Private Internet Access (PIA) OpenVPN (Strong Encryption) DD-WRT Router Setup Guide

1. Getting started:

  • If you are following this guide it means you have no problems connecting to your FlashRouter network and accessing your FlashRouter settings. 
  • If you are having trouble accessing your router settings then you can always follow our guide on how to access your router settings or if needed how to reset your router to default DD-WRT firmware settings before proceeding with your PIA client connection setup. 
  • Log into the PIA website to make sure your account is active and your username and password are correct. If you are unable to login to their website then you have the incorrect information for the setup below.

2. Entering PIA settings:

In your DD-WRT FlashRouter settings click on the Services > VPN page. Leave all settings not mentioned below as their default setting.

OpenVPN Server/Daemon



Start Type


OpenVPN Client

Start OpenVPN Client


If you wish to disable your VPN connection simply set this to Disable at any time and click Apply Settings.

Server IP/Name

You can find a full list of PIA servers at this link. is the PrivateInternetAccess server for New York

If you wish to change PIA connection location, you will only need to change this field.



Tunnel Device


Tunnel Protocol


 Encryption cipher


Hash Algorithm


User Pass Authentication



Enter the username that you use to login to the PIA website.

Hint: Your username will always be in the format of p1234567.

Password Enter the password that you use to login to the PIA website.

Advanced Options


TLS Cipher


LZO Compression




Additional Config

 Copy & paste the following lines into the empty space:


Policy Based Routing

This field can be used for split VPN and Dual Gateway routing. Learn more here.

CA Cert

Copy and Paste all contents of the ca.rsa.4096 found at this link, starting and ending with:

Click Apply Settings.

Note: There is a lot of copy and paste required for this section. Be sure to open the ca.rsa.4096 file using Notepad++ on Windows or TextEdit on MAC OS.

*In order to use AES-128-CBC Encryption please follow this PIA DD-WRT OpenVPN Setup Guide

3. Verifying a successful VPN connection:

How can I tell if my VPN connection is active?

  1. You should now see a CONNECTED SUCCESS message on your Status > OpenVPN page.
  2. Visit the PIA Website and you should see a "Protected" message at the top of page. 
  3. Visit to verify your new IP address and virtual location. 
    Note: In some cases you may notice that the location is not showing the same location as the server you have input in your router settings; this is because geo tracking tools are often tricked by VPN connections. As long as you see an IP address that is not the same as your normal Internet IP address then you are indeed connected to PIA.

4. Backing up your settings:

  1. It is always a good idea to save a backup of your working VPN settings after completing this setup, so that in the result of a reset or faulty settings change you can load your working settings in a few simple clicks.
  2. Go to the Administration > Backup page and click the Backup button. A file called nvrambak.bin will be saved to your computer. We recommend renaming this file "FlashRouter Backup" for easy searching should you ever need it.

5. Troubleshooting:

  1. If you have any issues with your connection, you can review our PIA Troubleshooting page.


Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk