How do I install Hotspot Shield on a router that uses DD-WRT?

Step-by-step guide

  1. Go to and click on Account.  Enter your credentials if prompted.

  2. Go to
    Select location and pick the virtual location that the router will use. Now click on “Download file”.  The configuration file (config.ovpn) will be downloaded to your computer.
  3. In the separate browser window, login to the Control Panel of your router from your browser.
    For most routers,  enter in the address bar.  
    Note:  The user name and password for your router are different from the credentials you obtained from the Hotspot Shield account page.
  4. Navigate to the Setup tab and disable IPV6.
  5. Click Save and then click Apply Settings.
  6. Select the Services tab then the VPN tab


  7. Enable OpenVPN Client and make sure that OpenVPN Server/Daemon is disabled.


    OpenVPN Client settings menu will appear after it is enabled and you will perform the following operations:

  8. Open the configuration file (config.ovpn) with a text editor that you downloaded from HSS Account page.
  9. Copy server name (after remote …… .us) from the config.ovpn file and paste it into the Server IP/Name field

  10. Enter the following information into the router:
    1. Enter 8041 into the Port field
    2. Tunnel Device = TUN
    3. Tunnel Protocol = UDP
    4. Encryption Cipher = AES-256 CBC
    5. Hash Algorithm = SHA256
    6. Enable User Pass Authentication and copy/paste 
  11. Go back to the Link router page and copy the username and password.  The easiest way is to click on the copy link.
  12. Then paste it into the username field in the router.
  13. Enable Advanced Options and make sure that:
    1. TLS Cipher = None;
    2. LZO Compression = No
    3. NAT = enabled;
    4. Firewall Protection = enabled;
    5. IP Address and Subnet Mask are blank;
    6. Tunnel MTU settings = 1500
    7. Tunnel UDP Fragment is blank;
  14. In the Additional Config field, copy/paste the following:
    verify-x509-name server_name name
    resolv-retry infinite
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    ping 15
    ping-restart 0
    reneg-sec 0
    remote-cert-tls server

  15. Open configuration file, copy the section between <ca> </ca> tags (do not copy <ca> tags) and paste into CA Cert field.
  16. Public Client Cert - copy the section between <cert> </cert> tags from config file into this field
  17. Private Client Key - copy the section between <key> </key> tags from config file into this field;
  18. Click Save and then Click Apply Settings
  19. To verify connection, go to Status -> OpenVPN tab and make sure that Client is Successfully Connected.Connected_Success.png



When you enabled the VPN but for some reason, VPN cannot connect to the server, there will be no Internet in your network. Some reasons when VPN might not be able to establish a successful connection are:

  • Your ISP does not allow VPN to be enabled Leased equipment, firewall, etc.)
  • Your Premium subscription has ended
  • Our server is unavailable for a particular virtual location

Restore your previous settings

If you need to turn off the VPN,  go back to the control panel on the router and select the Sevices tab and then the VPN tab. Disable the VPN client.


Please, contact our customer support team to help you troubleshoot connection issues.