VPN for routers: setup by make and firmware

A router with Ben's VPN covers home devices without an app of their own. This includes a games console or a TV that cannot run our app. On Keenetic, Netcraze, OpenWrt and MikroTik, our app runs on the router itself. Other routers connect over OpenVPN or PPTP through a client in their firmware. The settings for this are on your account page. Not every firmware includes such a client.

Routers that run the app

Other routers

Our app on 3 router platforms, OpenVPN or PPTP on others

The method depends on the router make and its firmware.

  • Keenetic and Netcraze: KeeneticOS or Netcraze firmware 5.0 and newer with the OPKG component. The model code must be on our list of 33 codes. Keenetic models outside the list connect over PPTP, as described below.
  • OpenWrt: official OpenWrt firmware with a root password. The supported releases and the memory requirement are on the OpenWrt page. Routing and proxy packages such as pbr, podkop or passwall conflict with the app. Remove them before you install it.
  • MikroTik: RouterOS 7 on an ARM64, ARMv7 or x86 router, CHR included. The app is installed in a RouterOS container. The minimum RouterOS builds and the memory requirement are on the MikroTik page.
  • Any other router: its menu needs a VPN client that imports an .ovpn file or connects over PPTP. The cards above link to step-by-step guides for specific makes.

Router app: an account with e-mail and an active subscription

The router app needs a Ben's VPN account. The account must have a linked e-mail and an active subscription. The router does not accept a guest account. Link an e-mail to the guest account first, in the app under Account → Link e-mail. On the router, you sign in with a one-time code from the account page on our website.

On Keenetic and Netcraze, the home network has no internet while the router app is not working. Traffic does not bypass the app during that time.

Other routers: OpenVPN or PPTP in 3 steps

  1. Get the router login

    On your account page, open Router → Other routers and click Show login and password. The page shows one login and password for every server in the list and for both protocols. Both start to work in about 2 minutes.

  2. Choose a server

    Each row of the server list shows a country and an IP address. A click on the address copies it. Servers with OpenVPN also have a Download .ov⁠pn button. Do not choose a server marked offline.

  3. Create the connection on the router

    OpenVPN is the first choice. It needs a router client that imports .ovpn files. Load the file, then enter the login and password separately. The .ovpn file has neither of them. PPTP is the option for a client without OpenVPN. It takes the server IP, the same login and password and 128-bit MPPE encryption. PPTP is older than OpenVPN, and its encryption is weak. Use it only on routers that offer nothing else.

Each login serves 1 router at a time. A second router with the same login disconnects the first one.

Some internet providers block PPTP and OpenVPN

Every .ovpn file has a second address that uses TCP. OpenVPN can connect over it when the first address fails. Another server from the list is the next option.

Two options remain when nothing connects or the router has no OpenVPN or PPTP client. The first is a router that runs our app. The second is Ben's VPN on the devices themselves: apps for computers and smartphones, plus Android TV and Apple TV. These apps do not use PPTP or OpenVPN. Their protocols are VLESS + REALITY, XHTTP, Hysteria2 and Shadowsocks. The app picks one automatically.

Plans with no device limit

The subscription includes router access over OpenVPN and PPTP. The same plan covers the apps on your phones, laptops and TV.

Bonus months come with purchases on this site. Refunds follow our refund policy. Send the request within 14 days of payment.

4 questions about routers

Support 24/7: the chat on this site, Telegram @bensvpn and [email protected].

My router came from my internet provider. Will it work?

It works when its menu has a client for .ovpn files or PPTP. Follow the steps for other routers above. Without such a client, the router cannot connect to Ben's VPN. Install the apps on your devices instead, or use a router that runs our app.

I have replaced my router. Do I need new settings?

Not for OpenVPN or PPTP. Enter the same login and password in the new router. The old router may still hold them if you sold it or gave it to someone. In that case, first click New password on your account page and confirm. The login stays the same. About 2 minutes later, the old password no longer works. After that, only the router with the new password can connect. A router with our app signs in with a new one-time code instead.

Which countries can a router connect to?

Over OpenVPN or PPTP, a router connects to any server in the list on your account page. For another country, load that server’s file or enter its IP on the router. The app on a Keenetic works with any location.

Can some devices at home skip the VPN?

It depends on the router. The Keenetic app serves the whole network or only the devices you choose. Sites on its exceptions list open directly, without the VPN. On a TP-Link, only devices on the client’s device list use the VPN. On newer ASUS firmware, a profile can be limited to selected devices.

Start for 3 days, then decide

The trial costs $0.50 and opens all 187 countries and every app. After it, the plan renews at $5 a month. You can cancel the renewal from your account at any time.

Mac App Store App Store Google Play