Installing Surfshark directly on your router protects every device in your home with a single VPN connection—including devices like Apple TV, smart speakers, and gaming consoles that don’t support VPN apps.

This guide walks you through the complete process of flashing a compatible router and configuring Surfshark.

Why Install Surfshark on Your Router?

When Surfshark runs on your router, every device that connects to your network is automatically protected. You never have to remember to turn on the VPN. This is especially valuable for:

• Smart home devices (smart TVs, speakers, cameras)
• Gaming consoles (PlayStation, Xbox, Nintendo Switch)
• Devices without native VPN app support
• Guest devices that can’t install VPN software
• Multiple households or small offices

Router Requirements for Surfshark

Not all routers support VPN client software. You need a router that can run custom firmware:

• Asus routers (AsusWRT firmware) — Most reliable, easy setup
• Netgear (R7000, R7000P, R8000) — Use DD-WRT
• Linksys (WRT3200ACM, WRT1900ACV) — Open-source firmware compatible
• GL.iNet routers — Pre-flashed with OpenVPN/WireGuard support

Alternatively, purchase a pre-flashed router from a provider like FlashRouters for plug-and-play setup.

Method 1: Asus Router (AsusWRT Native)

Step 1: Access Router Firmware

1. Connect to your router via WiFi or Ethernet
2. Open browser, go to router.asus.com or 192.168.1.1
3. Log in with your admin credentials

Step 2: Configure VPN Client

1. Navigate to VPN → VPN Client → Add Profile
2. Select OpenVPN tab
3. Name your connection (e.g., “Surfshark”)
4. Download Surfshark’s OpenVPN configuration file from their website
5. Upload the .ovpn file to the router
6. Enter your Surfshark username and password
7. Click OK and wait for connection

Step 3: Verify Connection

Check the VPN status indicator on the ASUS router interface. A green icon means your router is now connected to Surfshark.

Method 2: DD-WRT Flashed Router

Step 1: Flash Your Router with DD-WRT

1. Download DD-WRT firmware for your router model from dd-wrt.com
2. Access your router’s stock firmware admin panel
3. Navigate to Administration → Firmware Upgrade
4. Upload the DD-WRT .bin file
5. Wait 3–5 minutes for the flash to complete
6. Router will reboot with DD-WRT installed

Step 2: Configure Surfshark in DD-WRT

1. Go to 192.168.1.1 (DD-WRT default)
2. Set your admin password on first login
3. Navigate to Setup → VPN
4. Enable OpenVPN Client
5. Paste the Surfshark OpenVPN configuration
6. Enter your Surfshark credentials
7. Set Additional Config to: auth-user-pass /tmp/openvpncl/user.conf
8. Save and Apply, then connect

Testing Your VPN Router Connection

Once connected, verify that all devices on your network are protected:

1. Visit whatismyip.com on any device connected to your router
2. The displayed IP should match Surfshark’s server location
3. Test Netflix access to confirm geo-unblocking works

Troubleshooting Common Router VPN Issues

Router won’t accept VPN configuration

Ensure your .ovpn file is valid and matches the protocol (OpenVPN vs WireGuard). Download a fresh config file from Surfshark’s website.

Devices connect to router but not to internet

This usually means DNS is not routing correctly. In your router’s VPN settings, enable Use DNS local or set custom DNS to 1.1.1.1 and 8.8.8.8.

Speed is very slow

Router VPN throughput depends heavily on the router’s CPU. Older routers may bottleneck at 20–30 Mbps. Newer routers with 1GHz+ processors can handle 100+ Mbps through VPN.

Common Questions

Does Surfshark support WireGuard on routers?

Yes. Surfshark provides WireGuard configuration files. Some routers (like GL.iNet models) natively support WireGuard with Surfshark.

Can I use ExpressVPN on the same router alongside Surfshark?

No. Only one VPN can be active per router. You’ll need separate hardware for different VPN services.

What happens if the VPN disconnects on the router?

Configure the Kill Switch in your router’s VPN settings. This blocks all internet traffic when the VPN connection drops, preventing data leaks.