Return to Facebook   Twitter   Reddit   Instagram   Mastodon   ProtonMail

Why you should set up a VPN on your router

Posted on February 27th, 2020 by in How-to.

An illustration of a WiFi router running ProtonVPN.


A VPN is one of the best ways to protect your online data and prevent your Internet service provider from spying on your browsing history. However, a VPN only protects your Internet connection on the device it’s installed on — unless you set up the VPN on your router.

By running your VPN not on your smartphone or laptop but your router, you are shifting the VPN’s security coverage from a device to your entire network. All the devices connected to your WiFi network will have their traffic encrypted in the VPN tunnel.

If you’re a ProtonVPN user, you can set up ProtonVPN on your home local network. In this guide, we’ll explain some of the reasons you might consider setting up ProtonVPN on your router. 

There are a few ways to do this. You can do it on your existing router if it features a built-in VPN client (sometimes it’s possible to add VPN support by flashing a new firmware version), or you can purchase a standard router that is VPN-ready. 

Alternatively, for a quick and easy solution, you can purchase a specialized VPN router, such as the InvizBox 2, which is already configured for ProtonVPN. We discuss all 3 options in this article with setup guides for each.

4 reasons to set up a VPN on your router

1. No need to set up a VPN on each device

Once you set up a VPN on your router, you don’t need to bother installing a VPN app on your other devices. This saves you from having to download a different VPN app for each device.

2. Protect devices that don’t support VPNs

More and more devices, like smart speakers and smart TVs, are connecting to the Internet. Many of these smart devices do not support a VPN app. How would you even install a VPN on your smart microwave in the first place? This means that your Internet service provider can monitor all the activity of the smart devices in your home — unless you set up a VPN on your router.

If you have a VPN on your router, any device that is connected to it will have its traffic encrypted, including smart devices. This adds a much-needed layer of security to your smart devices. A VPN on your router could also help access blocked content if, for instance, your smart TV comes equipped with a YouTube app. By setting your location to another country, you could access shows and movies that would otherwise be geo-blocked in your location. 

3. Securing your data is even easier

While signing into a VPN app is not difficult, the security of your password is undermined if you share it with others. Also, if you want to protect your children, grandparents, or guests’ online data, asking them to use a VPN might be a bit much, depending on their level of tech-savviness.

By running a VPN on your router, using VPN protection is as easy as connecting to WiFi. 

4. A router protects your entire household with one device

A router counts as a single device when you are looking at how many consecutive connections you can have to the VPN at once. And, as previously mentioned, your router then provides a VPN-protected connection to your entire household, no matter how many devices you connect to it. Even if your whole family is browsing the Internet on their smartphones at the same time, if they are all connected to your VPN-equipped router, then it is the only device that counts towards your connection limit.

Some drawbacks to consider

Before you decide to set up a VPN on your router, there are some downsides you should consider. These include:

  • Depending on which country the VPN server you connect to is in, you could lose access to local services or services that block VPNs.
  • The encryption can slow down your bandwidth and browsing speed.
  • Not all routers support VPNs.
  • Your router will not protect all your local network connections, like Bluetooth.
  • Placing a VPN on your router will not protect your network if one of the devices connected to it is compromised.
  • You lose some flexibility since changing VPN servers can be quite tricky when you are connected via your router. (Although this is not necessarily always the case — more on this below.)
  • Most importantly, if you decide to buy a new router to handle your VPN connection, it is impossible to verify that that router does not have a back door. This is true of any hardware. Only purchase hardware from vendors or brands you trust.

How to install ProtonVPN on your router (new or existing)

If you’re looking at buying a new router, you can set up a ProtonVPN connection on a router yourself if it supports the OpenVPN protocol. (Generally, that means the router will say it comes with a “VPN client” package.) If you already have a router, you could try to “flash” it, or install DD-WRT onto it. 

DD-WRT is a third-party firmware that upgrades the security and utility of standard D-Link or Netgear router firmware.

However, both of these come with their drawbacks: installing a VPN manually on a router can be complex and time-consuming, and when you flash a router, there’s a small chance you will “brick” it, or render it inoperable. 

Setting up a VPN on your router can be a daunting task that could result in bricked hardware, so we only really recommend it for tech-savvy users. If you’re feeling brave, then here are our guides on setting up a ProtonVPN connection on routers yourself:

Pre-configured routers

If you find the reasons to use a VPN router persuasive, but fear trying to set up a VPN yourself, then you can buy one already preconfigured.

ProtonVPN compatible router from InvizBox

One option is to purchase a ProtonVPN compatible router from InvizBox. Created by InvizBox specifically for ProtonVPN, this open source router comes pre-configured out-of-the-box for ProtonVPN.

Simply plug it into your existing router/modem, sign in using your ProtonVPN account details, and connect as many devices as you like to it over WiFi. In addition to all the advantages discussed earlier in this article, the ProtonVPN compatible router from Invizbox is 100% open source and allows you to configure different VPN profiles (for example, a streaming profile and a local high-speed profile).

It includes ad and malware filtering, lets you set time limits for children’s internet access, and allows age-related blocking of websites.

Visit the InvizBox website to purchase or find out more about the ProtonVPN compatible router from InvizBox. We also have a detailed on How to set up the InvizBox 2 with your ProtonVPN account.

Pre-flashed router from Flashrouters

Flashrouters is a company that specializes in flashing routers with DD-WRT firmware. It handles the firmware modifications necessary to run a VPN on a router, and its Privacy App allows you to manage the VPN settings on your router via a simple graphic user interface. 

It also lets you switch which VPN server you are connected to with a single click. If you get a router from FlashRouters, it will also support VPN Kill Switch and Auto-Connect features.

Follow these steps on how to set up ProtonVPN on your router with the FlashRouters Privacy App.

You can contact the FlashRouters team support if you have any questions or issues at

Click here to purchase a VPN router from Flashrouters.

ProtonVPN is dedicated to defending everyone’s right to online privacy. By running a VPN on your router, you are bringing ProtonVPN protection to your entire home with a single device. If you have any questions about ProtonVPN router support, you can contact us.

Best Regards,
The ProtonVPN Team

Follow us on social media to stay up to date on the latest ProtonVPN news:

Twitter | Facebook | Reddit | Instagram

To get a free ProtonMail encrypted email account, visit:

Proton was founded by scientists who met at CERN and had the idea that an internet where privacy is the default is essential to preserving freedom. Our team of developers, engineers, and designers from all over the world is working to provide you with secure ways to be in control of your online data.


  1. Jason

    InvizBox2 is almost a good solution, but it does not currently come with SecureCore capabilities. That is one of the top reasons I choose ProtonVPN. Until InvizBox2 uses SecureCore, its not a good “VPN Router” solution.

  2. Andre

    Draytek configure, or tutorial? Is there one?

  3. Max

    Will support for S2S Ipsec be added some day? I’d like to setup my Cisco router to use ProtonVPN.

  4. Douglas Crawford

    Hi Max. I’m afraid this is unlikely. We use OpenVPN and IKEv2(/IPsec) because they are very secure. We are also evaluating support for the new WireGuard protocol.

  5. Sam Gearart

    I have just purchased and set up a Raspberry Pi 400 and it obviously has Raspian OS which is basically a clone of Debian distribution of Linux. Ive purchased the ProtoVPN and it works great on my Android phone but after following the instructons for installing the VPN on Linux…….nothing?!?!? I did see that somewhere it said that Protovpn does not work with Raspian at the moment. Is this still the case?

  6. Douglas Crawford

    Hi Sam. That is correct, but we are working on bringing our Linux client to more distros.

  7. AA

    Anyone have experience configuring a Cradlepoint router to use ProtonVPN? Cradlepoint can support: IPSecVPN, L2TP or GRE Tunnels, as well as OpenVPN. Looking for creative ways (& instructions) to configure the Router to be the one connecting to a ProtonVPN. Any ideas or suggestions?

  8. Douglas Crawford

    Hi AA. If Cadlepoint supports OpenVPN then it can be configured to use ProtonVPN.

  9. critzz

    please send me how to setup protonvpn on Tenda AC6.. thank you

  10. Douglas Crawford

    Hi critzz. I don’t think the Tenda AC6 router supports either OpenVPN or IKEv2, meaning that its not compatible with our service.

  11. dres

    InvizBox doesn’t seem to support using protonvpn or any vpn provider other than their bundled one so it’s weird to see it recommended here.

  12. xmen

    please send me a manual for fritzbox router. many thanks

  13. Andreas

    do you have any plans to offer wireguard protocol as well in future ? are there any plans yet ?



  14. Richie Koch

    Hello Andreas,
    This is a pretty popular question, for good reason. WireGuard is a promising new VPN protocol. However, at the moment, WireGuard is fairly easy to block. All a network administrator has to do is block the UDP transport protocol and WireGuard is stopped. (You can learn more about transport protocols here: We are currently focusing on implementing better TCP protocols because they are more resistant against censorship. However, WireGuard is in our future plans. We will implement it. We just do not yet have a date.

  15. Shantanoo Chaudhary

    Hey Ben! Thanks for the detailed explanation.
    1. I understand only the ‘surfing’ on Tor will be secure without a VPN. My question was whether ‘surfing’ on Tor using a VPN is still tangibly safer than surfing on any other browser. Will it be much much slower?

    2. I’ve signed up for the Plus Trial and every time I checked my IP address on the IP address website from devices connected through the VPN hotspot I see my local ISP showing up on the IP address. When I check my IP address on those sites using my phone which runs ProtonVPN (Plus Trial) it shows the ProtonVPN IP address of a different country. Do you think I’m doing something wrong or is there a bug in the Android app? Do let me know what you think. This problem exists on all phones, tables and Windows laptops connected to my Android phone’s hotspot that’s running ProtonVPN Plus Trial version. Thanks.

  16. Ben Wolford

    Hi Shantanoo, sorry for the delay getting back to you. To answer your first question, there’s really no security or privacy benefit to connect to Tor using a VPN. We offer this feature as a convenience only. But yes, browsing the web via the Tor browser is considered quite secure. It will be slower, but if you’re loading simple pages you probably won’t notice. Regarding your second question, it seems like there’s some variable affecting the IP information being displayed. I suggest reaching out to our support team and describing your situation.

  17. Brian Donnahoo

    Do you have VPN for the NetGear Nighthawk cable modem router

  18. Ben Wolford

    Hey Brian! For questions about specific router models, please get in touch with our support team: Thanks!

  19. Azhar Ahmad

    Hi, I’m trying to setup VPN on my router. I’m using TP-Link Archer VR2800. It supports OpenVPN, PPTP VPN and IPsec VPN. Can you help me out please? Ultimately I want to connect ProtonVPN app on my iphone to my home VPN router to access my lighting control devices. Can it be done? Thanks

  20. Ben Wolford

    Hey Azhar, thanks for getting in touch. Could you please contact our support team? They should be able to help you better.

  21. Michel

    Please post a guide on how to set up ProtonVPN on OpenWRT routers. Thank you!

  22. Ben Wolford

    Hi Michel, for questions about specific router models, please get in touch with our support team: Thanks!

  23. Shantanoo Chaudhary

    Dear ProtonVPN: I finally graduated college and my parents insist that I practice online hygiene by using e VPN on my Android phone at all times. They’ve been long time users of your product and I’ll most likely want to sign up with you guys too because I hear good things about you plus I can find in-house tech support if I have a problem. (Like, literally in-house. Get it?)

    I do have a few questions though, would appreciate some inputs from you.

    1. I’m making it a habit to use Tor Browser for my surfing needs. Will that be redundant if I’m using your service? Or will that be an overhead in terms of speed? Or will that somehow improve my security? I might sign up for Core so please do account for that too in your inputs. Thanks.

    2. I use my Android phone as a hotspot for my older iPhone, iPad and Windows laptop once or maybe twice a month. Will that traffic also get routed through the VPN automatically? Should I get additional accounts for those devices or would the one account on my Android phone be legally acceptable?

    I want to thank you in advance for your help. And for the wonderful work you’re doing. Plus, all the reviews on the Internet claim you’re providing all security related services essential to a secure VPN absolutely free without any ads and without any data limits. I think it’s a noble gesture from your end and really chimes with your mission statement. Please tell the entire team how much that is valued by regular people like me. Thanks.

  24. Ben Wolford

    Hi Shantanoo! Thanks for the great questions, and welcome to the Proton community! To answer your questions:

    1. Tor browser is great, but it will only protect your activity within the browser. Any connections outside the browser (e.g. desktop apps) will still be visible to your ISP.

    2. If you connect to ProtonVPN on your Android, your entire connection will be encrypted between your Android and our servers. So this is a great solution. And it also means you would not need additional accounts/connection allowance for your other devices because they are protected via your Android.

    I hope that’s helpful! Please don’t hesitate to reach out if you have other questions. And send our regards to your parents!

  25. Smoufo

    It would be really great if you could provide a small how-to guide on how to configure an IPSec connection to Protonvpn from the main Draytek Vigor router (e.g. Vigor 2860, 2960)!

  26. Ben Wolford

    Hi! For questions about specific models, please reach out to our support team for assistance:

  27. Sean Yip

    Any detailed guide for TP-link router? Thanks

  28. Ben Wolford

    Hi Sean! Please contact our support team for assistance on specific router models:

  29. Alexander

    @Alejandro : regarding your Draytek question the following.

    With my Draytek 2925AC i’ve been able to configure ProtonVPN with IKEv2 / IPsec EAP. It’s running four stable connections with ProtonVPN in failover now. I had to find the advanced settings myself and can tell you it works great with IKE phase 1 : AES256_SHA256_G14 – IKE phase 2 : AES256_SHA256. According to me you could give it a try with the free version and decide later to upgrade as i did (Plus).

  30. Peter

    Looking at the Invizbox it appears to come as bundle of the device plus monthly fee for VPN. Are there any plans for cooperation with ProtonVPN so that I wouldn’t have to pay additional unused VPN service?

  31. Alejandro

    Hello, interested in using ProtonVPN against my Draytek 2920 SOHO router. Is it possible?. Thanks

  32. Roxana Zega

    Hi Alejandro,

    Currently, we do not have a dedicated guide for this router model since it has not officially been tested yet.

    We’re sorry for any inconvenience this may cause.

  33. Jeff Mysliwiec

    I am so grateful for your attempts to keep privacy and security for the internet users. I have been having difficulty getting my VPN Plus to work and all attempts to get assistance don’t reach you.

  34. CW

    Which set of instructions would be the most helpful for setting up on a T-Mobile LTE gateway?

  35. Rox

    Hi there. =)
    I bought a huwei ws5200 specifically becourse the box said it has VPN passthrough.
    But now i think it’s PPTP / L2TP is only for connecting to a company vpn.
    Is far as I can se, you dont support PPTP / L2TP.
    Is there anyway to use my existing router for protonvpn?? Or should i buy a new one?
    Thank you very very much.




  37. theironcurtains

    Are you guys working on a partnership with Invizbox?

  38. frdonn

    Good post and usefull! However, it is not applicable for those main use cases :
    1) Gaming : If there are PC/console for gaming, VPN add latency that definitly decrease user experience.
    2) Stream : router setup only one VPN server, so if you use devices (tablette, AppleTV, Chromecast, smartphone) to watch Netflix, Amazon Prime video, Disney plus… when the IP of VPN is blacklisted by the SVOD provider you have to re configure the router in order to change to another Plus server.
    Maybe you have solution for that ?

  39. Erick

    Hi I’m planning to start my VPN account and also upgrade my router in the country I’m I have the access to the following routers below the models the VPN characteristics.
    TP-LINK Archer C60 ( I checked the user guide and it has a section regarding OpenVPN configuration)
    VPN Pass-Through PPTP
    And the
    VPN Pass-Through PPTP, L2TP, IPSec (ESP Head)
    Could you help me wich one can be configured with ProtonVPN


  40. gigi

    seems to me that in switzerland any internet provider (swisscom, upc, etc) does only work with its customised router/box that does everything (internet, tv, phone).
    so you do not have anymore the freedom of buying/choosing your own router.
    am I right?

  41. Milkman

    You can just use BraxRouter from Rob Braxman Tech (watch on youtube) plus a Raspberry Pi and you got yourself a cheap VPN router to half the prize.

  42. Guilherme

    Olá, tenho um router DIR-879. Antes de contratar o serviço ProtonVPN, gostaria de saber qual o procedimento passo a passo para instalar a VPN neste modelo de roteador.

  43. Roxana Zega

    Olá Guilherme,

    Infelizmente, este router não é compatível e não é possível criar uma ligação ProtonVPN com ele.


  44. Hizo

    OpenWRT + ProtonVPN = Love! :)

  45. Luc Gravelle

    Hello, I’m interested In running a VPN on my router. I’m a basic monthly paid version user of NVPN. Please, tell me how should I proceed and is it include whit my subscriptions?

  46. Roxana Zega

    Hi Luc,

    We’re very happy to hear you’re interested in ProtonVPN. You can check all our plans here:

    Thank you!

  47. Claude

    By the way, another practice everybody should have in mind for not ruining their privacy keeping efforts is not mixing “anonymous” traffic, if such a thing is possible, with autenticated traffic. TOR instructions advice not to use the same connection for private browsing and “logged in” browsing; this is, not doing normal “anonymous” browsing and then go using our mail client or webmail, social networks, chat applications, system updates, etc, because Google Analitics, Facebook and so many other “spies” will know that our Facebook account where we have our name, photo, familiars, friends, coworkers, etc, etc, etc, was visited by the same IP that visited some political debate forum; or Google will know that our Youtube account is used by the same person that visitied a lot of sites related to car selling, whatever, put the example that you prefer.

    So, since Protonmail already knows my real IP, and lets not tallk about Gmail, Facebook, Instagram, etc, that even know my phone number, where I live how I look like, etc, etc, etc, using the VPN for those apps and services would be “whistle blowing” ourselves; would be like saying: «Eh, that guy who was disguised and nobody could recognize him, that guy was me». So, we should let those apps and services that already know us, to keep knowing that we use them, but not letting them know anything else, and this would involve not using out real IP for anything else. But how can one exclude the traffic of individual applications of being redirected to ProtonVPN, tell that my email client or my chat app won’t use the VPN but the normal connection?
    I haven’t been able to find info about this, I know one can block IPs, but have no idea of what IPs uses Snapchat or Gmail’s app, and I guess they probably change them from time to time. So, how can one tunnel applications and not just IPs? Im using ProtonVPN with the Linux command line app (AFAIK there isnt any other for this OS so far).

    Thank you.

  48. Jacek

    there’s an issue with your DNS servers, putting only “” makes me offline, what do you think about clooudflare ?

  49. Artem

    Please take care of Ubiquiti device users. I’d like to conveniently and quickly configure VPN!

Comments are closed.

Secure your internet

Get ProtonVPN

For customer support inquiries, please submit the following form for the fastest response:
Support Form

For all other inquiries:

Version: OpenPGP.js v4.10.10


You can also Tweet to us: