How to Install a VPN on Your Router (dd-wrt & Tomato Guide)

Want to protect every device in your home—from smart TVs to gaming consoles—without installing a VPN on each one individually? Configuring a VPN directly on your router is the ultimate solution. Whether you're using DD-WRT, Tomato, or another compatible firmware, our step-by-step guide will help you encrypt all internet traffic at the source. No more worrying about ISP tracking, geo-blocks, or unsecured IoT devices. Let’s dive in.

Why Install a VPN on Your Router?

Routing all your internet traffic through a VPN at the router level offers several key advantages:

• Whole-network protection: Covers devices that don’t support VPNs natively (e.g., smart home gadgets).
• No manual setups: Avoid installing apps on every phone, tablet, or streaming device.
• Bypass ISP throttling: Encrypting traffic prevents bandwidth discrimination.
• Access geo-restricted content: Stream global libraries on any device connected to your network.

Note: This requires a VPN with router support and a compatible router (or one flashed with DD-WRT/Tomato firmware). For a reliable option, check out ExpressVPN, which offers pre-configured router apps and 24/7 support.

Prerequisites

Before starting, ensure you have:

• A VPN subscription (we recommend NordVPN or Surfshark for router compatibility).
• A router that supports VPN client mode (or one flashed with DD-WRT/Tomato).
• Your VPN’s server details (address, protocol, username/password).
• A backup of your router’s current settings.

Installing a VPN on DD-WRT

DD-WRT is open-source firmware that adds VPN functionality to many routers. Follow these steps:

Step 1: Flash DD-WRT (If Needed)

If your router isn’t already running DD-WRT:

1. Download the correct firmware version for your router model from dd-wrt.com.
2. Log into your router’s admin panel (usually at 192.168.1.1).
3. Navigate to Administration > Firmware Update and upload the DD-WRT file.
4. Wait for the router to reboot (do not interrupt the process).

Step 2: Configure the VPN

1. Log into DD-WRT’s admin panel.
2. Go to Services > VPN and enable OpenVPN Client.
3. Enter your VPN’s server address, port, and credentials (provided by your VPN provider).
4. Upload the VPN’s configuration file (e.g., .ovpn) if required.
5. Save and apply settings. Restart the router if prompted.

Tip: For faster speeds, choose a server close to your location. ExpressVPN offers a built-in speed test tool to help.

Installing a VPN on Tomato

Tomato firmware (including variants like FreshTomato) is another popular choice for VPN setups.

Step 1: Flash Tomato

1. Download the correct Tomato build for your router from freshtomato.org.
2. Access your router’s admin panel and upload the Tomato firmware file.
3. Wait for the installation to complete (avoid power cycling).

Step 2: Set Up OpenVPN

1. Navigate to VPN Tunneling > OpenVPN Client in Tomato’s admin panel.
2. Paste your VPN’s configuration details (server IP, port, TLS key).
3. Enable Firewall > Automatic and Redirect Internet traffic to route all data through the VPN.
4. Save and restart the router.

Note: Some VPNs, like Private Internet Access, provide Tomato-specific setup guides.

Troubleshooting Common Issues

• Slow speeds: Switch to a less congested server or use WireGuard (if supported).
• Connection drops: Enable Keep-Alive in your VPN settings.
• DNS leaks: Force DNS through the VPN in your router’s settings.

Final Tips

A router-based VPN is a set-and-forget solution for household privacy, but remember:

• Not all routers can handle VPN encryption overhead—upgrade if yours struggles with speed.
• Regularly update your router’s firmware for security patches.
• For more privacy tips, explore our guides or compare top VPNs.

Ready to lock down your network? NordVPN offers a 30-day money-back guarantee to test router compatibility risk-free.