How to Set Up & Use Windscribe on an ASUS Router

Running a VPN at the router level routes and encrypts internet traffic for every device assigned to the VPN profile, including devices like smart TVs, game consoles, and IoT gear that may not support VPN apps individually. This guide covers how to configure Windscribe on an ASUS router running the stock ASUSWRT firmware using the OpenVPN protocol.

Applies to: ASUS routers running ASUSWRT firmware (common compatible models include the RT-AX88U, RT-AX86U, RT-AC68U, and RT-AC3200). Interface details may differ slightly between firmware versions. Routers running firmware version 3.0.0.4.388.xxxxx or later use VPN Fusion instead of the legacy VPN Client interface. Both paths are covered below.

Note on app features: Manual configs do not include app-only features like Firewall protection, Split Tunneling, and access to all Windscribe app protocols. If the VPN tunnel on the router drops, connected devices will not have the same fallback protection provided by the Windscribe app Firewall. Keep this in mind if uninterrupted protection is a requirement.

Before You Start

Confirm you have the following before proceeding:

• An ASUS router running ASUSWRT stock firmware with VPN client functionality (OpenVPN support required; confirm your model supports it under Specifications > VPN Support on the ASUS product page)
• A Windscribe Pro or Build-A-Plan subscription. Build-A-Plan accounts can generate configs only for the locations included in their plan. Pro accounts can generate configs for all available locations.
• A computer connected to your ASUS router, either by Ethernet or Wi-Fi

Check firmware support: Not all ASUS routers or firmware versions expose a VPN client interface. If the VPN menu is absent, update your router firmware via Administration > Firmware Upgrade before continuing.

Step 1: Download Your Windscribe OpenVPN Config File & Credentials

Both the config file and the VPN credentials are generated from the same place. Log in to your Windscribe account and open the OpenVPN Config Generator, available under your account settings for Pro and Build-A-Plan subscribers. Once there:

1. Select your preferred Location from the dropdown.
2. Set Protocol to UDP. UDP has lower latency and is the recommended choice for most setups. Switch to TCP only if UDP is blocked on your network.

   Protocol reference: In the Windscribe desktop app's Change Protocol menu, OpenVPN UDP is labeled UDP. The screenshot shows the available option; it is not selected. Screenshot: Windscribe.

3. Set Port to 443, unless you know a different port works better for your network.
4. If the Cipher option is shown, select AES-CBC for ASUSWRT compatibility. If you encounter import errors with another cipher, regenerate the config with AES-CBC selected.
5. Click Download Config to save the .ovpn file to your computer.
6. Click Get Credentials to retrieve your VPN username and password. Keep these available. These credentials are separate from your Windscribe account login email and password.

Note: Each .ovpn file is tied to one server location. To use multiple locations, repeat this step for each and save a separate config file per location.

Step 2: Log Into the ASUS Router Admin Panel

1. Open a web browser on a device connected to your ASUS router.
2. In the address bar, enter http://router.asus.com and press Enter. If that does not load, try your router's LAN IP address directly: http://192.168.50.1 or http://192.168.1.1. If neither works, check your device's default gateway or consult your router manual.
3. Enter the admin username and password you set during initial router setup. If you have forgotten these credentials, follow ASUS's factory reset guidance before continuing.
4. You will land on the ASUSWRT main dashboard.

   Figure 1: The ASUSWRT login screen. Enter the router admin username and password you set during initial setup. Screenshot: ASUS.

Step 3: Identify Your Firmware Path

Click VPN in the left Advanced Settings menu. What appears determines which path to follow:

• VPN Fusion tab: follow Path A below (firmware 388 and later).
• VPN Client tab: follow Path B below (firmware earlier than 388).

  Figure 2: The VPN menu under Advanced Settings. The tab shown here — VPN Fusion or VPN Client — determines whether you follow Path A or Path B. Screenshot: ASUS.

Path A: VPN Fusion (Firmware 388 & Later)

Step 4A: Create a New VPN Fusion Profile

1. Select the VPN Fusion tab.
2. Click the add icon (plus symbol) to create a new profile.
3. When prompted for VPN type, select OpenVPN. Windscribe does not support PPTP or L2TP. Do not select those options if they appear.

   Figure 3: Selecting OpenVPN as the VPN type when creating a new VPN Fusion profile. Do not select PPTP or L2TP. Screenshot: ASUS.

4. In the Connection name field, enter a label for this profile (for example, "Windscribe New York").
5. Click Import .ovpn file and select the .ovpn file downloaded in Step 1. Confirm the "Complete" indicator appears next to the field.
6. Enter your VPN Username and Password from the credentials you retrieved in Step 1.
7. Click Apply and Enable to save the profile and initiate the connection.

   Figure 4: The VPN Fusion profile form: connection name, the imported .ovpn file showing “Complete”, the VPN username and password, and Apply and Enable. The visible admin username is part of the ASUS example; enter the Windscribe VPN credentials generated in Step 1. Screenshot: ASUS.

Step 5A: Confirm the Connection & Check Device Routing

If Connected is displayed next to the profile, the VPN tunnel is active.

By default, VPN Fusion may not route all devices through the VPN. To apply the VPN connection to all devices on your network, open the profile settings and confirm that Apply to all devices is turned on. If you want to route only specific devices through Windscribe, turn Apply to all devices off and select individual devices using the Edit Device option.

Figure 5: A connected VPN Fusion profile, with the Apply to all devices toggle that controls which devices are routed through the tunnel. The visible admin username is part of the ASUS example; use your generated Windscribe VPN credentials. Screenshot: ASUS.

If VPN Fusion imports the profile but DNS or routing does not behave correctly, use the legacy VPN Client interface if your firmware exposes it, or contact Windscribe support with your ASUS model and firmware version.

Path B: VPN Client (Firmware Earlier Than 388)

Step 4B: Create a New VPN Client Profile

1. Select the VPN Client tab.
2. Click Add profile.
3. In the dialog that appears, select the OpenVPN tab. Windscribe does not support PPTP or L2TP. Do not select those tabs.

   Figure 6: The legacy VPN Client profile dialog showing the available protocol tabs. This ASUS example has PPTP selected; for Windscribe, select the OpenVPN tab and do not use PPTP or L2TP. Screenshot: ASUS.

4. In the Description field, enter a label for this profile (for example, "Windscribe New York").
5. Enter your VPN Username and Password from the credentials you retrieved in Step 1.
6. Click Choose File and select the .ovpn file downloaded in Step 1. Confirm the file name appears in the field.
7. Click Upload to submit the file. Wait for "Complete" to appear next to the Upload button.

   Figure 7: The OpenVPN profile filled in. Wait for the “Complete!” confirmation after Upload before clicking OK. Screenshot: ASUS.

8. Click OK to save the profile.

Step 5B: Activate the VPN Connection

1. In the VPN Client profile list, locate the profile you just created.
2. Click Activate on the right side of the profile row.
3. Wait a few seconds for the connection to establish. A checkmark next to the profile confirms a successful connection.

   Figure 8: The legacy VPN Client profile list. This ASUS example shows a PPTP profile; for Windscribe, activate the OpenVPN profile you created above. Screenshot: ASUS.

Note: The legacy VPN Client interface supports only one active VPN profile at a time. Activating a new profile automatically deactivates any currently active one.

Step 6: Verify the VPN Connection

1. On a device connected to your ASUS router, open a browser and go to ipleak.net or another IP checker.
2. Confirm the displayed IP address corresponds to the Windscribe server location you selected, not your actual location or ISP's assigned address.

To verify DNS is also routing through the tunnel, run a DNS leak test at a site such as ipleak.net or dnsleaktest.com. The DNS server results should align with your VPN server location, not your ISP or home location. If they do not, see the troubleshooting section below.

If a leak test reports a DNS server that does not exactly match your assigned VPN IP, that does not automatically mean there is a leak. Windscribe DNS servers often use internal 10.255.255.x addresses or region-specific resolver IPs that will not match your exit IP. To verify directly, run:

nslookup windscribe.com

If the Server or Address line in the output starts with 10.255.255., DNS is routing through Windscribe correctly.

Managing Multiple Server Locations

To add additional Windscribe server locations:

1. Return to the OpenVPN Config Generator in your Windscribe account, select a different location, confirm Cipher is set to AES-CBC if shown, and download a new .ovpn config file.
2. In the router admin panel, go to VPN > VPN Fusion (or VPN Client on older firmware) and create a new profile for each config file, repeating the relevant path above.
3. On VPN Fusion, multiple profiles can run concurrently, and each can be assigned to specific devices. On the legacy VPN Client interface, only one profile can be active at a time: deactivate the current one before activating another.

Profiles remain saved until manually deleted, so each config file only needs to be imported once.

Troubleshooting

The VPN profile fails to connect

• Confirm the username and password fields contain the credentials from the Get Credentials button on the Windscribe config page, not your Windscribe account login email and password.
• If the issue may be cipher-related, return to the OpenVPN Config Generator in your Windscribe account, select AES-CBC under Cipher, and download a fresh config file.
• Try a config file using TCP instead of UDP, or a different port.
• Confirm the .ovpn file is not zero bytes or corrupted. Re-download if necessary.
• Restart the router and attempt activation again.

The VPN disconnects and does not reconnect automatically

On some ASUS models and firmware versions, automatic reconnection can be unreliable: the router may not reconnect if the VPN server goes down. Return to the VPN settings in the admin panel and reactivate the profile manually.

DNS is not routing through the tunnel

If a DNS leak test shows your ISP or home location rather than your VPN server location, DNS queries may not be routing through the Windscribe tunnel. The .ovpn config file includes DNS push settings intended to handle this automatically, but some router DNS or DHCP configurations can override them. Check your router's WAN > DNS settings and LAN > DHCP settings for any hardcoded DNS entries. Removing those overrides allows the VPN config to manage DNS routing. If the issue persists, contact Windscribe support with your router model and current firmware version.

Speeds are significantly slower after connecting

• Select a Windscribe server location geographically closer to your physical location.
• If using TCP, switch to a UDP-based config for the same location.
• On VPN Fusion, confirm only the intended profiles are active.

Disconnecting Windscribe

VPN Fusion (firmware 388+):

1. Log in to the router admin panel.
2. Go to VPN > VPN Fusion.
3. Toggle off or disable the active profile.

Legacy VPN Client (pre-388 firmware):

1. Log in to the router admin panel.
2. Go to VPN > VPN Client.
3. Click Deactivate on the active profile.

Devices assigned to the VPN profile will resume using your regular ISP connection immediately after deactivation.

FAQ

Do I need a paid Windscribe account to set up VPN on an ASUS router?

Yes. The OpenVPN Config Generator in your Windscribe account requires a Pro or Build-A-Plan subscription. If you are on a Build-A-Plan, you can only generate configs for the locations you have purchased. Pro accounts can generate configs for all available locations.

Will the VPN automatically apply to every device on my network?

It depends on which firmware path your router uses. On the legacy VPN Client interface (pre-388 firmware), the active VPN tunnel is generally used for router traffic by default once a profile is activated. On VPN Fusion (firmware 388 and later), you must open the profile settings and confirm that Apply to all devices is turned on. If that setting is off, only devices explicitly assigned to the profile will use the VPN.

Can I use WireGuard instead of OpenVPN on my ASUS router?

WireGuard is supported on ASUS routers running firmware 3.0.0.4.388.xxxxx or later via VPN Fusion, but not on every model in that firmware range. Check your model against the ASUS supported device list at asus.click/vpnfusionmodel. If your model supports it, Windscribe provides WireGuard configuration options in your account for supported manual setups. A Pro or Build-A-Plan subscription is required.

Will connecting through the router VPN affect my internet speeds?

Some speed reduction is expected. OpenVPN encryption is processed by the router's CPU, and routers with lower-specification processors will show a more noticeable impact. Choosing a Windscribe server close to your physical location reduces latency. On supported models and firmware, WireGuard is generally faster than OpenVPN due to a lighter cryptographic workload.

Will R.O.B.E.R.T. work when I am connected through the router?

Yes. R.O.B.E.R.T. is a server-side DNS filtering tool that applies on Windscribe VPN connections when DNS routes through the tunnel, including router OpenVPN connections. Your R.O.B.E.R.T. settings from your Windscribe account will be active as long as DNS is routing correctly through the tunnel. A DNS leak test as described in Step 6 can confirm that DNS is not going to your ISP, but it does not verify every filtering edge case.

How do I check which firmware version my ASUS router is running?

Log in to the router admin panel and go to Administration > Firmware Upgrade. The version number currently installed on your router is displayed at the top of that page. If it reads 3.0.0.4.388.xxxxx or later, your router uses the VPN Fusion interface. If it reads an earlier version, follow Path B in this guide.

Can I use a Windscribe Static IP address with a router config?

Yes. If you have purchased a Static IP add-on through your Windscribe account, your Static IP location should be available in the location dropdown in the OpenVPN Config Generator. Select it, choose AES-CBC under Cipher if shown, download the config, and import it as a new router profile following the same steps in this guide.

Related Windscribe Resources

A manual router config covers the whole network but does not include the per-device features available in the Windscribe app, such as Firewall protection and Split Tunneling. For devices where you want those features, install the app directly alongside this router setup. Download it for Windows, Mac, Linux, iOS, and Android at windscribe.com/download.

If you need a Pro or Build-A-Plan subscription to complete this setup, plans start at $3 per month at windscribe.com/upgrade.

The following Windscribe guides are directly relevant to router setups:

• What Routers Are Supported by Windscribe? – Compatible router types and the protocols Windscribe supports for manual configs.
• How Can I Use My Static IP on a Router? – Applying a Windscribe Static IP add-on through a router config file.
• WireGuard Router Setup Guide (DD-WRT) – Setting up Windscribe with WireGuard on DD-WRT firmware.
• R.O.B.E.R.T. – Windscribe's server-side DNS filtering tool, which applies to all connected sessions including router configs.