How to Set Up a VPN on Your Router for Streaming (2026 Guide)

If you own a Roku or a smart TV and want to use a VPN on it, you've probably run into the same wall: there's no VPN app available for your device.

That's not a bug — it's just how those platforms work. Roku and Chromecast (non-Google TV) deliberately don't support VPN apps. Smart TVs from Samsung, LG, and Vizio have the same limitation. The VPN has to go on your router instead, so every device connected to your home network gets protected automatically.

This guide walks through exactly how to do that — from checking if your router is compatible to completing the actual setup with NordVPN and ExpressVPN.

---

Why You Need a Router VPN for Roku and Smart TVs

Most streaming devices — Fire TV, Apple TV, Android TV — support VPN apps directly. Roku and Chromecast (the older non-Google-TV version) do not.

The workaround is to install the VPN at the network level. When your router runs a VPN, every device that connects to it — your Roku, your Samsung TV, your phone, everything — gets routed through that VPN automatically. No app required on the streaming device itself.

There are a few practical benefits beyond just Roku compatibility:

• One subscription covers everything. Instead of running VPN apps on five separate devices, your router handles all of them with a single connection.
• Devices that can't run VPN apps are protected. Game consoles, smart TVs, IoT devices, and streaming sticks all benefit without any per-device setup.
• Always-on protection. No more remembering to toggle the VPN on before streaming.

If you specifically need a VPN for Roku, this is the only method that actually works. For a full breakdown of how to use a VPN with Chromecast specifically, see our guide to using a VPN with Chromecast and Google TV.

---

Step 1: Check If Your Router Supports a VPN Client

Not all routers can run a VPN client. Your ISP-provided gateway almost certainly cannot — Xfinity, Spectrum, and AT&T gateways don't support VPN client modes.

Routers that work out of the box:

• Asus routers with AsusWRT firmware — Most Asus routers (RT-AX88U, RT-AX86U, RT-AX58U) run AsusWRT, which has a built-in VPN client that supports OpenVPN and WireGuard. Both NordVPN and ExpressVPN publish Asus-specific setup guides. This is the easiest path for most people.
• Netgear Nighthawk (select models) — Some Nighthawk routers support OpenVPN client mode. Check your model's firmware release notes.
• DD-WRT and Tomato flashed routers — DD-WRT is open-source firmware you can install on many routers to add VPN client support. More technical, but opens up a wide range of compatible hardware.

Routers that don't work without modification:

• ISP-provided combo modem/routers (Xfinity xFi, Spectrum Wave 2 Gateway, AT&T BGW320)
• Basic consumer routers from older TP-Link, D-Link, or Linksys product lines

Budget alternative: A GL.iNet travel router (around $49) comes pre-configured to support VPN clients and is specifically designed for this use case. It's a small, portable device you can take to hotels — plug it in, connect your Roku to it, done. More on this below.

---

Step 2: Set Up NordVPN on an Asus Router (Most Common Method)

This is the most common router VPN setup — an Asus router running AsusWRT with NordVPN's OpenVPN configuration files. It takes about 15 minutes.

What you need:

• An Asus router running AsusWRT firmware
• An active NordVPN subscription
• Your NordVPN OpenVPN credentials (different from your NordVPN login — found in the NordVPN dashboard under "Manual setup")

Steps:

1. Get your NordVPN OpenVPN credentials. Log into your NordVPN account dashboard. Go to "Manual setup," select "OpenVPN," and copy your service credentials (a username and password specific to OpenVPN connections).

2. Download an OpenVPN config file. On the same NordVPN page, pick a server location (e.g., United States) and download the .ovpn config file for that server.

3. Open your Asus router admin panel. In a browser, go to 192.168.1.1 or router.asus.com. Log in with your router credentials.

4. Navigate to VPN Client settings. Go to Advanced Settings → VPN → VPN Client tab. Click "Add profile."

5. Select OpenVPN and upload the config file. Choose "OpenVPN" from the protocol list. Upload the .ovpn file you downloaded. Enter your NordVPN OpenVPN credentials (the service username and password, not your main login).

6. Activate the VPN. Click "Activate." The router will establish a connection to NordVPN's server. When active, you'll see a status indicator in the VPN Client tab.

To change servers or temporarily disable the VPN, return to this panel. You can also manage connections through the Asus Router app on iOS or Android without needing to visit the web UI.

For a visual walkthrough with current screenshots, NordVPN maintains an up-to-date setup guide for Asus routers on their support site. Our full review covers NordVPN's streaming performance in detail: NordVPN for streaming review.

---

Step 3 (Alternative): Use ExpressVPN's Router App

If you'd rather skip the manual configuration, ExpressVPN offers the best dedicated router experience of any major VPN provider.

How it works: ExpressVPN's "Aircove" router and their "Router App" install as custom firmware on supported routers. Once installed, you control the VPN entirely through a simple mobile interface — tap to turn VPN on or off, switch server locations, or assign different devices to different VPN "groups" (for example, your Roku to a US server and your laptop to a UK server simultaneously).

Supported hardware for the ExpressVPN Router App:

• Linksys WRT1200AC, WRT1900AC series
• Netgear R6300v2 and select Nighthawk models
• Asus RT-AC56R, RT-AC68U, RT-AC87U
• ExpressVPN's own Aircove router (purpose-built, plug-and-play)

ExpressVPN's router solution costs slightly more per month than NordVPN — typically $8.32/mo on the annual plan vs. $3.99/mo for NordVPN. The premium is worth it if you value the simpler interface and don't want to touch a config file. Full details in our ExpressVPN streaming review.

---

Alternatives to a Full Router VPN Setup

A router VPN is the most complete solution, but it's not the only one. Three alternatives worth knowing:

Smart DNS (fastest, least private): Smart DNS re-routes only the DNS lookups that determine your location, rather than routing your full connection through a VPN server. The result is faster speeds — no VPN overhead — but you lose encryption. It's purely a geo-unblocking tool. NordVPN includes SmartDNS with every subscription, so if you have NordVPN already, you can activate it without any additional setup. Good option if speed is the priority and privacy is not.

GL.iNet travel router ($49): This is a palm-sized router specifically designed for VPN use. You plug it into any network, connect your Roku or smart TV to it via Wi-Fi, and configure your VPN of choice (NordVPN, ExpressVPN, or others) directly on the device. It's the most portable solution — useful for hotel rooms or any situation where you can't modify the primary network. The GL.iNet AXT1800 (Slate AX) is the current recommended model.

Virtual router on a Windows PC: Windows allows you to share your PC's internet connection as a Wi-Fi hotspot, and if you run a VPN client on that PC, all devices connecting to the hotspot route through it. Not a permanent solution, but it works without buying any hardware. Set it up through Settings → Mobile Hotspot, enable the VPN on the PC first, then connect your streaming device to the hotspot.

---

Quick Comparison

| Method | Difficulty | Cost | Covers All Devices | Portable | |---|---|---|---|---| | Asus router + NordVPN (OpenVPN) | Moderate | ~$4/mo (VPN only) | Yes | No | | ExpressVPN Router App | Easy | ~$8/mo | Yes | No | | Smart DNS (NordVPN included) | Easy | Included with NordVPN | Yes | Yes | | GL.iNet travel router | Easy | $49 hardware + VPN | Yes | Yes | | Windows virtual router | Moderate | VPN cost only | Only when PC is on | No |

---

Bottom Line

For Roku and smart TV users, a router VPN is the only reliable method — and an Asus router running AsusWRT with NordVPN is the most widely supported combination. If you'd rather skip config files entirely, ExpressVPN's router app delivers a cleaner experience at a higher price point.

Before buying new hardware, check whether your current router is Asus or listed as DD-WRT compatible — you may already have what you need.

For more on choosing the right VPN for streaming, see our best VPN for streaming roundup where we compare speed, unblocking success, and price across six providers.