Set up SecureFox on your router (WireGuard)

With SecureFox on your router, every device on your network is protected, including TVs, game consoles and smart-home devices, without installing the app on each one.

1. Generate a config

1. Sign in at securefox.xyz/dashboard and open Router (WireGuard).
2. Enter a name (for example Home router) and choose a server location.
3. Click Generate & download. Your browser saves a .conf file.

2a. OpenWrt

1. Install WireGuard support: System → Software → Update lists, install luci-proto-wireguard, then reboot.
2. Go to Network → Interfaces → Add new interface. Name it securefox, choose WireGuard VPN as the protocol and click Create interface.
3. Click Load configuration… and select your .conf file. This fills in the keys, address and peer.
4. On the Firewall Settings tab, assign the interface to the wan zone.
5. On the Peers tab, edit the peer and tick Route Allowed IPs.
6. Click Save, then Save & Apply.

2b. AsusWRT-Merlin and ASUS routers

1. Open VPN → WireGuard Client. On stock ASUS firmware, open VPN → VPN Fusion → Add profile and choose WireGuard.
2. Click Import config (or Upload) and select your .conf file.
3. Set Enable WireGuard to Yes and click Apply.

2c. pfSense

pfSense can't import the file, so copy the values from it by hand. Open the .conf in a text editor and follow Netgate's guide WireGuard Client to a VPN Provider with these values:

• Tunnel → Private Key: PrivateKey from [Interface].
• Peer → Endpoint and Port: the two parts of Endpoint from [Peer].
• Peer → Public Key and Pre-shared Key: PublicKey and PresharedKey from [Peer].
• Peer → Allowed IPs: 0.0.0.0/0 and ::/0. Keep Alive: 25.
• Interface (tun_wg0) → IPv4 address: Address from [Interface], with MTU 1420.
• Gateway IP address: 10.66.0.1.

2d. Other routers and the WireGuard app

Most routers with WireGuard support, such as GL.iNet, UniFi, MikroTik (RouterOS 7) and FRITZ!Box, can import the .conf file directly. Look for WireGuard under the VPN client settings.

3. Check it works

On a device connected to the router, open securefox.xyz/tools/my-ip. It should show the SecureFox server's location. In the dashboard, the config shows Last seen once the router has connected.

Troubleshooting

• Not connected yet: check that the router's internet works and that outbound UDP to the port in Endpoint isn't blocked.
• Two routers keep disconnecting: each needs its own config. Generate a second one.
• Paused (quota): router configs use your account's data allowance. They resume when the allowance resets or after you upgrade.
• You can have up to 5 router configs. Delete one you no longer use to make room.