How to set up WireGuard® on FRITZ!Box – Surfshark Customer Support

To set up WireGuard on a FRITZ!Box router, you need to generate a WireGuard key pair in your Surfshark account, download the server configuration file, and then import it into your router's VPN settings. This guide will walk you through the complete process.

To proceed, you first need an active Surfshark subscription. You can find the available plans on Surfshark's pricing page.

Note: WireGuard® VPN support is implemented for current generation FRITZ!Box devices, starting from FRITZ!OS version 7.39 or higher. You can check your router's firmware by going to FRITZ!Box official website, or by navigating to the Dashboard section on your router's web interface.

Credentials and server selection

Before setting up the router, you will need to obtain the credentials for the manual setup and select a server to connect to.

Get your WireGuard credentials

NOTE: These are not your regular credentials, such as your email and password.

Head to the Surfshark login page and log in. Then, click on VPN -> manual setup.
Select set up manually.
Choose the WireGuard protocol.
Once there, select I don't have a key pair.

NOTE: If you have already created a key pair, simply press I have a key pair, and enter your public key.
Enter a name for the keypair, and click next.
Click generate new key pair.
You will be able to see a public and a private key pair. Make sure to save both of them.

Choose a Surfshark VPN server

Head to the Locations tab and locate the server that you wish to connect to.
Click on the download icon to the right of the server name.
Click on the download icon.

Configure the interface

Log in to your FRITZ!Box router’s interface. You can access it by entering your router's default gateway IP address into your browser's URL bar. By default, it is usually http://192.168.178.1. If that does not work, use the emergency IP http://169.254.1.1.

Alternatively, you can enter this address: http://fritz.box
If you haven’t done so before, you will have to set up your MyFRITZ! address. Follow these steps:
1) Click Internet in the FRITZ!Box user interface.
2) Click on MyFRITZ! Account in the Internet menu.
3) Enter your email address in the Your email address field.
4) Click Apply. Now MyFRITZ! will send you an email with the confirmation link to confirm your FRITZ!Box account.
5) Open the email you received from MyFRITZ!
6) Click the Register Your FRITZ!Box button in the email.
Now, we will configure Surfshark’s WireGuard VPN tunnel. To do so, in the router's web panel, in the Internet section, click on Permit Access.
Click the VPN (WireGuard) tab.
Click the Add Connection button.
Click "User-defined setup" and then "Next".
You will get a prompt: Has this WireGuard connection already been set up at the remote connection? Click Yes.
Click on Next.
Enter a name for the connection in the Name of the WireGuard connection field (for example, Surfshark).
Click the Choose File or Browse... button.
Select the settings file for the WireGuard connection that you downloaded from Surfshark and click Open. After, enable the option Send all network traffic via the VPN connection.

NOTE: If only certain devices should be able to access the internet via Surfshark VPN, enable the option Only certain devices in the home network are to be accessible over this WireGuard connection,and select the corresponding devices. This option is available only on some FRITZ!Box models.
Click the Finish button.
If asked to do so, confirm that the procedure may be executed and click OK to complete it.

Test your VPN connection

We always recommend checking if Surfshark VPN is working after setting it up for the first time. You can easily do it by performing Surfshark IP leak test and a DNS leak test. For your convenience, both are available on our website.