Start without Ethernet
Boot into a protected hotspot, replace the factory passwords and choose an upstream. Saved Wi-Fi networks reconnect automatically.
A small Alpine Linux router that turns public Wi-Fi into your own private hotspot. Set it up, choose an upstream and manage your privacy from your phone.
Raspberry Pi CM5 · Two Wi-Fi radios · No Ethernet needed for setup
This first release is experimental. Automated builds and security checks are available; physical CM5, adapter, captive-network and tunnel qualification is still pending. See the test checklist.
The phone in your hand is the control panel. The router works locally and carries its setup tools, packages and firmware in the image.
Boot into a protected hotspot, replace the factory passwords and choose an upstream. Saved Wi-Fi networks reconnect automatically.
Configure WireGuard or HTTPS/SOCKS5 proxy tunnels. Protected modes block direct client traffic when the tunnel is unavailable.
Unbound caches and validates DNSSEC answers. Choose DNS-over-TLS or recursive resolution, with domain and country filters.
A mobile-first dashboard for traffic, devices, system load, resolver statistics and local service logs.
Download a password-encrypted backup with saved Wi-Fi and tunnel settings. Validate and restore it in the local panel.
Signed application updates and optional Alpine stable package staging. Updates activate on reboot, when you choose.
Back up your device before flashing. Setup requires replacing both shared factory passwords before the router forwards traffic.
Read the operations guideDownload the image and SHA256SUMS from the release. Verify the checksum, then choose “Use custom” in Raspberry Pi Imager.
Connect to TravelRouter-XXXX with TravelRouter-Setup!. Open http://10.42.0.1/.
Sign in with ChangeMe-TravelRouter!. Replace the administrator and Wi-Fi passwords, reconnect, then select your upstream.
Image, checksums, package inventory, SBOM, provenance and signed application update are published together.