A VPN encrypts your internet traffic and routes it through a remote server. Most people run a VPN app on each device, but you can also run one on your router so it covers everything on the network at once. Both approaches are valid - here is how to decide.

Two different things called "router VPN"

  • VPN client: your router connects out to a commercial VPN provider, so all your devices' traffic is encrypted and appears to come from the VPN's server. This is the "privacy" use case.
  • VPN server: your router lets you securely connect into your home network from the outside (for remote access to files or devices). This is the "remote access" use case and is a safer alternative to opening ports.

Why run a VPN on the router

  • Covers every device, including ones that cannot run VPN apps - smart TVs, consoles, IoT gadgets.
  • Always on: no need to remember to connect on each device.
  • One configuration to manage instead of many.

The trade-offs

  • Speed: encryption is CPU-intensive, and most consumer routers cannot encrypt at full gigabit speeds - expect a noticeable drop unless you have a powerful router.
  • All-or-nothing: every device routes through the VPN, which can break streaming services, banking sites, or local-network features. Some routers support split tunneling to exempt certain devices.
  • Setup complexity: not every router supports VPN client mode; you may need specific firmware.

When to use which

Use a device app if you only need privacy on a laptop or phone, want full speed, or need to toggle the VPN on and off. Use a router VPN client if you want whole-home coverage and can tolerate the speed hit. Use a router VPN server if your goal is secure remote access to your home network - it is more secure than port forwarding because authentication happens before anything on your network is reachable.

Fit it into your security plan

A VPN is a privacy and remote-access tool, not a complete security strategy. Pair it with strong WiFi encryption (WPA3), a solid admin password, and the rest of the best home network security plan.