OpenWrt is a relatively new open source firmware for routers that’s gaining popularity. With a wide range of add-ons, it is highly customizable and a popular choice among developers. And with an improved user interface, it’s becoming simpler to navigate and more suitable for less advanced users.
If you’re looking to set up a Virtual Private Network (VPN) on your OpenWrt router, then you’re making a smart move. An OpenWrt VPN will encrypt all the traffic flowing to and from any device connected to that router. It tunnels the traffic through an intermediary server of your choice, which enables you to access geo-restricted content by spoofing your location. What’s more, most VPN packages offer a limited number of simultaneous connections, but a router counts as one device. This means you can secure all of your home devices while using up only one of your available connections.
We get into a lot of detail on the best VPNs that support OpenWrt below, but if you don’t have the time to read the whole piece, here are our top selections:
- NordVPN Our top choice. An exceptionally fast provider with detailed setup instructions for OpenWrt. Strong on security. 30-day money-back guarantee.
- Surfshark Affordable all-rounder with good speeds and solid security features. Provides installation instructions for all kinds of routers.
- ExpressVPN Confirmed support for OpenWrt and knowledgeable support staff can assist with installation. Fast servers and a good reputation for privacy.
- PrivateVPN Can be configured with DD-WRT or Tomato firmware. Will need to contact support for installation guidance.
- VyprVPN OpenWrt setup instructions are on the website, but support for troubleshooting is limited. Compatible with DD-WRT and Tomato firmware.
- PureVPN Live support on the ready to give you bespoke step-by-step instructions for setting up OpenWrt.
While you might not find a ton of documentation on it, many VPN services are compatible with OpenWrt. That being said, those that do provide guides typically issue a disclaimer stating that it is not guaranteed to work. As such, one of the main things to look out for with an OpenWrt VPN is excellent support. Of course, there are plenty of other important factors, and we’ve based our list of the best VPNs for OpenWrt on the following criteria:
- Compatibility with routers
- Prompt and knowledgeable customer support
- Fast and reliable connections
- Strong encryption and no logs of personally identifiable information
- Large choice of server locations
The best VPNs for OpenWrt
Here is our list of the best VPNs for OpenWrt:
Money-back guarantee: 30 DAYS
NordVPN is our first choice for router setup. You can manually configure the VPN to a compatible router or you can opt to purchase a pre-configured router sold by third-party affiliate, FlashRouter. Although, the latter only makes NordVPN routers using the Tomato and DD-WRT firmware. For OpenWrt, you’ll have to manually configure.
NordVPN has posted a tutorial for configuring the VPN with a router running OpenWrt firmware (we’ve included it in our tutorial list below). And if you have any issues, the live chat team is just a click away to offer assistance.
NordVPN operates a huge network of more than 5,000 servers in 59 countries. Many are optimized for specific purposes, including P2P traffic and double VPN connections. It offers fast speeds and reliable service so you can carry out your everyday online activities without worrying about poor, slow connections. It can also provide access to plenty of streaming sites, including Netflix, BBC iPlayer, Hulu, HBO, and Amazon Prime Video.
This service uses “military-grade” 256-bit encryption with perfect forward secrecy. The OpenVPN protocol is recommended and used by default. A kill switch and DNS leak protection are built in. This means you can rest assured your information will never leave the encrypted tunnel. NordVPN keeps no logs at all. A newer feature is automatic wifi protection, which is a big bonus if you travel or are often on-the-go.
A plan enables you to connect to six devices simultaneously, which makes it ideal for families or those with a lot of devices. Desktop clients are available for Windows and MacOS and mobile apps can be downloaded for iOS and Android.
- Manual configuration available for OpenWrt with tutorial assistance
- Live chat can assist you with manual configurations
- Vast server network is very capable at unblocking most geo-restricted content
- The fastest speeds of any VPN we’ve tested
- Strong encryption and no logs make for top security and privacy
- Automatic server selection may not fit all use cases
BEST VPN FOR OpenWrt:NordVPN is our top pick. A great value option that works tirelessly with torrenting & P2P. Connects up to 6 devices simultaneously. Also works well with most popular streaming services and achieves consistently good speeds. Provides a risk-free 30-day money back guarantee.
Read our in-depth review of NordVPN.
Money-back guarantee: 30 DAYS
Surfshark is a speedy, low-cost option that works well with routers. The service’s website offers step-by-step tutorials for OpenWrt, ASUS-WRT, Mikrotik, Tomato, and DD-WRT routers, plus with over 3,000 servers to choose from, you shouldn’t have any issues getting a low-latency, high-speed connection.
So what else does this VPN have to offer? First, it excels at unblocking geo-restricted streaming platforms like Netflix. Second, it allows you to secure any number of devices at once, something very few major providers do.
Finally, it offers an impressive array of security features. These include 256-bit encryption, a kill switch, and protection against DNS and IPv6 leaks, not to mention a feature that turns the VPN on automatically whenever you use an unsecured wifi network. Crucially, Surfshark doesn’t keep any logs.
Surfshark offers iOS, Android, MacOS, Windows, and Linux apps.
- Works great on routers, well-documented setup procedures
- Fast speeds and unlimited bandwidth
- Connect as many devices as you like
- Great unblocking ability
- Impressive security offering
- Has the occasional slow server
BEST BUDGET VPN:Surfshark is a great low-cost VPN for OpenWrt. Boasts solid speeds, a wealth of security features, and a no-logs policy. Connect as many devices as you like. Provides a 30-day money-back guarantee.
Read the full Surfshark review.
Money-back guarantee: 30 DAYS
When it comes to setting up a router VPN, ExpressVPN is an excellent choice. It actually makes its own custom firmware which can be used with any compatible router. Alternatively, it offers pre-configured wifi routers flashed with its own firmware and configured to all servers. It can also be installed on other routers running compatible firmware and ExpressVPN has confirmed that OpenWrt is supported. There is no online tutorial available yet, but you can contact the reliable and knowledgeable live chat customer support team for help with setup.
With ExpressVPN, you get access to a wide network of servers that spans 94 countries. All servers are optimized for speed so you’ll have no issues browsing, streaming, downloading, or doing anything else online. When it comes to streaming, ExpressVPN is excellent at circumventing geo-restrictions. This is the case even for sites cracking down on VPN usage such as Netflix, BBC iPlayer, Amazon Prime Video, Hulu, and more.
On the security side, this VPN service uses military-grade encryption along with perfect forward secrecy and uses the OpenVPN protocol by default. It has a built-in kill switch and DNS leak protection to ensure your information never falls into the wrong hands. A no-logs policy means that there is no tracking of user activity. Only minimal connection logs are maintained and your IP address will never be stored.
A plan enables up to five simultaneous connections, so you can cover your home with a configured router and still be able to protect a couple of mobile devices, too. Apps are available for Android and iOS and there are clients for Windows, MacOS, and Linux, should you need to protect a desktop computer or laptop separately.
- Support OpenWrt, offer pre-configured routers, or installation on compatible routers
- Support staff are helpful, knowledgable and operate around the clock
- Fast, reliable speeds – streaming HD content or downloading/uploading large files
- High-grade encryption, security and privacy throughout
- Advanced configuration for power-users is a little limited
- Costs slightly more than some of its rivals
HIGHLY VERSATILE OPTION:ExpressVPN is reliable and easy to use. Has a vast server network that is optimized for high-speed connections. Hard to beat on privacy and security. Works with all major streaming services. There is a 30-day no-quibbles money-back guarantee included.
Read our full review of ExpressVPN.
Money-back guarantee: 30 DAYS
PrivateVPN is a newer, smaller provider, but is actually a great all-rounder. It works with OpenWrt, although you’ll probably need to contact customer support for help with setup. The support is all in-house and there’s no live chat, so you may not get a prompt response, but it will be knowledgeable. PrivateVPN can also be configured with routers running a variety of other firmware, including DD-WRT or Tomato.
This service performs extremely well when it comes to speed testing, which is welcome news to those wanting to stream or torrent. It has also proven to be good at unblocking geo-restricted content such as that provided by Netflix, Hulu, HBO, and Amazon Prime Video.
If you’re concerned about security and privacy, as its name suggests, PrivateVPN has you covered. It uses 128-bit or 256-bit encryption, depending on which protocol you choose (OpenVPN is recommended). This is alongside perfect forward secrecy, DNS leak protection, and a kill switch. The latter will kill the internet connection should the VPN connection drop.
Like NordVPN, PrivateVPN allows six simultaneous connections, which is one more than the industry standard of five. Apps are available for Windows, MacOS, iOS, and Android.
- Work with OpenWrt, in house support assistance will get you going
- Fast servers, also great for unblocking streaming sites securely and privately
- They log no personally identifiable information on their users
- Kill switch and automatic wifi protection activate when connection drops
- Doesn’t have 24/7 live chat
- Few servers to choose from
GREAT SPEEDS:. Allows up to 6 devices on the same account. Fast connections but could do with having more servers to chose from. 30-day money back guarantee.
See our full review of PrivateVPN.
Money-back guarantee: 30 DAYS
VyprVPN notes that it offers limited support for OpenWrt, but it does provide setup instructions on the website. If you need additional help, 24/7 live chat is available. VyprVPN is also compatible with DD-WRT and Tomato firmware. It isn’t the fastest service we’ve tested but it is reliable. It can enable access to plenty of streaming services and is a solid option for use in China.
VyprVPN provides excellent security in the form of 256-bit encryption and offers an adapted OpenVPN protocol called Chameleon. It owns its own servers, which is great for performance and security. This service does log your IP address and the VPN address you connect to, which is a strike for privacy-conscious users. VyprVPN says the info is only used for billing and troubleshooting and is deleted after 30 days.
A basic plan enables up to five simultaneous connections with apps available for Windows, MacOS, Android, and iOS.
- Limited support for OpenWrt, provides detailed instructions on their website
- Fast speeds are perfect for streaming
- Exceptional security and privacy features
- Cheaper providers higher on the list
- No pre-configured OpenWrt or DD-WRT routers available
HAS AN EASY SET UP:VyprVPN is user friendly. A solid choice. Stores no logs, offers great security and unblocks most streaming services. More pricey than some. 30-day money-back guarantee.
Find out more in our VyprVPN review.
Money-back guarantee: 31 DAYS
While PureVPN doesn’t have a tutorial for OpenWrt configuration posted online yet, it does have ready-to-go step-by-step instructions available from a live chat agent. You can also get pre-configured FlashRouter routers, although OpenWrt isn’t an option. It can be manually configured with other router firmwares, including Tomato and DD-WRT.
PureVPN is another so-so performer when it comes to speeds, but it’s inexpensive, offers a reliable connection, and can unblock plenty of streaming sites. Although some locations only have virtual servers, the network spans an impressive 140 countries, which means you can access content from across the globe.
Security is top-notch with 256-bit encryption, DNS leak protection, and a kill switch. Protocol options include OpenVPN and L2TP, among others. There has been some controversy over logs maintained by PureVPN, namely recording your IP address, so some privacy-conscious users tend to shy away.
A basic plan gives you the option to connect up to five devices at the same time. Apps can be downloaded for MacOS, Windows, iOS, and Android.
- Live chat agent can assist you to set up OpenWrt
- Top-notch security setup with solid encryption, DNS leak protection and kill switch
- Connect up to five devices simultaneously
- Transfer speeds can be slow with some servers
- Overcoming the stigma of earlier bad press surrounding privacy
- Occasional connection issues for VoIP calls during our tests
EASY TO USE:PureVPN has a great app. Offers strong security. Fast speeds but can have some connection issues. 7-day money back guarantee.
Read our review of PureVPN.
Can I use a free VPN with OpenWrt?
Setting up a VPN with any router could require some advanced support. This is not a strong point of free VPNs as they simply don’t have the resources to invest in providing prompt and knowledgeable customer service.
And this isn’t the only reason you should avoid free VPN services. They typically have a very limited server network and a lot of users. Aside from only having access to a few locations, you’ll also endure long wait times for servers and poor connections.
Plus, the privacy facet of free VPNs brings more bad news. These providers have been known to use shady business strategies such as monitoring user activity and selling profiles to advertisers. This definitely isn’t the type of service you want “protecting” every device in your household.
How to set up a VPN on an OpenWrt router
The exact setup will depend on your router model and the VPN you’re installing. We provide links to some individual VPN guides below, but the general steps are quite similar.
Here’s how to configure an OpenWrt router with a VPN:
- Select a suitable VPN provider and pay for your subscription. We recommend NordVPN.
- Ensure your router is flashed with OpenWrt firmware.
- Enable OpenVPN by changing the root password and installing the OpenVPN package.
- Download your VPN provider’s OpenVPN configuration files for the location you wish to use. Change the file extension from “ovpn” to “conf.”
- Create a new network interface and firewall zone, and add a forwarding rule.
- Configure DNS servers as per your provider’s instructions.
Setting up a VPN with OpenWrt
OpenWrt is an open-source firmware based on Linux. It has had a bit of a tumultuous last few years but is now going strong. After a brief split in 2016 where a side-project called LEDE was formed, the two projects officially merged early in 2018 to form the current OpenWrt.
One of the main attractions of this firmware is the range of add-ons available, making it highly customizable. In the past, its complicated interface made it more popular with developers than beginners. But the current version boasts an improved interface and is an increasingly solid option for less advanced users.
When it comes to configuring a VPN with OpenWrt, likely due to its relative newness, there isn’t a ton of literature out there to help you get set up. It would be impossible to provide a one-size-fits-all set of instructions here, but thankfully some providers have published guides to help you. Given the popularity of OpenWrt, it’s likely that others will follow.
Here are tutorials offered by some of the providers above, along with another that didn’t make the list but could be a good option:
Again, any other VPN providers on our list will be happy to help you via their customer support teams. But it’s also worth bearing in mind that most providers typically issue a disclaimer stating that the setup hasn’t been fully tested and isn’t guaranteed to work.
Note that flashing a router (replacing its firmware) could cause damage to a router. So experimenting with this setup should probably be left to more tech-savvy users.
VPNs that don’t work with OpenWrt
The VPN providers we’ve included in our list have confirmed that their services work with OpenWrt. They either offer online tutorials or customer support to help with setup. Other providers we contacted confirmed that they don’t currently support use with OpenWrt firmware:
However, it’s worth bearing in mind that due to the relative newness of the OpenWrt firmware, it’s understandable that it’s off the radar for many providers. As it grows in popularity and there is more demand for compatible VPNs, we could well see this list shrink as providers update their services.