VPNInfobaseInstalling a VPN on your router covers the whole home network: every device on your home network gets VPN protection automatically, including devices that cannot run VPN apps natively. Here is how it works and which VPNs do it best.
Why install a VPN on your router
A router VPN protects every connected device automatically: smart TVs, PlayStation, Xbox, Nintendo Switch, Amazon Echo, smart home devices, and any guest device on your network. Devices that cannot install VPN apps natively are covered. You also only need one VPN connection rather than one per device, preserving your device limit allowance.
Which routers are compatible
Routers running DD-WRT, OpenWRT, or Tomato firmware support manual VPN configuration with most providers. ASUS routers running the native ASUSWRT firmware support built-in VPN client configuration. Netgear Nighthawk with DD-WRT is a popular choice. Some VPN providers sell pre-configured routers: ExpressVPN’s Aircove router is the most polished option, with a built-in ExpressVPN interface requiring no technical setup.
Best VPNs for routers
ExpressVPN offers the Aircove, a purpose-built WiFi 6 router with ExpressVPN built in. The app runs on the router itself with a simple web interface. No technical configuration required. This is the easiest whole-home VPN setup available. NordVPN supports all major router firmware types with detailed setup guides, and Meshnet allows you to create an encrypted network across all your devices. Surfshark provides router installation guides for DD-WRT, Tomato, and ASUS routers. Its unlimited device allowance means no connection limits on the router. PIA (Private Internet Access) has the most detailed router setup documentation and supports the widest range of router firmware.
Performance impact
A router CPU handles all VPN encryption for every device simultaneously, older or budget routers may struggle. Look for a router with a dual-core processor at 1GHz or faster. On a modern router, expect 10 to 20 percent speed overhead with WireGuard. OpenVPN on a router CPU can reduce speeds by 50 percent or more.
Limitations
You cannot easily switch servers on a per-device basis, the entire network uses one server location. Some VPN features like split tunneling behave differently on router setups. Consider running both a router VPN for whole-home coverage and a device VPN for devices where you need more control.
Setting up a VPN on your router
Setting up a VPN on your router covers every device on your home network at once. Every connected device, smart TV, console, laptop, phone, gets VPN protection automatically. Here is how to do it across three different approaches.
Method 1: ExpressVPN Aircove (easiest)
The Aircove is a WiFi 6 router with ExpressVPN built directly into the firmware. Plug it in. Connect to the Aircove network. Open the web interface at 192.168.1.1. Sign in with your ExpressVPN account. Choose a server location. Done. The entire network is now VPN-protected. No technical configuration. You can also set different device groups to use different VPN locations: your smart TV on a US server for Netflix while your laptop connects to a European server for local browsing.
Method 2: ASUS router with native VPN client
Most ASUS routers with AsusWRT firmware have a built-in VPN client. Log into the router admin panel at 192.168.1.1. Go to VPN, then VPN Client. Click Add profile. Select OpenVPN or WireGuard. Download the configuration file from your VPN provider’s website. Import the file. Click Connect. NordVPN, ExpressVPN, and Surfshark all provide ASUS-compatible configuration files.
Method 3: Manual DD-WRT setup
DD-WRT is open-source router firmware that adds VPN client support to many routers. Flash your compatible router with DD-WRT firmware (verify compatibility at dd-wrt.com). Go to Services, then VPN. Enable OpenVPN Client. Enter your VPN provider’s server details, available from your VPN account dashboard. Save and apply settings. This method gives the most control but requires technical comfort and can void a router warranty.
What to check first
Verify your router is DD-WRT, OpenWRT, or AsusWRT compatible. Check that your VPN subscription allows router connections. Most do but some have specific router licensing. Download configuration files from your VPN before starting setup. Keep the router’s default admin credentials changed to something secure.
ExpressVPN’s router pick comes from the facts in its ExpressVPN review: owner, audits and price by billed term.
Per-app routing is covered in split tunneling in a VPN.