How to set up WireGuard® on FRITZ!Box – Surfshark Customer Support

In this guide, you will learn how to set up a WireGuard® connection on your FRITZ!Box router.

To proceed, you first need an active Surfshark subscription. You can find the available plans on Surfshark's pricing page.

Note: WireGuard® VPN support is implemented for current generation FRITZ!Box devices, starting from FRITZ!OS version 7.39 or higher. You can check your router's firmware by going to FRITZ!Box official website, or by navigating to the Dashboard section on your router's web interface.

Get your key pair

There are two ways we can go from here. You might have generated a key pair, and you'll be able to use it. Or, we will have to generate one.

If you have a key pair already, continue the tutorial as usual. If you do not, you should move on to the I don’t have a key pair section.

I have a key pair

Go to Surfshark's login page and log in. Then, visit VPN > Manual setup. Choose the Router option and click on WireGuard.
In the next window, click on I have a key pair.
Name your key pair and click Next.
Enter your public key and hit Save.

I don't have a key pair

Go to Surfshark's login page and log in. Then, visit VPN > Manual setup. Choose the Router option and click on WireGuard.
In the next window, click on I don't have a key pair.
Name your new key pair.
Click on Generate a new key pair.

NOTE: Copy and store the generated key pairs on your device. You will not be able to check them here again.

Choose a Surfshark server

Once you have your key pair, you should see a Choose a location button. Click on it. Here, you'll find the list of available locations to connect to. Select one and hit the download button.

Configure the interface

Log in to your FRITZ!Box router’s interface. You can access it by entering your router's default gateway IP address into your browser's URL bar. By default, it is usually http://192.168.178.1. If that does not work, use the emergency IP http://169.254.1.1.

Alternatively, you can enter this address: http://fritz.box
If you haven’t done so before, you will have to set up your MyFRITZ! address. Follow these steps:
1) Click Internet in the FRITZ!Box user interface.
2) Click on MyFRITZ! Account in the Internet menu.
3) Enter your email address in the Your email address field.
4) Click Apply. Now MyFRITZ! will send you an email with the confirmation link to confirm your FRITZ!Box account.
5) Open the email you received from MyFRITZ!
6) Click the Register Your FRITZ!Box button in the email.
Now, we will configure Surfshark’s WireGuard VPN tunnel. To do so, in the router's web panel, in the Internet section, click on Permit Access.
Click the VPN (WireGuard) tab.
Click the Add Connection button.
Click "User-defined setup" and then "Next".
You will get a prompt: Has this WireGuard connection already been set up at the remote connection? Click Yes.
Click on Next.
Enter a name for the connection in the Name of the WireGuard connection field (for example, Surfshark).
Click the Choose File or Browse... button.
Select the settings file for the WireGuard connection that you downloaded from Surfshark and click Open. After, enable the option Send all network traffic via the VPN connection.

NOTE: If only certain devices should be able to access the internet via Surfshark VPN, enable the option Only certain devices in the home network are to be accessible over this WireGuard connection,and select the corresponding devices. This option is available only on some FRITZ!Box models.
Click the Finish button.
If asked to do so, confirm that the procedure may be executed and click OK to complete it.

Ensure the connection is successful

We always recommend checking if Surfshark VPN is working after setting it up for the first time. You can easily do it by performing Surfshark IP leak test and a DNS leak test. For your convenience, both are available on our website.