NymVPN doesn't provide standalone WireGuard config files, so there's no .conf to load onto a router or firewall. The reason is architectural: NymVPN authenticates with rotating zero-knowledge credentials (zk-nyms), not the static keys a WireGuard config relies on. If you want NymVPN at the router level, a community-built OpenWRT package now runs the full client directly on the router, no config file needed.
Why there are no config files
A WireGuard config holds static keys that grant permanent access: convenient, but a persistent identifier that can be linked to your activity over time. NymVPN's zk-nym credentials prove you have a valid subscription without revealing who you are, and they rotate regularly by design, so a static config would expire at the next rotation. That rotation is the privacy feature, not an oversight.
NymVPN on OpenWRT routers
Through a Nym community grant, the team at dial0ut built an OpenWRT package that runs the nym-vpnd daemon on the router itself. Because the full client runs on the device, credential rotation keeps working and every device on your network is protected automatically. It includes pre-built binaries for a range of architectures (x86_64, ARM64, ARM Cortex, MIPS, RISC-V), one-click IPK installation, and a LuCI web interface for login, mode selection, status, and diagnostics under LuCI > VPN > Nym VPN.
You'll need about 60 MB of free storage and WireGuard support on the router (opkg install wireguard-tools kmod-wireguard). Download the .ipk for your architecture from the releases page and install it via SSH or LuCI's System > Software upload. It's community-maintained and still in active development, so use the OpenWRT thread on the Nym forum for help rather than the support form. Your router counts toward the 10-device limit.
Other routers and firewalls
Broader router and firewall support (pfSense and more) is on the NymVPN public roadmap. The challenge is delivering router-level WireGuard without weakening the zk-nym system; the OpenWRT package solves it by running the full client on the router, and similar approaches are being explored elsewhere.
What you can do today
- On an OpenWRT router, install the community package above.
- On everything else, install the NymVPN app per device (Windows, macOS, Linux, Android, iOS), with one subscription covering up to 10 devices. See How many devices can I use with NymVPN?
- On Linux, advanced users can run NymVPN from the command line. See How to download and setup NymVPN CLI?
Related questions
Can I export a config from the app?
No. The apps manage zk-nym credentials and WireGuard keys internally, with no export, for the privacy reasons above.
Is the OpenWRT package officially supported?
It's a community project built through a Nym grant. Nym Support can't troubleshoot router installs; the forum thread is the place for help.
Would an OpenVPN file work instead?
No. NymVPN doesn't support OpenVPN, so there are no .ovpn files either. See Does NymVPN support OpenVPN or other protocols?