VPN setup · Router

TP-Link
VPN

Protect every device at home, smart TVs and consoles too, with IPHush on your TP-Link. Load the WireGuard file from your account, then choose one device or the whole network. Zero connection logs.

TP-Link VPN at a glance

Works withArcher routers with WireGuard in VPN ClientNeeds its WireGuard client
SetupImport a fileIPHush.conf from your account
TestedVendor stepsSteps follow the vendor’s documentation
Connection logsNoneNo sites, DNS queries, times or IP addresses
PlansFamily or ProEach includes 1 router; on Pro it leaves from your dedicated IP

How to set up IPHush on TP-Link

1 · Before you start

  1. Save a backup of the router’s settings

    Advanced → System → Backup & Restore → Backup

  2. Keep a way back in

    Keep a cable to the router and its admin password at hand while you change it.

2 · Your file

  1. Make the file for your router

    Sign in at iphush.com/app, open Devices, add a Router and choose TP-Link. The app makes IPHush.conf for your router and shows this guide with your own values filled in.

3 · Add the tunnel

  1. Add the server

    Advanced → VPN Client → Server List → Add → VPN Type: WireGuard → Description: IPHush → Import the configuration file → IPHush.conf → Save

    TP-Link’s import takes basic parameters only, so this file has no IPv6 address and no MTU line (TP-Link asks to remove them).

  2. Enable it

    Advanced → VPN Client → VPN Client: on → Server List → IPHush: enable

  3. See the handshake

    The Server List shows IPHush as connected.

4 · Choose who uses it

One device

Only the devices you choose use IPHush; the others keep your normal connection.

  1. Choose the devices
  2. IPv6: no leak

The whole network

Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.

  1. Keep the IPHush server on your normal connection
  2. Default route through IPHush · Advanced → VPN Client → VPN Access → Add every device
  3. DNS through IPHush · Advanced → Network → Internet → Advanced → DNS Address: Use the following DNS addresses → 10.96.0.1
  4. IPv6: no leak · Advanced → IPv6 → Internet: off
  5. Kill switch

5 · Check it works

  1. The tunnel is up

    The Server List shows IPHush as connected.

  2. Check from a device

    On a device that should use IPHush, open https://whoami.iphush.com/ in a browser. It must show "iphush": true and an IPHush address. A device outside the option you chose shows false: that is expected.

TP-Link VPN: questions

Which TP-Link firmware works with IPHush?

Archer routers with WireGuard in VPN Client.

Can the whole home go through IPHush on TP-Link?

Every device on the network uses IPHush. The order matters: the router must reach the IPHush server outside the tunnel before the default route moves into it.

Is there a kill switch on TP-Link?

TP-Link’s VPN Client has no kill switch option: devices fall back to your normal connection while IPHush is down.

Which plan includes a router?

Family and Pro each include 1 router, and the router counts as one connection: every device behind it is protected. On Pro it leaves from your dedicated IP.

Has IPHush tested these steps on TP-Link?

The steps follow the vendor’s current documentation; we have not yet run them on this router in our lab, and the guide in your account says so. Menu names can differ slightly between firmware versions.

More routers

Every device at home, one router

Family and Pro include a router and all 57 locations.

See plans