OpenVPN & WireGuard · Whole-home VPN

Router VPNWhole-home Wi-Fi protection

Install VPN on your router once—Smart TVs, game consoles, phones, and IoT all use the encrypted tunnel. Download OpenVPN or WireGuard config from the KloxVPN portal.

Consoles: PS4/PS5, Xbox, Fire Stick

KloxVPN server
Your VPN router
TV · Console · Phone · IoT
Yearly from $2.83/mo

One plan, five devices

7-day money-back guarantee

First purchase

60+ countries

Router configs in portal

No logs

Privacy policy backed

What is a router VPN?

A router VPN (or VPN router) runs the encrypted tunnel on your Wi-Fi gateway instead of on each device. When your router connects to KloxVPN, every client on your home network—Smart TVs, PlayStation, Xbox, Fire Stick, phones, and smart home devices—sends traffic through the VPN without installing software on each one.

KloxVPN provides OpenVPN (.ovpn) and WireGuard (.conf) files from portal.klox.app. Import the file into your router’s VPN client, connect, and your whole LAN shares one encrypted exit. The router counts as one device toward your five-device subscription.

Need laptops and phones only? Use our Windows, Android, and iOS apps with four protocols. Read router VPN vs per-device apps if you are unsure which path fits.

Router VPN features

Whole-home encryption with configs built for real routers

Whole-home VPN

One router config protects every phone, TV, console, and laptop on your Wi-Fi.

Strong encryption

OpenVPN and WireGuard tunnels with industry-standard encryption on the path.

60+ countries

Download router configs for US, UK, Germany, Japan, and 60+ exit regions.

OpenVPN & WireGuard

Pick the protocol your router firmware supports—both available in the portal.

No-logs policy

We do not track or store your household browsing or connection logs.

Router VPN vs per-device apps

Choose whole-home tunnel or app-by-app control

FeatureRouter VPNKlox apps
CoverageEvery device on Wi-FiOnly devices with the app installed
Smart TV / consolesYes—no app neededOften impossible natively
Device slotsRouter uses 1 of 5 seatsEach connected app counts
ProtocolsOpenVPN & WireGuard configsWireGuard, OpenVPN, OpenConnect, Shadowsocks
Kill switchDepends on router firmwareBuilt into Klox apps
Best forWhole-home, TVs, consolesLaptops, phones, travel, split tunnel

Why use VPN on your router?

Devices that cannot install a VPN app still need protection

Smart TV & streaming sticks

Apple TV, Roku, Fire Stick, and smart TVs rarely support VPN apps—router VPN covers them.

PS5, Xbox & Nintendo

Tunnel game consoles without per-console VPN software.

Phones & tablets

Guests and kids’ devices get encryption automatically on your home Wi-Fi.

IoT & smart home

Cameras, speakers, and hubs ride the same encrypted path when the router is connected.

Common router VPN use cases

Where a VPN router pays off fastest

Living-room streaming

Route your TV and stick through a US or UK server where your use complies with platform terms.

Console gaming

Stable home IP masking and DDoS-minded routing—pair with our gaming VPN guides for latency tips.

Work-from-home LAN

Encrypt traffic from every laptop on the guest or main SSID without MDM on each machine.

Travel router

GL.iNet and similar travel routers can run WireGuard configs for hotel and café Wi-Fi.

Compatible VPN routers & firmware

Your router must support OpenVPN or WireGuard as a client—not only as a server. Many stock ISP gateways do not; you may need a router you own.

  • Asus (VPN Fusion / OpenVPN client)
  • Netgear (select Nighthawk models)
  • TP-Link (OpenVPN on supported firmware)
  • Linksys (OpenVPN)
  • GL.iNet travel routers
  • DD-WRT & OpenWrt builds
  • Ubiquiti (EdgeRouter with OpenVPN)

ISP leased modem? If your contract forbids firmware changes, do not flash custom VPN firmware. Use mobile and desktop apps instead.

How to set up router VPN

1

Subscribe & sign in

Get KloxVPN, then open portal.klox.app with your account.

2

Download config

Pick a country. Download OpenVPN (.ovpn) or WireGuard (.conf).

3

Import on router

Add the file in VPN client settings. Enable the tunnel.

4

Verify every device

Connect a phone or laptop and confirm IP matches your server.

WireGuard vs OpenVPN on routers

WireGuard is usually faster and lighter on router CPU—start there if your firmware supports it. OpenVPN is the fallback when WireGuard is unavailable or blocked on your network. Both configs list the same server locations in the portal. For protocol deep-dives, see VPN protocol comparison.

VPN server locations for routers

Download config for any listed region from the portal

LocationBest for
United StatesStreaming, gaming, low latency
United KingdomBBC iPlayer, UK services
GermanyEU privacy, streaming
NetherlandsEU exits, privacy-focused use
SingaporeAsia-Pacific, regional content
JapanAsia streaming, anime libraries

Verify your tunnel with our VPN tools.

Router VPN FAQ

VPN router setup questions answered

A router VPN runs the encrypted tunnel on your Wi-Fi gateway instead of on each phone or laptop. Every device connected to that router—TVs, consoles, phones, smart home gear—sends traffic through KloxVPN without installing an app on each one. You import an OpenVPN or WireGuard config from the KloxVPN portal into your router’s VPN client.

Protect your whole home with one setup

Yearly from $2.83/mo · 7-day money-back guarantee

Router uses one device slot · OpenVPN & WireGuard configs in portal

VPN for router guide · Gaming VPN · Download hub · Support