Reading time: 6 minutes
A per-device tool like NordVPN’s Meshnet is perfect for reaching one camera from your phone. But if you want every device at home protected and reachable through a single tunnel — including gear that can’t run a VPN app, like cameras and NVRs — the answer is to put the VPN on your home router. This guide shows the safe, homeowner-friendly way to do it. And no, you almost certainly don’t need to flash custom firmware.
If you’re new to VPNs, start with what a VPN actually does. Still choosing a service? See the best VPN for remote camera access first, then come back here to set it up.
Why put a VPN on your router
A VPN app protects one device. A router VPN protects the whole network behind it, which has three big advantages for a connected home. It covers every device at once — even cameras, NVRs, and smart-home gadgets that have no way to run a VPN app themselves. It’s always on, so there’s nothing to remember to switch on. And it gives you a secure way to reach your home network remotely without exposing anything to the public internet.
Before you start
A quick checklist so nothing catches you off guard:
- A router that either supports a VPN client or can be flashed with custom firmware.
- If you’ll flash firmware: at least 8 MB of flash memory and confirmation your exact model is supported.
- A VPN subscription.
- Admin access to your router (the login on the sticker or in your manual).
- Realistic expectations on speed — the router does the encryption, so an older router will be slower.
Three ways to get a VPN on your router
Pick the path that matches your comfort level. Most homeowners should start at the top.
The easy path: a router with a built-in VPN client
Many current Asus and GL.iNet routers can connect to a VPN with no firmware changes at all. The exact menus vary, but the flow is the same:
- Log into your router’s admin page in a browser.
- Find the VPN client section (on Asus it’s VPN → VPN Fusion / VPN Client; on GL.iNet it’s VPN → OpenVPN or WireGuard client).
- From your VPN provider’s site, download the config file for the server you want (an
.ovpnor WireGuard file) and upload it, or sign in where prompted. - Enter your VPN service credentials and connect.
- Confirm the router shows the connection as active, then check that your public IP has changed.
The advanced path: flashing DD-WRT or Tomato
If your router doesn’t have a built-in client, custom firmware adds one and works on a very wide range of routers. This path has more risk, so go slowly:
- Confirm your exact model and hardware revision is supported on the official DD-WRT Router Database before doing anything.
- Flash the firmware following the wiki’s steps for your model — using the wrong file is the main way routers get bricked.
- In the firmware, enable the OpenVPN or WireGuard client and enter your VPN’s server address and credentials.
- Save and apply, then verify the client shows “CONNECTED SUCCESS.”
Most major VPNs publish exact, per-router DD-WRT guides with the precise values to enter — follow theirs for your model rather than generic settings.
Which VPN should you use?
Any reputable VPN with a router option will work here, so this guide doesn’t repeat the buying decision. We compare the top choices — and name our pick — in one place, so the recommendation stays consistent across the site.
Haven’t chosen a VPN yet?
See our recommendation and full comparison in Best VPN for Remote Camera Access → — then come back here to set it up on your router.
A few watch-outs
Speed depends on your router’s processor, so a modern router keeps things smooth (WireGuard is generally faster than OpenVPN). If you’d rather not route everything through the VPN, most VPN-capable routers let you send only certain devices through the tunnel — for example, your cameras and NVR through the VPN, a game console straight to the internet. And as with any router, keep the firmware updated.
Do you even need a router-level VPN?
If you mainly want to check a single camera now and then, a per-device tool like NordVPN’s Meshnet is simpler — that’s the approach in our guide on the best VPN for remote camera access. A router VPN is the better answer when you want everything at home protected and reachable at once, especially devices that can’t run a VPN app on their own.
Frequently asked questions
Do I have to flash my router’s firmware?
No. Many Asus and GL.iNet routers include a built-in VPN client, so you can connect without flashing anything.
Will a router VPN slow my internet?
Somewhat — the router handles the encryption, so it depends on its processor. A modern router with WireGuard keeps the slowdown small.
Will it protect devices that can’t run a VPN app?
Yes — that’s the main benefit. Every device behind the router, including cameras and NVRs, is covered automatically.
Can I still reach my cameras remotely?
Yes. A router VPN is one of the safest ways to reach your whole home network from away without exposing anything.
Which VPN should I run on my router?
Any reputable VPN with a router option works. For our pick and a full comparison, see the best VPN for remote camera access.
About the author
This guide was written and reviewed by the GuardSourceHQ Editorial Team, drawing on more than three decades of hands-on construction and service experience, along with practical experience installing and troubleshooting modern home-security systems. We judge a system three ways: how it performs, how it’s likely to fail, and how hard it will be to service later. We trace problems to the real cause instead of swapping parts and buying the same problem twice. We’re upfront about trade-offs, the limits of what we’ve tested, and what we’d trust in our own homes.