Last updated: March 2026
Key Takeaways
- Tomato firmware is now maintained as FreshTomato, the only actively updated version of the original Tomato project. If you see guides referencing "Tomato by Shibby" or "AdvancedTomato," those projects are discontinued — FreshTomato is what you want.
- FreshTomato supports a much narrower range of routers than alternatives like OpenWrt, primarily Broadcom-based devices from ASUS, Linksys, and Netgear. You must verify compatibility before attempting installation.
- The installation process involves downloading the correct firmware image for your router's chipset, uploading it through your router's admin panel, and performing a factory reset after the flash completes.
What Is Tomato Firmware and What Is FreshTomato?
Tomato is an open-source, Linux-based firmware replacement for consumer wireless routers. The original Tomato project was created by Jonathan Zarate and became popular for its clean interface, real-time bandwidth monitoring, and reliable performance.
The original Tomato firmware is no longer maintained. Over the years, several community forks emerged — Tomato by Shibby, TomatoUSB, AdvancedTomato, and others. Most of these are now also discontinued.
FreshTomato is the only actively maintained fork as of 2026. It receives regular updates, security patches, and hardware support improvements. When people refer to "Tomato firmware" today, they almost always mean FreshTomato. This guide covers FreshTomato installation.
Tomato vs. OpenWrt: Which Should You Choose?
If you are researching custom router firmware, you have likely come across OpenWrt as well. Here is a quick comparison to help you decide.
Choose FreshTomato if: you want a polished, user-friendly web interface with built-in real-time bandwidth graphs, you have a supported Broadcom-based router, and you prefer a simpler experience that works well out of the box without installing extra packages.
Choose OpenWrt if: you want maximum hardware compatibility, a huge library of installable packages, and deep customization. OpenWrt supports thousands of devices across many chipset families, while FreshTomato is limited primarily to Broadcom chipsets.
Both are solid choices for improving your network security and control. FreshTomato tends to appeal to users who want a clean, intuitive interface without a steep learning curve.
Before You Start: What You Need
1. Verify Your Router Is Compatible
This step is critical. FreshTomato only works on routers with specific Broadcom chipsets. The supported device list is much smaller than OpenWrt's.
Check the FreshTomato Hardware Compatibility page to see if your router is listed. You will also find the correct firmware download link for your specific device on this page.
Some commonly supported routers include select models from:
- ASUS (RT-N66U, RT-AC68U, RT-AC3100, and others)
- Linksys (WRT54GL, E-series, EA-series select models)
- Netgear (R7000, R8000, select Nighthawk models)
If your router is not on the compatibility list, do not proceed. Flashing incompatible firmware can permanently damage your device.
2. Identify Your Router's Chipset and Architecture
FreshTomato provides different firmware builds based on chipset type. You need to know whether your router uses a MIPSR1, MIPSR2, or ARM chipset. The hardware compatibility page will tell you which category your router falls into. Download the wrong build and the flash will either fail or brick your router.
3. Gather Your Equipment
- A computer with an Ethernet port (or a USB-to-Ethernet adapter)
- An Ethernet cable
- Your router, plugged in and powered on
- The correct FreshTomato firmware file for your router (downloaded from freshtomato.org)
4. Understand the Risks
Flashing custom firmware voids most manufacturer warranties. A power outage or incorrect firmware file during the flash can brick your router. Most supported devices have recovery options, but recovery is not guaranteed. Back up your current router configuration before proceeding if your stock firmware allows it.
How to Install FreshTomato: Step-by-Step
Step 1: Download the Correct Firmware
Go to the FreshTomato website and download the firmware image that matches your router's chipset architecture (MIPSR1, MIPSR2, or ARM). Each architecture has multiple build variants — for example, "AIO" (All-In-One), "VPN," or "Mega."
If you are unsure which build to choose, start with the AIO or VPN build. These include the most commonly used features without being excessively large.
Save the downloaded file somewhere easy to find. Do not rename it.
Step 2: Perform a Factory Reset on Your Router (Recommended)
Before flashing, it is a good practice to reset your router to factory defaults. This clears any settings that could conflict with the new firmware.
You can usually do this by holding the reset button on the back of the router for 10–15 seconds until the power light blinks. Alternatively, use the factory reset option in your router's admin panel.
Wait for the router to fully reboot before continuing.
Step 3: Connect Your Computer to the Router via Ethernet
Plug an Ethernet cable from one of the LAN ports on your router (not the WAN/Internet port) into your computer. Disconnect your computer from Wi-Fi so that all communication goes through the wired connection.
Step 4: Log In to Your Router's Admin Panel
Open a web browser and go to your router's admin address. After a factory reset, this is typically:
- 192.168.1.1 (ASUS, Linksys)
- 192.168.0.1 or routerlogin.net (Netgear)
Log in with the default credentials. For most routers after a factory reset, the username is "admin" and the password is "admin" or "password." Check the sticker on your router if these do not work.
Step 5: Navigate to the Firmware Upgrade Page
Find the firmware update section in your router's admin panel:
- ASUS: Administration > Firmware Upgrade
- Linksys: Administration > Firmware Upgrade (or Connectivity > Router Firmware Update)
- Netgear: Advanced > Administration > Firmware Update
Step 6: Flash the FreshTomato Firmware
Click the "Choose File" or "Browse" button and select the FreshTomato firmware file you downloaded. Then click "Upload" or "Upgrade" to begin the flash.
Critical: Do not unplug the router, close your browser, or disconnect the Ethernet cable during this process. The flash typically takes 3–5 minutes. The router will reboot automatically when finished.
Step 7: Perform a Thorough NVRAM Reset After Flashing
This step is important and often skipped. After the router reboots with FreshTomato installed, perform a "thorough" NVRAM reset to clear old settings stored in the router's non-volatile memory. Old NVRAM data from stock firmware can cause unpredictable behavior.
To do this, hold the router's reset button (also called the WPS button on some models) for 30 seconds while the router is powered on. Release the button and wait for the router to reboot completely. This may take 2–3 minutes.
Step 8: Access the FreshTomato Interface
After the NVRAM reset and reboot, open your browser and go to:
192.168.1.1
You should see the FreshTomato login screen. The default credentials are:
- Username: admin
- Password: admin
If you cannot reach 192.168.1.1, try clearing your browser cache, using a different browser, or releasing and renewing your IP address. On Windows, open Command Prompt and run ipconfig /release then ipconfig /renew. On macOS, go to System Settings > Network, select your Ethernet connection, and click "Renew DHCP Lease."
Essential Post-Installation Setup
Change the Admin Password Immediately
Go to Administration > Admin Access and change the default password to something strong. Leaving the default "admin/admin" credentials in place is a serious security risk — anyone on your network could access your router's settings.
Configure Your Internet Connection
Go to Basic > Network. The WAN settings should be configured to match your ISP's connection type. For most cable internet connections, select "DHCP" and plug your modem into the router's WAN port. If your ISP uses PPPoE (common with DSL and some fiber services), select PPPoE and enter the username and password provided by your ISP.
Set Up Your Wireless Network
Go to Basic > Network and scroll to the wireless section. Set your network name (SSID) and choose WPA2 Personal (AES) for encryption. Enter a strong Wi-Fi password. Click "Save" at the bottom of the page.
Avoid using WPA/WPA2 mixed mode or TKIP encryption — these are outdated and less secure.
Set the Correct Time Zone
Go to Basic > Time and set your time zone. This ensures that the bandwidth graphs, logs, and any scheduled tasks display the correct time.
Troubleshooting Common Installation Problems
Router Rejects the Firmware File
Verify you downloaded the correct firmware for your router's chipset architecture (MIPSR1, MIPSR2, or ARM). Also confirm you are using a file intended for a first-time flash from stock firmware — some builds are labeled specifically for upgrades from an existing Tomato installation. If your stock firmware has file size restrictions, you may need to use a smaller FreshTomato build variant.
Router Boot Loops After Flashing
This usually indicates an NVRAM conflict. Perform a 30-second hard reset by holding the reset button. If the boot loop continues, try the 30-30-30 reset method: hold the reset button for 30 seconds while the router is on, unplug the power while still holding the reset button for 30 more seconds, then plug the power back in while holding reset for another 30 seconds. Note that this method is mainly effective on MIPS-based routers and may not apply to ARM models.
Cannot Reach 192.168.1.1 After Installation
Wait at least 5 minutes for the initial boot to complete. Make sure your Ethernet cable is in a LAN port, not the WAN port. Try manually setting your computer's IP address to 192.168.1.2 with a subnet mask of 255.255.255.0 and gateway of 192.168.1.1.
Wi-Fi Not Working After Install
Log in via Ethernet and check the wireless settings under Basic > Network. Make sure the wireless radio is enabled and that a valid SSID and security key are configured. Some routers may require selecting the correct wireless country code to activate the radio properly.
Slow Speeds or Unstable Connection
If you experience degraded performance after installing FreshTomato, first verify you performed the NVRAM reset in Step 7. Residual settings from old firmware are the most common cause of post-flash instability. Also confirm you are using the correct firmware build for your hardware — an ARM build on a MIPS router (or vice versa) will cause serious problems.
What Can You Do With FreshTomato After Installation?
Once FreshTomato is running, you have access to features that most stock firmware does not offer:
- Real-time bandwidth monitoring: See exactly how much data each device on your network is using, with detailed graphs over time.
- QoS (Quality of Service): Prioritize traffic for video calls, gaming, or specific devices so that one heavy download does not slow everything else down.
- VPN client and server: Run a VPN directly on the router so all devices are covered without installing apps on each one. We recommend Proton VPN or Mullvad VPN — both support OpenVPN configurations that work with FreshTomato's built-in VPN client.
- Advanced access restrictions: Block specific websites or services by time of day or by device.
- DNS-level privacy: Configure custom DNS servers (such as DNS over TLS with providers like Quad9 or Cloudflare) to improve privacy across your entire network.
For more guides on securing and optimizing your home network, explore our other articles on network security, VPN setup, and choosing the right modem for your ISP.
Frequently Asked Questions
Is FreshTomato the same as Tomato firmware?
FreshTomato is a direct continuation of the original Tomato firmware project. The original Tomato firmware by Jonathan Zarate is no longer maintained, and other popular forks like Tomato by Shibby and AdvancedTomato have also been discontinued. FreshTomato is the only actively maintained version as of 2026, receiving regular security updates and new features.
What routers are compatible with Tomato firmware?
FreshTomato primarily supports routers built on Broadcom chipsets. This includes select models from ASUS (such as the RT-N66U and RT-AC68U), Linksys (such as the WRT54GL and certain EA-series routers), and Netgear (such as the R7000 and R8000). The full list is available on the FreshTomato hardware compatibility wiki. The supported device list is significantly smaller than OpenWrt's.
Can I install Tomato on my ASUS router?
Many ASUS routers are among the best-supported FreshTomato devices, particularly models with Broadcom chipsets like the RT-N66U, RT-AC66U, RT-AC68U, and RT-AC3100. Check the hardware compatibility page for your specific model and hardware revision before proceeding. Some newer ASUS routers use chipsets that are not supported.
Is Tomato firmware still updated in 2026?
The original Tomato firmware is not updated, but FreshTomato — the active community fork — continues to receive regular updates as of 2026. These include security patches, bug fixes, and occasional new hardware support. You can follow development and download the latest version at freshtomato.org.
Can I revert to stock firmware after installing FreshTomato?
Yes, in most cases you can flash your manufacturer's original firmware back onto the router through the FreshTomato admin panel under Administration > Upgrade. Download the stock firmware from your router manufacturer's support page first. After reverting, perform a factory reset to clear any residual settings. Check the FreshTomato wiki for device-specific revert instructions if you run into issues.
What is the 30-30-30 reset and when should I use it?
The 30-30-30 reset is a method used to fully clear a router's NVRAM (stored settings). You hold the reset button for 30 seconds with the router on, keep holding while unplugging power for 30 seconds, then keep holding while plugging power back in for 30 more seconds. This technique is useful for MIPS-based routers when you experience boot loops, unstable behavior, or settings that persist after a normal reset. It is not recommended for ARM-based routers, which use a different memory structure.
What is the difference between FreshTomato, DD-WRT, and OpenWrt?
All three are open-source router firmware projects, but they differ in scope and approach. FreshTomato focuses on Broadcom-based routers and is known for its intuitive interface and built-in bandwidth monitoring. OpenWrt supports the widest range of hardware and offers a large package ecosystem for deep customization. DD-WRT supports many devices but has a less predictable update schedule. For most users, the choice comes down to whether your router is supported and which interface you prefer.
