How do I install Hotspot Shield on a DD-WRT router?

Step-by-step guide

  1. Go to and click on Account. Sign in if you’re asked.

  2. Go to
    Select location and pick the virtual location that the router will use. Now click on “Download file.”  The configuration file (config.ovpn) will be downloaded to your computer. (Note where the file will be located, as you will need this later).
  3. In the separate browser window, sign in to the Control Panel of your router.  For most routers, you’ll want to enter in the address bar or refer to your router documentation for your router’s address.
    Note:  The user name and password for your router are different from the credentials you obtained from the Hotspot Shield account page.
  4. Navigate to the Setup tab and disable IPV6.
  5. Click Save and then click Apply Settings.
  6. Select the Services tab then the VPN tab


  7. Enable OpenVPN Client and make sure that OpenVPN Server/Daemon is disabled.


    OpenVPN Client settings menu will appear after it is enabled and you will perform the following operations:

  8. Remember the configuration file (config.ovpn)? Open it in a text editor. 
  9. Copy server name (after remote …… .us) from the config.ovpn file and paste it into the Server IP/Name field

  10. Enter the following information into the router:
    1. Enter 8041 into the Port field
    2. Tunnel Device = TUN
    3. Tunnel Protocol = UDP
    4. Encryption Cipher = AES-256 CBC
    5. Hash Algorithm = SHA256
    6. Enable User Pass Authentication
  11. Go back to the Router Account page ( and copy the username and password. 
  12. Then paste it into the username field in the router.
  13. Enable Advanced Options and make sure that:
    1. TLS Cipher = None;
    2. LZO Compression = No
    3. NAT = enabled;
    4. Firewall Protection = enabled;
    5. IP Address and Subnet Mask are blank;
    6. Tunnel MTU settings = 1500
    7. Tunnel UDP Fragment is blank;
  14. In the Additional Config field, copy/paste the following (make sure you change server_name into the name of your actual server):
    verify-x509-name server_name name
    resolv-retry infinite
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    ping 15
    ping-restart 0
    reneg-sec 0
    remote-cert-tls server

  15. Open configuration file, copy the section between <ca> </ca> tags (do not copy <ca> tags) and paste into CA Cert field.
  16. Copy the section between <cert> </cert> tags from config file into the Public Client Cert field
  17. Copy the section between <key> </key> tags from config file into the Private Client Key field
  18. Click Save and then Click Apply Settings
  19. To verify connection, go to Status -> OpenVPN tab and make sure that client is listed as Connected Success under State.Connected_Success.png

Note: To double-verify if your VPN connection is established, go to or and check if your IP address is different from your default IP that’s provided by your ISP

Disconnecting from Virtual Location

When you want to disconnect from the VPN service, you can log in to the Control Panel of your router and click the Deactivate button in the VPN Server list.




When you enable the VPN but for some reason VPN cannot connect to the server, there will be no Internet in your network. Some of the reasons the VPN might not be able to establish a successful connection are:

  • Your ISP does not allow VPN to be enabled (leased equipment, firewall, etc.)
  • Your Premium subscription has ended
  • Our server is temporarily unavailable for a particular virtual location

Please, contact our customer support team to help you troubleshoot connection issues.



Restore your previous settings

If you need to turn off the VPN, go back to the Control Panel on the router and select the Services tab and then the VPN tab. Disable the VPN client.