Provided are a router with a hardware encryption/decryption function and an encryption/decryption method thereof. The router comprises a routing function module and a field programmable gate array based hardware encryption/decryption module which are connected with each other, wherein the hardware encryption/decryption module encrypts a plaintext received by the routing function module from outside or decrypts a ciphertext received by the routing function module from outside, and the routing function module sends out encrypted data generated via encryption or decrypted data generated via decryption by the hardware encryption/decryption module via a wireless channel. In a working process, encryption or decryption is performed on a plaintext or ciphertext received in a router by using the hardware encryption/decryption module instead of a routing function module in the router itself, thereby ensuring that the router performs high-speed security hardware encryption on the received plaintext or ciphertext and ensuring that the router performs high-speed effective forwarding on the encrypted data/decrypted data.