How to Set Up a VPN on Windows, Mac, iPhone, Android and Linux

Maybe you’ve picked a VPN service, your employer has sent you details for the company VPN, or you just want your laptop protected on hotel Wi-Fi. Either way, you’re now looking at an app store listing or a settings menu full of acronyms.

Here’s how to set up a VPN in short: install your VPN provider’s app from its official website or your device’s app store, approve the permission prompt and tap connect. If you’ve been given server details instead of an app, add them in your device’s built-in VPN settings.

This guide covers both methods on Windows 11, macOS, iPhone and iPad, Android and Linux, then shows how to confirm the VPN works and fix common problems.

Two ways to set up a VPN

Every VPN setup follows one of two paths. The right one depends on what your provider or employer gave you: an app, or a set of server details.

Option 1: Install a VPN app (easiest)

A VPN app bundles everything you need: the server list, the protocol (the rules that govern how the encrypted tunnel is built), your connection settings and automatic updates. The steps are nearly identical everywhere:

1. Download the app from the provider’s official website or your device’s official app store.
2. Install and open it.
3. Approve the permission prompt. Phones, tablets and Macs ask before an app can route your traffic through a VPN, and Windows and Linux ask for administrator rights, so this is normal.
4. Tap or click connect.

Still choosing a service? Learn how to spot a trustworthy free VPN first.

Option 2: Set up a VPN manually

Windows, macOS, iOS and Android include a built-in VPN client, software that connects to a VPN server without any extra app, and most Linux desktops offer the same through NetworkManager. You supply the connection details yourself, usually from a VPN provider that supports manual setup or from your employer’s IT team. Expect to need:

• Server address: a hostname like vpn.example.com, or an IP address
• VPN type: the protocol, such as IKEv2 or L2TP/IPsec
• Sign-in details: a username and password, a certificate, or a pre-shared key (a shared password for the connection itself)
• A configuration file instead, if the service uses WireGuard or OpenVPN

Manual setup suits work VPNs and devices without an official app, but you lose conveniences like one-click server switching and automatic updates. If WireGuard and OpenVPN are new names to you, our comparison of WireGuard vs OpenVPN explains how they differ.

How to set up a VPN on Windows 11

Using an app

1. Download the installer from the provider’s website, or get the app from the Microsoft Store.
2. Run it and approve the User Account Control prompt. VPN apps usually need administrator rights because they install a virtual network adapter, the component Windows uses to send traffic into the tunnel.
3. Open the app and click connect.

Using the built-in VPN client

1. Open Settings > Network & internet > VPN and select Add VPN.
2. Set VPN provider to Windows (built-in).
3. Type a Connection name you’ll recognize, then the Server name or address.
4. Choose the VPN type your provider or IT team specified. The built-in client supports IKEv2, SSTP and L2TP/IPsec (with a certificate or a pre-shared key), plus the outdated PPTP.
5. Choose the Type of sign-in info, such as a username and password, enter your details and select Save.
6. Select Connect next to the new connection. On most versions, you can also connect from the VPN button in Quick Settings on the taskbar.

The built-in client doesn’t support WireGuard or OpenVPN. If your provider sent you a .conf or .ovpn file, install the official WireGuard or OpenVPN client for Windows and import the file there.

How to set up a VPN on a Mac

Using an app

1. Download the app from the Mac App Store or the provider’s official website.
2. Open it and click connect.
3. When macOS asks to add VPN configurations, click Allow and confirm with your password or Touch ID.

Some apps from outside the App Store also ask you to approve a system extension; follow the prompt to the right setting.

Using the built-in VPN client

These steps apply to macOS Ventura and later:

1. Open System Settings and select VPN in the sidebar. On some versions, the VPN options sit under Network instead.
2. Click Add VPN Configuration and choose the type: IKEv2, L2TP over IPSec or IPSec.
3. Enter a display name, the server address and the authentication details you were given, then click Create.
4. Switch on the new configuration to connect.

As on Windows, WireGuard and OpenVPN connections need their own client apps on a Mac.

How to set up a VPN on iPhone and iPad

Using an app

1. Install the app from the App Store.
2. Open it and tap connect.
3. When iOS asks to Add VPN Configurations, tap Allow, then confirm with your passcode, Face ID or Touch ID.

While the VPN is on, a small VPN indicator appears in the status bar or, on some models, only in Control Center.

Using the built-in VPN client

1. Go to Settings > General > VPN & Device Management > VPN.
2. Tap Add VPN Configuration, then tap Type and choose IKEv2, IPsec or L2TP.
3. Fill in the description, server, remote ID (for IKEv2) and sign-in details exactly as they were given to you, then tap Done.
4. Turn on the Status switch to connect. On most versions, a VPN switch also appears near the top of the main Settings screen once a configuration exists.

To remove a configuration later, return to the same VPN screen, tap the info button next to it and choose Delete VPN.

How to set up a VPN on Android

Using an app

1. Install the app from Google Play or your device’s official app store.
2. Open it and tap connect.
3. Android shows a Connection request asking whether to let the app set up a VPN connection. Tap OK if you trust the app.

While the VPN is active, most Android phones show a small key icon in the status bar.

Using the built-in VPN client

1. Open Settings > Network & internet > VPN on most devices. Menus vary by manufacturer: Samsung phones, for example, put it under Settings > Connections > More connection settings > VPN.
2. Tap the + button (on some phones, Add VPN profile).
3. Enter a name, choose the type, fill in the server address and sign-in details, and tap Save.
4. Tap the new profile to connect.

Newer Android versions have dropped older protocols like PPTP and L2TP from the built-in client in favor of IKEv2/IPsec. If your workplace still relies on one of those, ask your IT team for an app or an IKEv2 profile.

Turning on Always-on VPN

On Android 7 and later, you can keep a VPN app connected at all times. Open the VPN menu above, tap the gear icon next to your VPN app and turn on Always-on VPN. Android 8 and later add Block connections without VPN, which stops apps from using the internet whenever the VPN isn’t connected.

How to set up a VPN on Linux

Linux gives you three main routes: your provider’s app if it offers one, the NetworkManager tools built into most desktops, or the command line.

Using NetworkManager

On the GNOME desktop, open Settings > Network and select + next to VPN. Choose the VPN type, or Import from file if you have a configuration file, then enter your details and save. You can then switch it on from the same panel or the system menu.

The types you see depend on which NetworkManager plugins are installed. OpenVPN, for example, usually needs your distribution’s NetworkManager OpenVPN plugin package.

Using WireGuard on the command line

Install the WireGuard tools from your distribution’s package manager (on Ubuntu and Debian, sudo apt install wireguard); the WireGuard website has instructions for other distributions. Save the configuration file from your provider as /etc/wireguard/wg0.conf, then bring the tunnel up:

sudo wg-quick up wg0

Run sudo wg to check the connection: a recent handshake means the tunnel is working. Disconnect with sudo wg-quick down wg0. On distributions that use systemd, sudo systemctl enable wg-quick@wg0 starts the tunnel at boot.

Using OpenVPN on the command line

Install the openvpn package (on Ubuntu and Debian, sudo apt install openvpn), then start the connection with the .ovpn file from your provider:

sudo openvpn --config client.ovpn

Keep the terminal open while you’re connected, and press Ctrl+C to disconnect.

After setup: how to use a VPN day to day

Before relying on a new VPN, take two minutes to confirm it works:

1. With the VPN off, search “what is my IP” and note the address.
2. Connect and search again. The address should now belong to the VPN server.
3. Run a DNS leak test to make sure your lookups, the requests that turn website names into addresses, also go through the tunnel. Our guide to DNS leaks explains what to look for.

For the complete checklist, including WebRTC and IPv6 leaks, see how to check if your VPN is working.

Then make protection automatic:

• Many VPN apps can launch at startup and connect on their own, and some can connect whenever you join an unfamiliar Wi-Fi network.
• On Android, turn on Always-on VPN as described above.
• On Linux, enable the wg-quick@wg0 service so WireGuard starts at boot.

After that, using a VPN is mostly a matter of leaving it on, especially on public Wi-Fi in cafes, airports and hotels.

VPN not connecting? Common problems and fixes

Still stuck? Restart your device, update the app and your operating system, and try another network, such as your phone’s hotspot, to see whether the VPN or the network is the problem. If the VPN works but feels sluggish, here’s why a VPN can slow down your internet and what to do about it.

Want to skip the configuration?

Manual setup works, but it means tracking server addresses, protocols and certificates on every device. OqusFreeVPN is designed to remove those steps: one tap to connect, no account to create and nothing to configure, because the app picks sensible defaults for you. It’s built on the WireGuard protocol and is 100% free on every platform, with no ads.

Apps for Windows, macOS, iOS, Android and Linux are rolling out in Early Access. Visit the download page to see where each platform stands.

The bottom line

For most people, the best way to set up a VPN is also the simplest: install a trustworthy app from an official source, approve the permission prompt and connect. Use your device’s built-in client when your employer or provider gives you server details, and pick a modern protocol like WireGuard, IKEv2 or OpenVPN over PPTP.

Then finish with a quick IP and DNS leak check, and turn on auto-connect. If you’d rather never touch a VPN setting at all, see how OqusFreeVPN works.