The ExpressVPN Aircove (`AX1800`) and the pocket-sized ExpressVPN Aircove Go are the only consumer Wi-Fi 6 routers on the market designed from the silicon up with a native, drag-and-drop multi-tunnel VPN dashboard built directly into the firmware. Instead of manually generating key pairs, pasting `.ovpn` certificates, or fighting command-line firewall rules, Aircove lets you divide your entire home or hotel room into 5 simultaneous VPN Device Groups in under 60 seconds.
As a standalone 100% ExpressVPN Aircove & Aircove Go hardware review and setup manual expanding on our Best VPN Routers & Whole-Home WireGuard Setup Hub and our ExpressVPN 2026 Deal & Tier Breakdown, this guide walks you through real-world Lightway throughput tests, setting up `aircove.och` Device Groups for Smart TVs and consoles, bypassing hotel captive portals with Wi-Fi Link on the Aircove Go, and flashing AircoveOS onto compatible Asus hardware.
Aircove (`AX1800`) vs. Aircove Go vs. AircoveOS: 2026 hardware specs & Lightway speeds
Unlike third-party routers where ExpressVPN only offers legacy OpenVPN `.ovpn` files (which cap budget router CPUs at ~65–90 Mbps), both the standard ExpressVPN Aircove and the portable Aircove Go run ExpressVPN’s proprietary Lightway protocol natively in C/WolfSSL. Here is how all three ways to run AircoveOS compare in 2026:
Power Your Aircove or Aircove Go With an Active ExpressVPN Subscription
Both Aircove routers require an active ExpressVPN account to unlock all 113 countries, Lightway encryption, and 5 simultaneous Device Groups.
How Aircove’s 5 Device Groups work (`aircove.och`): multi-country household blueprint
The killer feature that separates Aircove from almost every traditional router is its browser-based dashboard at `http://aircove.och` (or `192.168.132.1`). Once you paste your ExpressVPN activation code, you can create up to 5 independent Device Groups—each maintaining its own persistent Lightway tunnel to a different country in the world—and drag-and-drop your household devices between them with your finger or mouse:
Group 1: United Kingdom (Docklands / Midlands)
Assigned Devices: Living Room LG G4 OLED (webOS) or Samsung Tizen TV.
Purpose: Unlocks BBC iPlayer 4K UHD, ITVX, and Channel 4 on Smart TVs that cannot install native VPN apps.
Group 2: USA (New York / Atlanta)
Assigned Devices: Apple TV 4K & Roku Ultra.
Purpose: Streams live Premier League on Peacock TV, UEFA Champions League on US Paramount+, and ESPN+ at 60fps.
Group 3: Gaming Console Tunnel (Cairo / Tokyo)
Assigned Devices: PlayStation 5 & Xbox Series X.
Purpose: Routes console matchmaking to off-peak regions or protects party chat from DDoS attacks without a PC.
Group 4: Whole-Home Media Center (1-IP Lock)
Assigned Devices: All Firesticks & Nvidia Shields.
Purpose: Forces every media streamer in the house through a single VPN IP so Real-Debrid never triggers a multi-IP ban.
Group 5: No VPN (Direct Local ISP IP)
Assigned Devices: Work Laptop, Local Banking Phone & Matter/HomeKit Printers.
Purpose: Bypasses the VPN completely so corporate IT or local delivery apps see your true home ISP address.
Important Note on Device Limits: Even though ExpressVPN’s Basic plan allows 10 simultaneous connections (up to 14 on ExpressVPN Pro), the entire Aircove router only counts as 1 single device slot on your ExpressVPN subscription—meaning you can connect 40+ devices inside your home to Aircove and still have 9–13 mobile slots left over!
Aircove Go travel setup: Hotel Wi-Fi Link, captive portals & USB-C power bank rules
If you travel frequently and find OpenWrt routers like the GL.iNet Beryl AX (`GL-MT3000`) too technical to configure, the palm-sized ExpressVPN Aircove Go is the easiest travel router ever built. Here is how to set it up in any hotel, Airbnb, or airport lounge:
3-Minute Hotel Room Setup With Aircove Go’s “Wi-Fi Link”
- Step 1 — Pre-Register Your Devices Before Leaving Home: Connect your phones, tablets, laptops, and travel Apple TV/Firestick to your Aircove Go’s private Wi-Fi SSID once at home. When you arrive at a hotel in Dubai, Tokyo, or London, all your devices will auto-join the Aircove Go the instant you plug it in.
- Step 2 — Connect to Hotel Wi-Fi via `aircove.och` (`Wi-Fi Link`): If the hotel room has no Ethernet wall jack, open `http://aircove.och` on your phone, go to Internet Settings → Wi-Fi Link, and select the hotel’s Wi-Fi network.
- Step 3 — Clear the Hotel Captive Portal Popup in 10 Seconds: As explained in our Hotel Wi-Fi & Captive Portal Bypass Guide, AircoveOS automatically detects when a hotel requires a room number and last name login. Click the banner prompt inside `aircove.och` (or visit `http://neverssl.com`), complete the hotel login once on your phone, and Aircove Go immediately re-locks its Network Lock (Hardware Kill Switch) for every device in the room!
Traveling Soon? Get ExpressVPN + A Free 3GB–5GB `holiday.com` Roaming eSIM
ExpressVPN’s 2026 long-term plans bundle a complimentary holiday.com international eSIM Alongside full Aircove & Aircove Go support.
Built-in Threat Manager, Ad Blocker & Parental Controls (plus the ITVX/Channel 4 fix)
Inside `http://aircove.och`, clicking the gear icon on any of your 5 Device Groups lets you configure per-group network security rules without installing browser extensions:
- Threat Manager & Ad Blocker: Blocks known malware command-and-control domains, third-party telemetry trackers (including ACR Smart TV screen-scraping trackers on LG, Samsung, and Vizio TVs), and display ads across every device in that group.
- Pro Streaming Tip — Disable Ad Blocker on Your “UK/US Smart TV” Group: If you use Aircove to watch free ad-supported broadcasters like ITVX, Channel 4, or US Paramount+ (Essential), their video players perform a pre-roll ad handshake check (`FreeWheel` / `2mdn.net`). If Aircove’s Ad Blocker is toggled ON for your Smart TV group, the stream will throw error `10-06` or `3205`. Leave Threat Manager ON for your laptops/phones, but toggle Block Ads OFF strictly inside your Smart TV Device Group!
- Want Faster 500–800 Mbps Speeds? Because Aircove (`AX1800`) uses a 1.2 GHz quad-core ARM CPU, its encrypted Lightway speeds top out around 180–215 Mbps—which is more than enough for seven simultaneous 4K UHD streams (25 Mbps each), but slower than high-end Asus ROG / RT-AX86U Pro WireGuard routers that hit 600–850 Mbps.
Ready to Activate Your ExpressVPN Aircove or Whole-Home VPN Setup?
Grab our verified 2026 discount links below—every plan includes a full 30-day money-back guarantee.
VPN Routers, NordVPN Meshnet, Remote Work Abroad & Hotel / In-Flight Wi-Fi
Every guide in this cluster is tested with live 2026 server benchmarks, regional payment workarounds, and error-code fixes:
Compare ExpressVPN Aircove, GL.iNet Beryl AX & Asuswrt-Merlin for consoles & TVs.
Export WireGuard .conf files to Beryl AX (GL-MT3000), clone hotel MACs & lock Kill Switch.
890 Mbps Broadcom WireGuard benchmarks, Asuswrt-Merlin VPN Director & DNS Director.
Turn your home PC, Mac mini, or Raspberry Pi into a free 24/7 residential ISP exit node.
GL.iNet Beryl AX + Dedicated IP / Home WireGuard setup, Wi-Fi BSSID isolation & MTU 1360.
Force stuck login screens via 1.1.1.1 & bypass UDP blocks over TCP Port 443.
Connect on Starlink, Viasat & Panasonic satellite Wi-Fi and share one $25 flight pass.
10-second Marriott/Hilton captive portal trigger & MAC cloning for Firestick/Apple TV.
Route Apple TV & Firestick traffic through your home IP via free NordVPN Meshnet.
Frequently Asked Questions (FAQ)
Does the ExpressVPN Aircove router come with an ExpressVPN subscription included?
No—when you buy the ExpressVPN Aircove or Aircove Go hardware on Amazon or retail stores, it functions as a standard Wi-Fi 6 router out of the box, and requires an active ExpressVPN subscription (Basic, Advanced, or Pro) to enable the VPN features, Lightway encryption, and 5 Device Groups. New users receive a 30-day free trial code in the box, or can lock in the 80% off ($2.99/mo) long-term deal directly.
Can I use NordVPN, Surfshark, or Proton VPN on an ExpressVPN Aircove router?
No. Both the Aircove and Aircove Go are locked to ExpressVPN’s proprietary AircoveOS firmware and only authenticate via an ExpressVPN account activation code. If you want a hardware router that supports third-party WireGuard `.conf` profiles from NordVPN, Surfshark, or Proton VPN, choose a GL.iNet Beryl AX / Slate 7 for travel or an Asus VPN Fusion router for home.
How do I connect ExpressVPN Aircove to my existing ISP modem or fiber gateway without Double NAT issues?
Simply plug an Ethernet cable from any LAN port on your existing ISP modem/router into the blue WAN (Internet) port on the back of your ExpressVPN Aircove. You don’t even need to put your ISP router into Bridge Mode—Aircove automatically configures its own isolated subnet (`192.168.132.x`) and tunnels traffic through Lightway UDP/TCP, completely bypassing ISP DNS hijacking and Double NAT streaming blocks.
Which Asus routers can be flashed with ExpressVPN’s AircoveOS firmware?
ExpressVPN provides official downloadable AircoveOS `.w` firmware images for the Asus RT-AX58U (v1), Asus RT-AX3000, and Asus TUF Gaming AX3000 (v1). Flashing takes 3 minutes via the Asus Administration Firmware Upgrade page and transforms the Asus router into an exact clone of the Aircove (`aircove.och`) interface with 5 Device Groups and native Lightway support.
