How to Set Up a VPN on Windows 10 and 11

The quickest way to set up a VPN on Windows 10 or 11 is to install the VPN provider’s official Windows app, sign in, and select Connect. Use the built-in Windows VPN client instead when your employer, school, or VPN administrator gives you a server address, VPN type, and sign-in details.

Do not treat a VPN as a fix for an unsupported operating system. Microsoft ended standard Windows 10 support on October 14, 2025, so upgrade to Windows 11 if your PC is eligible. If you must remain on Windows 10, enroll the device in Microsoft’s Consumer Extended Security Updates program and keep it patched while you plan the move.

Choose the right setup method first

A provider app is usually the practical choice for a personal subscription. The built-in client is useful when an organization or service gives you a compatible manual profile.

Setup method	Best for	What you need	Main limitation
Provider’s Windows app	Personal VPN subscriptions	An account and the official installer	You depend on the provider’s software and settings
Windows built-in VPN client	Work, school, or a manually configured VPN	Server address, VPN type, authentication method, and credentials or certificate	Windows supplies the client, not a VPN service or server

Do not guess a server address, protocol, key, certificate, or username. Get those details from the service’s official setup page or your network administrator.

Before using a VPN on Windows 10

Microsoft no longer provides free security fixes, feature updates, or technical assistance for ordinary Windows 10 installations. A VPN cannot patch a vulnerable operating system.

Run Microsoft’s PC Health Check app to see whether the computer qualifies for Windows 11. If it does, back up important files and upgrade. Otherwise, Microsoft’s consumer ESU program can provide enrolled Windows 10 PCs with critical and important security updates through October 12, 2027. ESU is a bridge, not a permanent solution.

Our Windows 10 privacy settings guide covers the other system controls worth reviewing. Those settings and a VPN have different jobs; neither replaces operating-system security updates.

Method 1: Install a VPN provider’s Windows app

Use this method for a consumer VPN subscription. The app handles server lists and protocol configuration. If you are new to VPNs, our VPN for beginners guide covers the basics first.

1. Go directly to the provider’s official website. Avoid installers from download directories, search ads, or file-sharing sites.
2. Download the Windows version that matches your PC. Check Settings > System > About > System type if the provider offers separate installers.
3. Open the installer and approve the Windows security prompt only after checking that the publisher matches the provider.
4. Launch the app and sign in with the account you created on the provider’s site.
5. Select a nearby server for normal browsing, then choose Connect. A distant server is unnecessary unless you have a specific reason to use that location.
6. Open the settings. Enable the internet kill switch if you want traffic blocked when the VPN disconnects, and review auto-connect.
7. Confirm the connection by checking the app status and visiting a public IP-check page. The reported public IP should differ from the one shown before you connected.

Use a full Windows app when you want other apps’ traffic in the tunnel. A browser extension may protect only browser traffic.

For a broader shortlist, see our guide to the best VPNs for Windows.

Method 2: Add a VPN profile in Windows 11

The Windows 11 path is Settings > Network & internet > VPN > Add VPN. Have the supplied configuration ready.

1. Open Start > Settings.
2. Select Network & internet, then VPN.
3. Select Add VPN.
4. Set VPN provider to Windows (built-in).
5. Enter a recognizable Connection name. This label is only for identifying the profile on your PC.
6. Enter the supplied Server name or address exactly as provided.
7. Under VPN type, choose the type specified by the administrator or service. Do not substitute another protocol because it sounds similar.
8. Choose the specified Type of sign-in info, then enter credentials only if the profile uses them.
9. Select Save.
10. Return to the VPN settings page, select the new profile, and choose Connect.

Windows shows a shield on the taskbar for a recognized active VPN. Reopen the VPN settings to check its status or disconnect.

Method 3: Add a VPN profile in Windows 10

The Windows 10 labels differ slightly, but the information you need is the same.

1. Open Start > Settings.
2. Select Network & Internet, then VPN.
3. Select Add a VPN connection.
4. Choose Windows (built-in) as the VPN provider.
5. Enter the supplied connection name, server name or address, VPN type, and sign-in method.
6. Add credentials only when the administrator or service tells you to store them on the device.
7. Select Save, choose the new profile, and select Connect.

On a managed PC, follow the organization’s instructions. IT may deploy the profile automatically, require a certificate, or enforce sign-in controls.

Configure the connection without weakening it

Leave the VPN type on the exact setting supplied by the administrator. Windows supports several connection types, but compatibility and authentication must match the server. Selecting Automatic is appropriate only when the instructions say to use it.

Review the kill switch before assuming it is active. A system-level switch should stop traffic from falling back to the normal connection; an app-level switch may close only selected programs. Test the behavior first.

Any program excluded through split tunneling uses the ordinary internet route. That can help with local devices, but the excluded program is outside the tunnel.

Fix a Windows VPN that will not connect

Work through these checks in order instead of changing several settings at once:

1. Test the base connection. Disconnect the VPN and confirm that a normal website loads. Fix Wi-Fi, Ethernet, or captive-portal access first.
2. Recheck the profile. Compare the server address, VPN type, sign-in method, username, and certificate with the source instructions. One incorrect field can prevent the connection.
3. Try another approved server. In a provider app, choose a different nearby server. For a work profile, use only addresses your administrator supplied.
4. Update safely. Install supported Windows updates and get the newest app installer from the provider’s official site. Restart Windows after an update if requested.
5. Reconnect cleanly. Close and reopen the app. Recreate a manual profile only after saving the supplied settings.
6. Check security software without disabling it. Use an approved firewall exception or ask IT; do not leave protection turned off.
7. Escalate managed connections. Certificate, multifactor-authentication, and company-network failures usually require the organization’s help desk because only it can verify the server and account state.

Do not download a random “VPN repair” utility or switch to an obsolete protocol just to make the error disappear. That creates a second security problem without proving what caused the first one.

What a VPN does not protect on Windows

A VPN does not make you anonymous. Websites can still recognize a signed-in account, cookies, payment information, and other identifiers. It also does not remove malware, stop phishing, repair unsafe browser extensions, or replace backups and multifactor authentication.

The VPN operator becomes another party you must trust. Read its ownership, logging, security, and audit information before subscribing.

A VPN can slow a connection, break local-device access, or trigger extra website checks. Disconnecting returns traffic to the normal network path.

If you are setting up another device after Windows, our Android VPN setup guide explains the equivalent app and manual-profile routes.

Our pick for a simple Windows setup

For a personal Windows PC, NordVPN is our practical pick because its official support currently documents a dedicated Windows 10 and 11 app plus an Internet Kill Switch. Install the app from NordVPN’s own site, connect to a nearby server, and turn on the kill switch if you do not want the PC to fall back to an unprotected connection.

The drawback is the trust transfer: NordVPN becomes the network operator on the far side of the tunnel. Nord Security and Surfshark merged in 2022 and say the services continue to operate autonomously with separate infrastructure and product roadmaps. Read our full NordVPN review and the provider’s current policies before deciding.

FAQ

Does Windows 10 have a built-in VPN?

Windows 10 includes a VPN client, but it does not give you a VPN service, account, or server. You still need configuration from an employer, school, self-managed server, or compatible VPN provider. For most personal subscriptions, the provider’s Windows app is easier to configure and maintain.

Is it safe to use a VPN on Windows 10 after support ended?

A VPN does not compensate for missing operating-system patches. Upgrade an eligible PC to Windows 11. If you must keep Windows 10 temporarily, enroll in Microsoft’s Consumer ESU program, install the available security updates, and plan to replace or upgrade the device before that coverage ends.

Should I use the VPN app or Windows built-in VPN?

Use the provider’s app for a personal VPN unless its documentation directs you to a manual profile. Use the Windows client when a workplace, school, or service gives you the exact server, protocol, and authentication settings. The built-in client is not automatically more private; the provider and configuration still matter.

Why does my VPN say connected but the internet does not work?

The cause may be a failed server route, an active kill switch, a DNS problem, a captive portal, or a security policy. Disconnect first and test the base internet connection. Then try another approved server, review the kill-switch setting, and contact the provider or IT team if the profile connects without passing traffic. For DNS issues specifically, see our guide on diagnosing and fixing a DNS leak.