How to Install NordVPN on OpenWrt

NordVPN's WireGuard-based protocol, NordLynx, works on OpenWrt, but NordVPN does not offer ready-made WireGuard files. You obtain your private key and a server's details from NordVPN's API, then configure WireGuard as usual. NordVPN can change these endpoints at any time; if a step fails, check NordVPN's current manual-setup documentation.

Option A: WireGuard (NordLynx)

1. Get an access token

In your Nord Account, open the NordVPN service, find Manual setup and generate an access token.

2. Get your private key

On a computer (or the router, after installing curl and jq):

curl -s -u token:YOUR_ACCESS_TOKEN \
  https://api.nordvpn.com/v1/users/services/credentials | jq -r .nordlynx_private_key

3. Pick a server

This asks NordVPN for a recommended WireGuard server and prints its hostname, IP address and public key:

curl -s "https://api.nordvpn.com/v1/servers/recommendations?filters\[servers_technologies\]\[identifier\]=wireguard_udp&limit=1" \
  | jq -r '.[] | .hostname, .station, (.technologies[] | select(.identifier=="wireguard_udp") | .metadata[] | select(.name=="public_key") | .value)'

4. Configure OpenWrt

Follow the WireGuard client guide with these values:

Option B: OpenVPN

OpenVPN is slower on routers (see WireGuard vs OpenVPN) but uses NordVPN's documented configuration files:

1. In Nord Account → Manual setup, note your service credentials (a username and password different from your login).
2. Download an .ovpn file for a server from NordVPN's server list.
3. Install OpenVPN support: luci-app-openvpn and openvpn-openssl (with apk add on 25.12+, opkg install on older releases).
4. In VPN → OpenVPN, upload the .ovpn file and add your service credentials.
5. Create a firewall zone for the tun0 device as in the WireGuard guide.

Is the router fast enough?

Check the router's WireGuard and OpenVPN suitability on its Voltarum OpenWRT buyers guide page. OpenVPN in particular needs a strong CPU.