How to set up WireGuard® on Keenetic router – Surfshark Customer Support

In this article, you will learn how to set up a manual WireGuard connection on your Keenetic router.

To set up WireGuard® on Keenetic, you first need an active Surfshark subscription. You can find the available plans on Surfshark's pricing page.

NOTE: WireGuard VPN support is implemented for current generation Keenetic devices, starting from KeeneticOS version 3.3.

Get your key pair

There are two ways we can go from here. You might have generated a key pair, and you'll be able to use it. Or, we will have to generate one.

If you have a key pair already, continue the tutorial as usual. If you do not, you should move on to the I don’t have a key pair section.

I have a key pair

Go to Surfshark's login page and log in. Then, visit VPN > Manual setup. Choose the Router option and click on WireGuard.
In the next window, click on I have a key pair.
Name your key pair and click Next.
Enter your public key and hit Save.

I don't have a key pair

Go to Surfshark's login page and log in. Then, visit VPN > Manual setup. Choose the Router option and click on WireGuard.
In the next window, click on I don't have a key pair.
Name your new key pair.
Click on Generate a new key pair.

NOTE: Copy and store the generated key pairs on your device. You will not be able to check them here again.

Choose a Surfshark server

Once you have your key pair, you should see a Choose a location button. Click on it. Here, you'll find the list of available locations to connect to. Select one and hit the download button.

Configure the interface

Log in to your Keenetic router's interface. Open a browser and enter this address into the URL bar: my.keenetic.net

Alternatively, enter the Gateway IP address into the URL bar. By default, it is 192.168.1.1
Proceed to log in to your router.

Default username: admin
Default password: 1234
Navigate to System Settings > Component options
Type in WireGuard in the search bar, check the box next to WireGuard VPN, and click Install the update button.
In the pop-up that comes up, click ‘Confirm’ to continue with the installation. After it is done, reboot the router.
Once rebooted, open up the router interface again and select the Other connections menu. Click the Import from a file button (refer to Choose a Surfshark server section in this article).
Click on the added connection (not on the switch).
Once there, check the box Use for accessing the Internet. If the listen port is not inserted, input 51820.
After you are done, make sure to click the Save button.
Click on the Connect switch.
Open the Connection priorities menu, move the added VPN connection to the top so that it is the first, and click Save.

Ensure the connection is successful

We always recommend checking if Surfshark VPN is working after setting it up for the first time. You can easily do it by performing Surfshark IP leak test and a DNS leak test. For your convenience, both are available on our website.