Quick answer
If your router supports WireGuard, use it: it is dramatically faster than OpenVPN on consumer hardware. If your current router has no VPN client support at all, do not replace your whole network for it. A small dedicated VPN router (or travel router) sitting behind your main one gives you a separate VPN network for the devices that need it, while everything else stays at full speed.
Why put the VPN on the router at all?
Three reasons hold up in practice. First, coverage: consoles, smart TVs, and streaming sticks either cannot run VPN apps or make them painful, and a router VPN covers them all invisibly. Second, device limits: your VPN subscription counts a router as one device no matter how many sit behind it. Third, consistency: the connection is always on, so nothing leaks because someone forgot to open an app.
The honest downside is speed. Every packet is encrypted by the router's CPU, which is usually far weaker than your phone's. A router that happily shifts 500 Mbps unencrypted can drop to 50 to 100 Mbps running OpenVPN. This single fact should drive your hardware and protocol choices.
Step 1: Find out what your router can do
- ISP-supplied routers (BT Smart Hub, Sky, Virgin Hub): almost none support VPN clients. You will need additional hardware, covered below.
- ASUS routers: the best mainstream option. Most current models support WireGuard and OpenVPN natively, with per-device rules built in.
- Routers running OpenWrt or similar firmware: full support, more setup effort.
- GL.iNet and similar dedicated VPN or travel routers: VPN-first by design, WireGuard out of the box, and the easiest route if your main router is locked down.
Step 2: Choose WireGuard over OpenVPN wherever possible
This is the biggest single decision for speed. WireGuard's lightweight cryptography suits low-power router CPUs; OpenVPN's overhead crushes them. On the same mid-range hardware it is common to see WireGuard run three to five times faster than OpenVPN. Only fall back to OpenVPN if your VPN provider or router firmware leaves you no choice.
Step 3: The setup itself
- Get the config from your VPN provider. In your provider's account area, generate a WireGuard configuration (or OpenVPN file) for the server location you want. UK servers for privacy, other regions for streaming access.
- Load it into the router. In the router's admin interface, find the VPN client section, import the config, and connect. On ASUS this is VPN › VPN Client; on GL.iNet it is a first-class menu item.
- Decide who goes through the tunnel. Good firmware lets you route specific devices through the VPN while the rest use the normal connection (policy routing or split tunnelling). Route your TV and console; leave game downloads, work calls and cloud backups on the direct line.
- Test for leaks. From a device behind the VPN, check your visible IP and run a DNS leak test. If DNS requests still show your ISP, set the router's DNS to the VPN provider's resolvers.
- Set a kill switch if offered. This stops routed devices falling back to the open connection when the tunnel drops.
The two-router setup most people should actually use
Rather than converting your main router, run a second, VPN-dedicated router behind it and give it its own WiFi network. Devices that need the VPN join that network; everything else stays on the main one at full speed. It is tidier than it sounds: no ISP router fights, no household-wide slowdowns, and you can power it off without touching anyone's Zoom call. A compact travel router does this job well and doubles as your hotel-WiFi armour when you are away.
Speed expectations, honestly
- Budget or travel router, WireGuard: roughly 80 to 300 Mbps depending on the model. Plenty for multiple 4K streams.
- Decent mainstream router, WireGuard: 200 to 600+ Mbps on current hardware.
- Anything, OpenVPN: often 30 to 100 Mbps. Assume the pessimistic end until you have measured.
If you are on full-fibre and expecting gigabit through a VPN tunnel, only high-end hardware with WireGuard gets close. For most households the sensible goal is "fast enough for every screen in the house", which mid-range kit comfortably delivers.
The two providers we rate for router setups
Surfshark's config generator makes the WireGuard route genuinely painless, and unlimited device connections mean the router plus every phone still counts within plan limits. NordVPN pairs the biggest server network with the most mature router setup guides if you prefer the established name.
Router VPN FAQ
Will it work with my ISP's router? Behind it, yes: the two-router setup works with any ISP connection. On it, almost never.
Does a router count as one device on my VPN plan? Yes, regardless of how many devices connect through it, which is why it pairs well with plans that have low device caps.
Can I still access UK services while connected to an overseas server? Only from devices you route outside the tunnel, which is exactly what split tunnelling is for.
Is this legal in the UK? Using a VPN is legal in the UK. What you do through it remains subject to the same laws as ever; see our UK VPN legality guide for the current picture.
Need the shortlist before the setup?
Router support quality varies a lot between VPN providers: config generators, simultaneous connections and WireGuard support are the things to check. Our best VPN UK shortlist (topped by NordVPN and Surfshark) flags router support for every provider we test, and the how we test page explains the speed methodology behind those numbers.