setup

Download your Surfshark .conf file

If you are not already a Surfshark user Sign Up Now.

1. Log in to your account on the Surfshark website.

Surfshark Account Login

2. Click VPN Manual Setup.

Surfshark VPN Manual Setup

3. Select Router as the Setup Method.

Surfshark setup method Router

4. Select WireGuard as the Protocol.

Surfshark select WireGuard

5. Select I don’t have a key pair.

Surfshark No Key Pair

6. Enter FlashRouter as the name of the connection and click Next.

Surfshark Connection Name

7. Click Generate a new key pair.

Surfshark Generate new Key Pair

8. Click Choose a location.

Surfshark Choose a Location

9. Select the server location you want to connect to. Unless you need a specific location we recommend using Surfshark’s recommended Fastest server. Click Download to download the .conf file for this Surfshark server location.

Surfshark download conf file

Merlin Router Setup for Surfshark

Login to Asus Merlin firmware settings in a browser on any computer or smart device connected to the Merlin FlashRouter’s network.

1. Navigate to the VPN tab.

Merlin VPN Tab

2. Navigate to the VPN Client tab.

Merlin VPN Client Tab

3. Select WireGuard as the VPN Protocol.

Merlin VPN Client WireGuard

4. Click Choose file and select the .conf file you downloaded earlier. Then click Upload.

Merlin WireGuard Choose File Upload

5. In the Description field enter in the name you’d like to use for this WireGuard Client profile. We typically advise entering in the location here. Our example server was in New York so I have entered in Surfshark New York.

Merlin WireGuard ProtonVPN Description

6. Set Enable WireGuard to Yes.

Merlin Enable WireGuard

7. Click Apply at the bottom of the page and you should then see a Connected message appear.

Merlin WireGuard Connected

8. By default no devices are assigned to the new active WireGuard connection profile. Click the VPN Director tab to assign specific devices to the new WireGuard profile. Your IP will not be changed on your devices yet.

WireGuard select VPN Director

9. On the VPN Director page click the + symbol next to Add new rule.

WireGuard VPN Director Add new rule

10. Select the new WireGuard profile in the Interface dropdown.

WireGuard VPN Director select Interface

11. In the Local IP field enter in 192.168.50.0/24 if you want ALL devices connected to the FlashRouter’s network to use the WireGuard VPN connection. Click OK.

If you only want certain devices to connect to the WireGuard Client profile you have setting up instead of all the devices connected to the FlashRouter’s network please complete the instructions on our VPN Director guide.

12. Then click Apply at the bottom of the page.

Verify a successful Surfshark connection

Visit Surfshark’s IP Check from a private/incognito browsing window to verify your new IP address and virtual location.

In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to Surfshark.

How to change the Surfshark server

  1. Follow the steps at the top of the page to obtain a new .conf file.
  2. Then proceed with the settings same as initial setup.

TROUBLESHOOTING

Still having issues? Visit the VPN Troubleshooting section.

Troubleshoot Here

Private Internet Access (PIA) Setup for Privacy Hero

TeamFlashRouters · Apr 3, 2023 ·

Privacy Hero supports Private Internet Access (PIA) with WireGuard (recommended) and OpenVPN. You need an active PIA subscription and your PIA VPN username and password.

Important difference: PIA WireGuard has a built-in provider integration in Privacy Hero. Choose Private Internet Access from the VPN provider list—not Custom WireGuard. No WireGuard configuration file or key generation is needed.

By default, Privacy Hero can automatically select an optimal available PIA server based on your location and server conditions. Alternatively, use Advanced Options to enter a specific PIA server hostname from the regional list below.

Privacy Hero is cloud-managed. You can configure your router from any device with an internet connection, whether or not you are on the Privacy Hero WiFi network.

PIA VPN Setup Guide

Choose your setup method or jump to a particular step.

PIA WireGuard →Use the built-in Privacy Hero PIA providerAutomatic or Manual Server →Select an optimal server or enter a hostnamePIA Server Hostnames →Browse the full list organized by regionOpenVPN Setup →Generate and upload an OpenVPN configurationVerify Connection →Confirm your device is using the PIA VPNTroubleshooting →Connection errors, wrong region, no internet

Set Up PIA WireGuard in Privacy Hero (Recommended)

Unlike most other providers, PIA WireGuard does not use Custom VPN file uploads in Privacy Hero. The built-in PIA integration connects using your PIA account credentials and handles the WireGuard configuration for you.

  1. Open app.privacyhero.com and sign in to your Privacy Hero account.
  2. Open the VPN section. Select Change beside your current VPN provider.
  3. Choose Private Internet Access from the provider list. Do not select Custom for this WireGuard setup.
  4. Enter your PIA VPN account username and password (not your Privacy Hero dashboard credentials). You can check your account at PIA Client Control Panel.
  5. For automatic server selection, leave the optional server hostname unset, then click Save to connect. Wait until Privacy Hero displays Connected.
Privacy Hero built-in Private Internet Access provider login settings

Choose the Automatic Server or a Specific PIA Location

Privacy Hero offers two ways to select the PIA WireGuard server:

  • Automatic (recommended for most users): Leave the server hostname field blank. Privacy Hero selects an optimal available PIA location, generally favoring nearby servers and server conditions such as load. You do not need to manually maintain a server address.
  • Specific location: Enter a PIA region hostname under Advanced Options. This is useful when you need an IP address from a particular country or city.
  1. To use a specific location, open the existing Private Internet Access connection and select Advanced Options.
  2. Enter a complete PIA server hostname from the list below, for example us-newyorkcity.privacy.network or uk-london.privacy.network.
  3. Click Save, wait for Connected, then verify your new public IP address. If the selected location becomes unavailable, try another hostname or remove the hostname to return to automatic selection.
Privacy Hero Private Internet Access Advanced Options field for entering a VPN server hostname

PIA Server Hostname List by Region

Use these hostnames in PIA > Advanced Options when you prefer a specific location. Expand a region below and copy the complete hostname, including .privacy.network. This list is retained from the existing FlashRouters guide.

Server availability can change. Some hostnames, particularly those ending in -pf or marked for streaming, are specialized locations and may not be available for every connection. If a hostname no longer works, use automatic selection or check PIA’s current location list for available locations. PIA’s location list names regions; it does not necessarily provide matching hostnames.

North America (65 locations)
bahamas.privacy.networkca-ontario.privacy.networkca-toronto.privacy.networkca-vancouver.privacy.networkca-montreal.privacy.networkgreenland.privacy.networkgt-guatemala-pf.privacy.networkmexico.privacy.networkpanama.privacy.networksanjose.privacy.networkus-alabama-pf.privacy.networkus-alaska-pf.privacy.networkus-arkansas-pf.privacy.networkus-atlanta.privacy.networkus-california.privacy.networkus-chicago.privacy.networkus-connecticut-pf.privacy.networkus-denver.privacy.networkus-florida.privacy.networkus-houston.privacy.networkus-idaho-pf.privacy.networkus-indiana-pf.privacy.networkus-iowa-pf.privacy.networkus-kansas-pf.privacy.networkus-kentucky-pf.privacy.networkus-lasvegas.privacy.networkus-louisiana-pf.privacy.networkus-maine-pf.privacy.networkus-massachusetts-pf.privacy.networkus-michigan-pf.privacy.networkus-minnesota-pf.privacy.networkus-mississippi-pf.privacy.networkus-missouri-pf.privacy.networkus-montana-pf.privacy.networkus-nebraska-pf.privacy.networkus-new-hampshire-pf.privacy.networkus-new-mexico-pf.privacy.networkus-newyorkcity.privacy.networkus-north-carolina-pf.privacy.networkus-north-dakota-pf.privacy.networkus-ohio-pf.privacy.networkus-oklahoma-pf.privacy.networkus-oregon-pf.privacy.networkus-pennsylvania-pf.privacy.networkus-rhode-island-pf.privacy.networkus-seattle.privacy.networkus-siliconvalley.privacy.networkus-south-carolina-pf.privacy.networkus-south-dakota-pf.privacy.networkus-texas.privacy.networkus-tennessee-pf.privacy.networkus-vermont-pf.privacy.networkus-virginia-pf.privacy.networkus-washingtondc.privacy.networkus-west-virginia-pf.privacy.networkus-wisconsin-pf.privacy.networkus-wyoming-pf.privacy.networkus3.privacy.networkus-baltimore.privacy.networkus-honolulu.privacy.networkus-newjersey.privacy.networkus-saltlakecity.privacy.networkus-streaming-2.privacy.networkus-streaming.privacy.networkus-wilmington.privacy.network
South America (9 locations)
ar.privacy.networkbo-bolivia-pf.privacy.networkbogota.privacy.networkbr.privacy.networkec-ecuador-pf.privacy.networkpe-peru-pf.privacy.networksantiago.privacy.networkuy-uruguay-pf.privacy.networkvenezuela.privacy.network
Europe (51 locations)
al.privacy.networkad.privacy.networkaustria.privacy.networkbrussels.privacy.networkba.privacy.networksofia.privacy.networkzagreb.privacy.networkczech.privacy.networkde-berlin.privacy.networkde-frankfurt.privacy.networkdenmark.privacy.networkdenmark-2.privacy.networkspain.privacy.networkes-valencia.privacy.networkee.privacy.networkfi.privacy.networkfi-2.privacy.networkfrance.privacy.networkgr.privacy.networkhungary.privacy.networkitaly.privacy.networkitaly-2.privacy.networkis.privacy.networkireland.privacy.networkman.privacy.networklv.privacy.networkliechtenstein.privacy.networklt.privacy.networklu.privacy.networkmalta.privacy.networkmd.privacy.networkmonaco.privacy.networkmontenegro.privacy.networknl-amsterdam.privacy.networkmk.privacy.networkno.privacy.networkpoland.privacy.networkpt.privacy.networkro.privacy.networksweden.privacy.networksweden-2.privacy.networkrs.privacy.networksk.privacy.networkslovenia.privacy.networkswiss.privacy.networktr.privacy.networkuk-london.privacy.networkuk-manchester.privacy.networkuk-southampton.privacy.networkuk-2.privacy.networkua.privacy.network
Asia (26 locations)
ae.privacy.networkbangladesh.privacy.networkcambodia.privacy.networkchina.privacy.networkcyprus.privacy.networkgeorgia.privacy.networkhk.privacy.networkin.privacy.networkisrael.privacy.networkjakarta.privacy.networkjapan.privacy.networkjapan-2.privacy.networkkazakhstan.privacy.networkkr-south-korea-pf.privacy.networkkualalumpur.privacy.networkmacau.privacy.networkmongolia.privacy.networknp-nepal-pf.privacy.networkphilippines.privacy.networkqatar.privacy.networksaudiarabia.privacy.networksg.privacy.networksrilanka.privacy.networktaiwan.privacy.networkvietnam.privacy.networkyerevan.privacy.network
Oceania (7 locations)
au-adelaide-pf.privacy.networkau-australia-so.privacy.networkau-brisbane-pf.privacy.networkaus-melbourne.privacy.networkaus-perth.privacy.networkau-sydney.privacy.networknz.privacy.network
Africa (5 locations)
dz.privacy.networkegypt.privacy.networkmorocco.privacy.networknigeria.privacy.networkza.privacy.network

Set Up PIA OpenVPN in Privacy Hero

OpenVPN is the alternative when you need a manually uploaded connection or if the built-in PIA WireGuard method does not work on your network. OpenVPN uses Custom in Privacy Hero, unlike the built-in PIA WireGuard setup.

Download a PIA OpenVPN Configuration File

  1. Sign in to the PIA Client Control Panel using your PIA VPN account.
  2. Open Downloads and scroll to OpenVPN Configuration Generator or OpenVPN Configurations.
  3. If using the generator, choose OpenVPN 2.4 or newer and Linux when these options are offered, then choose an available server location.
  4. Select your preferred configuration. UDP / 1198 (AES-128-CBC) is a standard default. UDP / 1197 (AES-256-CBC) is an alternative. Use a PIA-provided TCP configuration if UDP does not work on your network.
  5. Click Generate or download a suitable pre-made configuration and save the resulting .ovpn file. Each server file is tied to its selected location/settings.

PIA also provides pre-made OpenVPN configuration bundles; see PIA’s OpenVPN file instructions.

Add PIA OpenVPN as a Custom VPN

  1. Open Privacy Hero, go to VPN, click Change, and select Custom.
  2. Choose OpenVPN and upload the PIA .ovpn file downloaded in the previous section.
  3. Enter your PIA VPN username and password in the Custom OpenVPN authentication fields.
  4. Click Save and confirm Privacy Hero shows Connected.
Privacy Hero Custom OpenVPN configuration with file upload and username password fields

Note: If OpenVPN UDP cannot connect, try a TCP profile from PIA or another server. When switching protocols, make sure you upload a matching PIA configuration file.


Verify Your Private Internet Access Connection

  1. Connect a device to the Privacy Hero WiFi or LAN network.
  2. Disconnect any PIA app or other VPN running directly on the device so the router VPN can be tested independently.
  3. Open a private/incognito browser window and visit PIA What Is My IP.
  4. Confirm that your public IP address reflects the VPN connection, and that the approximate location is consistent with either the selected hostname or Privacy Hero’s automatic server selection.

Privacy Hero VPN settings can be changed remotely, but the device used to verify the VPN IP must be connected to the Privacy Hero network.

Streaming Relocation and Your PIA Location

If Streaming Relocation is enabled for a supported service, that service may use the Streaming Relocation location instead of your PIA VPN server location. See Privacy Hero Streaming Relocation.


PIA VPN Not Connecting?

If Privacy Hero reports Failed, stays on Connecting, or connected devices lose internet access, try these checks:

  1. Confirm your PIA subscription is active and enter your PIA VPN login, not your Privacy Hero email/password.
  2. For built-in PIA WireGuard, verify the provider is Private Internet Access—not Custom. No downloaded WireGuard file is required.
  3. Remove any specific server hostname to test automatic server selection. If that connects, the previous hostname may be unavailable.
  4. For Custom OpenVPN, upload a fresh PIA .ovpn file, re-enter the PIA credentials, and try a different server or a TCP configuration.
  5. Turn off the router VPN temporarily to check that normal internet access works. If the VPN Kill Switch is blocking internet traffic, temporarily disable it for testing, then restore your preferred setting.
  6. Check whether a separate VPN app, iCloud Private Relay, Private DNS, proxy, or security software on the testing device is affecting your VPN IP results.

No Internet When the VPN Disconnects?

The Privacy Hero VPN Kill Switch may intentionally block internet access if the VPN goes down. See Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting.

VPN Connected but One Device Shows the Wrong IP?

If other devices show the expected VPN address, review device VPN apps, iCloud Private Relay, Private DNS, and security settings.

Related Privacy Hero Guides

  • Privacy Hero VPN Kill Switch Setup
  • Privacy Hero VPN Kill Switch: No Internet or WiFi Troubleshooting
  • Privacy Hero Streaming Relocation
  • Device Settings That Can Interfere With Your Router VPN
  • FlashRouters Router Troubleshooting

Connecting to OpenVPN on Asus Merlin Firmware

TeamFlashRouters · Sep 22, 2021 ·

To setup VPN on your Asuswrt Merlin router, you will need to first download an OpenVPN (.ovpn) file from your VPN service provider and load it onto your router.

Review your specific VPN service instructions below. Follow these instructions to locate and upload your OpenVPN file. Depending on the VPN service, there may be additional steps and configurations required to complete the setup.

NordVPN

ExpressVPN

IPVanish

Astrill

Hide.Me

Hotspot Shield

IVPN

Mullvad

SaferVPN

StrongVPN

SurfShark

TorGuard

VPNUnlimited

VyprVPN

Windscribe

Using Asuswrt Merlin’s VPN Director, your router can store up to five different VPN connections and switch between them at will.

ASUS-WRT Router Setup Guide

ASUSWRT Routers

Quick Start Guide for ASUS-WRT FlashRouters

Find setup guides, FAQs and troubleshooting tips for ASUSWRT configured FlashRouters.

VIEW SUPPORTED ROUTER MODELS

Asus Logo
  • ROG series: GT-BE98 Pro
  • GT series: GT6, GT-AXE16000, GT-AX11000 Pro, GT-AXE11000, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000
  • ZenWiFi: ZenWiFi Pro XT12, ZenWiFi Pro ET12, ZenWiFi XT9, ZenWiFi AX (XT8), ZenWiFi ET8, ZenWiFi XD6, ZenWiFi XD5
  • RT series: RT-BE96U, RT-BE88U, RT-BE58U, RT-AXE7800, RT-AX88U Pro, RT-AX88U, RT-AX86U Pro, RT-AX86U, RT-AX86S, RT-AX68U, RT-AX82U, RT-AX58U, RT-AX3000, RT-AX59U, RT-AX92U
  • TUF series: TUF-AX5400, TUF-AX3000_V2, TUF-AX3000, TUF Gaming AX6000, TUF Gaming AX4200

Internet Setup

  • How to Access Your AsusWRT FlashRouter Settings

WiFi Setup

  • ASUS Guest WiFi With or Without VPN: Setup Guide
  • Change WiFi name and password on Asus

VPN Setup

  • CyberGhost AsusWRT OpenVPN Setup
  • Surfshark AsusWRT WireGuard Setup
  • NordVPN Setup for AsusWRT: Token, WireGuard & OpenVPN
  • IPVanish AsusWRT OpenVPN Setup
  • PrivateInternetAccess (PIA) AsusWRT OpenVPN Setup
  • ExpressVPN Setup for AsusWRT Firmware Routers
  • PrivateInternetAccess (PIA) Asus AX1800S OpenVPN Setup
  • IPVanish Asus AX1800S OpenVPN Setup
  • ExpressVPN Asus AX1800S OpenVPN Setup
  • NordVPN Asus AX1800S OpenVPN Setup

Asus-WRT Features

  • How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs

Search Support Articles

Troubleshooting

  • Device Settings That Can Interfere With Your Router VPN

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

AsusWRT-Merlin Router Setup Guide

Asus-Merlin Router Setup

Quick Start Guide for AsusWRT-Merlin FlashRouters

Find setup guides, FAQs and troubleshooting tips for Asus-Merlin configured FlashRouters.

VIEW SUPPORTED ROUTER MODELS

Asus Logo
  • RT-BE88U (BE7200), RT-AC68U, RT-AC88U, RT-AC3100, RT-AC5300, RT-AC86U, RT-AX56U, RT-AX58U, RT-AX68U, RT-AX86U. RT-AX86U-PRO, RT-AX88U, RT-AX88U-PRO
  • GT-AC2900, GT-AX6000, GT-AX11000, GT-AXE11000,GT-AXE11000-PRO,  GT-AXE16000
  • ZenWiFi Pro XT12

Internet Setup

  • Internet and Wifi Setup on Asus Merlin Firmware
  • DNS Setup for Asus Merlin

WiFi Setup

  • Change WiFi name and password on Merlin
  • Separate your WiFi 2.4GHz and 5GHz Merlin networks

VPN Setup

  • Connecting to OpenVPN on Asus Merlin Firmware
  • PureVPN Merlin WireGuard Setup
  • Surfshark Merlin WireGuard Setup
  • ProtonVPN Merlin WireGuard Setup
  • IPVanish Merlin OpenVPN Setup
  • PrivateInternetAccess (PIA) Merlin OpenVPN Setup
  • NordVPN Merlin OpenVPN Setup
  • ExpressVPN Merlin OpenVPN Setup
  • CyberGhost Merlin OpenVPN Setup

AsusWRT-Merlin Features

  • VPN Director for Asus Merlin
  • VPN Killswitch for Asus Merlin

Search Support Articles

Troubleshooting

  • Device Settings That Can Interfere With Your Router VPN
  • How do I find my router local IP address?

More Ways to Get Help

GET IN TOUCH

BUY SUPPORT
BROWSE FAQs

Primary Sidebar

  • Troubleshooting
  • Router Access
  • Internet Connection Issues
  • WiFi Connectivity
  • General VPN Issues
  • TeamViewer Remote Support
  • DD-WRT Firmware
  • Facebook
  • Twitter
  • Instagram
  • Pinterest
  • YouTube

Footer