One VPN on the router, every device protected - the dream is real, but free plans were not priced for it. Device counting, slow router chips and manual config files stand in the way. Mostly.
The router idea is genuinely attractive: put the VPN on the one device everything passes through, and the TV, the phone, the laptop and the smart plug are all covered without installing anything per device. Paid VPN users do this routinely. Free users run into three walls: how free plans count devices, how weak router processors are at encryption, and how manual the setup is. This page gives all three walls honestly - and then the one documented exception that makes the idea partly work.
A router running a VPN makes one tunnel connection that carries every device behind it. Whether that is allowed depends entirely on the plan's wording, and free plans are strict because that one tunnel can hide a household. Most free tiers are written as one device at a time and their apps assume a phone or a PC. Some providers do not offer router setup files on free accounts at all. So the first task is reading, not configuring: find the router and device terms on the provider's own plan page before touching your router settings.
Proton's own plan page states something unusual: the free plan's benefits include the ability to connect devices through your router - the router holds the single free connection, and the devices behind it share that tunnel. That makes a Proton Free router setup the one free combination that is both technically possible and within the published terms. Keep the rest of the free reality attached to it, though: the server country is still assigned automatically from the free list, streaming is still not supported, and at peak hours the whole house shares the free servers' crowding. It is a browsing-and-safety tunnel for the home, not a streaming machine.
VPN encryption is arithmetic, and home router chips are chosen for price, not arithmetic. Many routers that can run a VPN client at all will deliver only a fraction of your line speed through the tunnel - fine for browsing, miserable for a house of streaming and calls. This is hardware reality, not a free-plan conspiracy: the same router slows paid VPNs too. Test before committing: set it up, run speed tests at your busiest hour, and be ready to discover the router, not the plan, is the ceiling. A mid-range router with hardware encryption support is the usual fix - which is money, which ends the free part of the project.
There is no one-click app for your router. Router VPN setup means downloading configuration files from the provider, importing them into the router's VPN client page, entering credentials, and choosing which devices use the tunnel - assuming your router firmware even has a VPN client mode; many ISP-supplied routers do not. Every step is documented by the good providers, but it is technician-shaped work with technician-shaped failure modes, including the classic: tunnel up, nothing loads, because of a DNS setting. Budget an evening, keep the old settings backed up, and keep one device off the tunnel as your rescue path.
For most homes the honest answer is: install the free VPN app per device - it takes two minutes each, respects the plan's device rule, and fails one device at a time instead of house-wide. Choose the router route only if you are on the Proton Free exception, your router is known to handle VPN clients at usable speed, and your goal is whole-home private browsing rather than streaming. Everyone else dreaming of the router setup is really describing a paid plan plus a decent router - a fine destination, as long as nobody calls it free.
The free VPNs from this guide are shown and set up live in the video - watch it before you install anything.
▶️ Watch Full VideoYes - that is the genuine attraction. Devices that cannot run VPN apps still pass through the router tunnel. Just remember they also inherit its limits: the assigned server country, free-server speeds and no streaming support on the free plan.
Not a safe simple one. ISP routers often lock the feature out entirely. The usual route is your own router behind theirs, which is a purchase and a project - at which point compare honestly against simply using per-device apps or a paid plan.
Your provider sees an encrypted tunnel to the VPN server instead of your individual destinations - the same protection as the app. It still sees total volume and that a VPN is in use. That is the normal, honest scope of any VPN.