FRITZ!Box
VPN
Protect every device at home, smart TVs and consoles too, with IPHush on your FRITZ!Box. Load the WireGuard file from your account, then choose one device or the whole network. Zero connection logs.
FRITZ!Box VPN at a glance
How to set up IPHush on FRITZ!Box
1 · Before you start
- Save a backup of the router’s settings
System → Backup → Save Settings
- Keep a way back in
Keep a cable to the router and its admin password at hand while you change it.
2 · Your file
- Make the file for your router
Sign in at iphush.com/app, open Devices, add a Router and choose FRITZ!Box. The app makes IPHush.conf for your router and shows this guide with your own values filled in.
3 · Add the tunnel
- Remove other WireGuard connections first
Warning: the FRITZ!Box connects to a VPN provider only when it has no other WireGuard connection. Adding IPHush means deleting your own existing WireGuard connections (Internet → Permit Access → VPN (WireGuard)). Write them down first. The box also needs a MyFRITZ! address.
- Add the connection
Internet → Permit Access → VPN (WireGuard) → Add Connection → Connect networks or establish special connections → Already set up at the remote end: Yes → Name: IPHush → Select file: IPHush.conf
This file carries IPv4 only: the FRITZ!Box sends only IPv4 through a WireGuard connection.
- See the handshake
Internet → Permit Access → VPN (WireGuard) shows IPHush as connected.
4 · Choose who uses it
One device
Only the devices you choose use IPHush; the others keep your normal connection.
- Selected devices
- IPv6: no leak
The whole network
Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.
- Keep the IPHush server on your normal connection
- Default route through IPHush · Internet → Permit Access → VPN (WireGuard) → IPHush → Edit → Send all IPv4 network traffic via the VPN connection
- DNS through IPHush · Internet → Account Information → DNS Server → Use other DNSv4 servers → 10.96.0.1
- IPv6: no leak · Internet → Account Information → IPv6 → Disable IPv6
- Kill switch
5 · Check it works
- The tunnel is up
Internet → Permit Access → VPN (WireGuard) shows IPHush as connected.
- Check from a device
On a device that should use IPHush, open https://whoami.iphush.com/ in a browser. It must show "iphush": true and an IPHush address. A device outside the option you chose shows false: that is expected.
FRITZ!Box VPN: questions
Which FRITZ!Box firmware works with IPHush?
FRITZ!OS 8.20 or newer (per AVM). Not supported: 7490, 6820 LTE, 6590, 6490.
Can the whole home go through IPHush on FRITZ!Box?
Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.
Is there a kill switch on FRITZ!Box?
FRITZ!OS has no kill switch for this connection: devices fall back to your normal connection while IPHush is down.
Which plan includes a router?
Family and Pro each include 1 router, and the router counts as one connection: every device behind it is protected. On Pro it leaves from your dedicated IP.
Has IPHush tested these steps on FRITZ!Box?
The steps follow the vendor’s current documentation; we have not yet run them on this router in our lab, and the guide in your account says so. Menu names can differ slightly between firmware versions.
More routers
Every device at home, one router
Family and Pro include a router and all 57 locations.