Reading time: 6 minutes
A per-device tool like NordVPN’s Meshnet is perfect for reaching one camera from your phone. But if you want every device at home protected and reachable through a single tunnel — including gear that can’t run a VPN app, like cameras and NVRs — the answer is to put the VPN on your home router. This guide shows the safe, homeowner-friendly way to do it. And no, you almost certainly don’t need to flash custom firmware. If you’re new to VPNs, start with what a VPN actually does. Still choosing a service? See the best VPN for remote camera access first, then come back here to set it up.Why put a VPN on your router
A VPN app protects one device. A router VPN protects the whole network behind it, which has three big advantages for a connected home. It covers every device at once — even cameras, NVRs, and smart-home gadgets that have no way to run a VPN app themselves. It’s always on, so there’s nothing to remember to switch on. And it gives you a secure way to reach your home network remotely without exposing anything to the public internet.Before you start
A quick checklist so nothing catches you off guard:- A router that either supports a VPN client or can be flashed with custom firmware.
- If you’ll flash firmware: at least 8 MB of flash memory and confirmation your exact model is supported.
- A VPN subscription.
- Admin access to your router (the login on the sticker or in your manual).
- Realistic expectations on speed — the router does the encryption, so an older router will be slower.
One important caution
Flashing custom firmware (DD-WRT, Tomato) can void your warranty, breach your ISP’s terms, or brick the router if you use the wrong file. If that makes you nervous, use a router with a built-in VPN client or a pre-configured router instead — both avoid flashing entirely.
Three ways to get a VPN on your router
Pick the path that matches your comfort level. Most homeowners should start at the top.The easy path: a router with a built-in VPN client
Many current Asus and GL.iNet routers can connect to a VPN with no firmware changes at all. The exact menus vary, but the flow is the same:- Log into your router’s admin page in a browser.
- Find the VPN client section (on Asus it’s VPN → VPN Fusion / VPN Client; on GL.iNet it’s VPN → OpenVPN or WireGuard client).
- From your VPN provider’s site, download the config file for the server you want (an
.ovpnor WireGuard file) and upload it, or sign in where prompted. - Enter your VPN service credentials and connect.
- Confirm the router shows the connection as active, then check that your public IP has changed.
The advanced path: flashing DD-WRT or Tomato
If your router doesn’t have a built-in client, custom firmware adds one and works on a very wide range of routers. This path has more risk, so go slowly:- Confirm your exact model and hardware revision is supported on the official DD-WRT Router Database before doing anything.
- Flash the firmware following the wiki’s steps for your model — using the wrong file is the main way routers get bricked.
- In the firmware, enable the OpenVPN or WireGuard client and enter your VPN’s server address and credentials.
- Save and apply, then verify the client shows “CONNECTED SUCCESS.”
Which VPN should you use?
Any reputable VPN with a router option will work here, so this guide doesn’t repeat the buying decision. We compare the top choices — and name our pick — in one place, so the recommendation stays consistent across the site.Haven’t chosen a VPN yet?
See our recommendation and full comparison in Best VPN for Remote Camera Access → — then come back here to set it up on your router.
A few watch-outs
Speed depends on your router’s processor, so a modern router keeps things smooth (WireGuard is generally faster than OpenVPN). If you’d rather not route everything through the VPN, most VPN-capable routers let you send only certain devices through the tunnel — for example, your cameras and NVR through the VPN, a game console straight to the internet. And as with any router, keep the firmware updated.Do you even need a router-level VPN?
If you mainly want to check a single camera now and then, a per-device tool like NordVPN’s Meshnet is simpler — that’s the approach in our guide on the best VPN for remote camera access. A router VPN is the better answer when you want everything at home protected and reachable at once, especially devices that can’t run a VPN app on their own.Frequently asked questions
Do I have to flash my router’s firmware? No. Many Asus and GL.iNet routers include a built-in VPN client, so you can connect without flashing anything. Will a router VPN slow my internet? Somewhat — the router handles the encryption, so it depends on its processor. A modern router with WireGuard keeps the slowdown small. Will it protect devices that can’t run a VPN app? Yes — that’s the main benefit. Every device behind the router, including cameras and NVRs, is covered automatically. Can I still reach my cameras remotely? Yes. A router VPN is one of the safest ways to reach your whole home network from away without exposing anything. Which VPN should I run on my router? Any reputable VPN with a router option works. For our pick and a full comparison, see the best VPN for remote camera access.About the author
This guide was written and reviewed by the GuardSourceHQ Editorial Team. We research and hands-on test home-security gear so we can recommend only what we would use in our own homes. GuardSourceHQ helps homeowners choose, install, and troubleshoot security cameras and home networks.
