To set up ExpressVPN on your DD-WRT router, you first need to download the VPN's OpenVPN configuration files from your ExpressVPN account dashboard. Then, you'll use those files to create a connection from your DD-WRT router to a specific VPN server location.
Before we get started, know that ExpressVPN should work on any DD-WRT router as long as it has 8MB of flash. It's also recommended to use the latest DD-WRT firmware version available, letting you create more secure and more stable VPN connections.
If that sounds complicated, there's nothing to worry about; we'll show you how to set up and use ExpressVPN on your DD-WRT router one step at a time. Let's get to it!
How to Set Up ExpressVPN on DD-WRT Router
Setting up ExpressVPN on your DD-WRT router takes some time, but it's not an overly complex procedure. Here are the steps you need to take:
1. Sign up for ExpressVPN on its official website using any Web browser.
2. After subscribing, click "My Account" in the main menu of ExpressVPN's website. Access your dashboard using your email and password and provide a verification code if needed (from your inbox).
3. Select "Set Up Other Devices" when you access your ExpressVPN dashboard.
4. Click "Manual Configuration" on the left using the list of supported devices.
5. Select the "OpenVPN" tab on the right-hand side.Â
6. Make a note of your OpenVPN username and password. Also, pick a VPN server location just beneath and download its OVPN file to your computer.Â
7. Now, access your DD-WRT router's admin panel using the 192.168.0.1 IP address (type it in the Address bar of your Web browser and hit 'Enter').Â
8. You will be asked for your router’s username and password (both should be 'admin').
9. Select the "Services" tab once you open your router's admin, and then select "VPN."Â
10. Under "OpenVPN Client," enable the "Start OpenVPN Client" option.
11-A. At this moment, you should be looking at the OpenVPN configuration panel. Fill out the configuration fields as per the information below.Â
- Server IP/Name: Open the OVPN file you’ve downloaded to your computer via a text editor (such as Notepad on Windows or TextEdit on Mac). You’ll find your server name right next to the word "remote." It should look like this – "usa-newyork-serveraddress.com."Â
- Port: You’ll find your server’s port number right next to the server IP address.Â
- Tunnel Device: Select "TUN."
- Tunnel Protocol: Select "UDP."
- Encryption Cipher: Make sure to select "AES-256 CBC."
- Hash Algorithm: Make sure to select "SHA512."
- User Pass Authentication: Feel free to enable this option.Â
- Username: Copy your OpenVPN username from ExpressVPN’s online dashboard.Â
- Password: Copy your password from your online dashboard.Â
- Advanced Options: Enable this option.Â
- TLS Cipher: Select "None."
- L2O Compression: Pick "Adaptive."
- NAT: Enable this option.Â
- Tunnel UDP Fragment: Type in "1450" here.
- Tunnel USD MSS-Fix: Enable this option.Â
- nsCertType Verification: Enable this option.Â
11-B. At this moment, you should be looking at the OpenVPN configuration panel. Look for the "Additional Config" field and type in – auth-user-pass /tmp/auth.txt. Then, fill out all the fields in front of you, based on the following.Â
- Server IP/Name: Open the OVPN file in a text editor (right-click on its name and open it in Notepad for Windows or TextEdit for Mac). Your chosen server's address will be right after the word "remote." It should have the following form: usa-newyork-serveraddress.com.
- Port: This should be a 4-digit code that you find right next to the server’s address (as talked about just above, in the OVPN file – once you open it in a text editor).Â
- Tunnel Device: Go with "TUN."
- Tunnel Protocol: Go with "UDP."
- Encryption Cipher: Make sure to select "AES-256 CBC" here.Â
- Hash Algorithm: Go with "SHA512."
- User Pass Authentication: Select "Enable."
- Username: Copy your OpenVPN username from your online dashboard.Â
- Password: Copy your OpenVPN password from your online dashboard.Â
- Advanced Options: Enable this setting to reveal more options below.Â
- TLS Cipher: Pick "None."
- L2O Compression: Pick "Adaptive."
- NAT: Enable this option.Â
- Tunnel UDP Fragment: Go with "1450."
- Tunnel UDP MSS- Fix: Enable this option.Â
- nCertType Verification: Enable this option by checking the box.Â
12. Look for the "Additional Config" field, and type in what you see in the image below.Â
13. Make sure to have the OVPN file opened in the background in a text editor. Then, in the "TLS Auth Key" field, copy everything between <tls-auth> and </tls-auth>.
14. For the "CA Cert" field, copy everything between <ca> and </ca>.
15. For the "Public Client Cert," copy everything between <cert> and </cert>.
16. And for "Private Client Key," copy everything between <key> and </key>.
17. Click "Save" and then make sure to click "Apply Settings."
18. Click on "Save Startup" and go to Administration > Management > Reboot Router. Wait for your DD-WRT router to reboot and establish the newly created VPN connection.Â
To check if everything works correctly, make sure to navigate to Status > OpenVPN. In the "State" field, there should be a note that reads "Connected Success" – which means your Web connection is now encrypted and your data runs through ExpressVPN’s server.
Final Thoughts
We don't have a single doubt that ExpressVPN is the best option for your DD-WRT router, letting you protect your privacy and unblock new types of Web content. Still, you can use ExpressVPN on the go as well. That said, here's our guide on how to download, install, and use ExpressVPN on all its supported devices.
Lastly, we'll add that ExpressVPN is the best option but it's not the only option. Our guide to the best VPNs for DD-WRT routers will help you explore what else is out there.
That would be all on how to set up and use ExpressVPN on DD-WRT. If you have any questions, make sure to post a comment just below. Finally – thank you for reading!