How to Set Up a VPN on Windows 10 and 11

To set up a VPN on Windows 10 or 11, install your provider's official app, sign in, and click Connect — that's the whole job for almost everyone. Windows also has a built-in VPN client for manual configurations, but you only need it in specific cases. This guide covers both, then the settings worth turning on and a quick check that it's working.

The easy way: the provider's app

The app is the right choice on Windows in nearly every case, because it manages servers, updates and the kill switch for you. Here is the full sequence:

1. Create an account on your provider's website and choose a plan, or start a free tier. Type the address yourself rather than clicking a search ad, so you land on the real site.
2. Download the Windows app from that site, or install it from the Microsoft Store. Both are legitimate; the Store version updates automatically.
3. Run the installer and accept the default options. If Windows shows a User Account Control prompt asking to allow changes, that is expected for a VPN — it needs to install a network adapter.
4. Open the app, sign in, and click Connect. Most apps pick the fastest nearby server automatically. When the status reads connected, you're done.

You can pin the app to the taskbar and set it to launch at startup so it's always ready. That's the entire installation — under five minutes on a normal connection.

The manual way: Windows' built-in VPN

Use the built-in client only when you have a configuration to enter — a work VPN, or a provider without a Windows app. You'll need server details and credentials from whoever runs the VPN; you can't invent them. The path is Settings, then Network & internet, then VPN, then Add VPN.

In that dialog you choose 'Windows (built-in)' as the provider, give the connection a name, and paste in the server address, VPN type (such as IKEv2 or L2TP), and your sign-in details. Save it, then click Connect from the same screen or the network flyout. For OpenVPN or WireGuard configurations, install that project's small official client instead and import the config file you were given.

Turn on the kill switch and auto-connect

After you connect for the first time, open the app's settings and switch on the kill switch. It blocks internet traffic if the VPN drops, so your real IP isn't briefly exposed while the app reconnects — and on Windows it's often off by default. Our kill switch setup guide covers the app-level and system-level options.

While you're in settings, enable auto-connect on untrusted networks so the VPN turns itself on when you join public Wi-Fi, and leave the protocol on automatic unless you have a reason to change it. WireGuard is a good manual pick on Windows for speed. These few toggles are the difference between a VPN that sits there and one that actually protects you without thinking about it.

Check that it's working

Don't assume a connected icon means everything routes through the VPN. With it connected, search 'what is my IP' and open a result: the address and location should be the VPN server's, not your own. Then run a DNS leak test — the DNS servers listed should belong to the VPN, not your internet provider. If either still shows your own details, reconnect or switch servers and test again.

Common Windows setup snags

Most Windows problems are the firewall, an outdated app, or a busy server. If the app installs but won't connect, allow it through Windows Defender Firewall, update to the latest version, and try a different server. A stubborn TAP or WireGuard adapter can be fixed by reinstalling the app, which recreates it. Our connection-fixes checklist walks through the rest in order.

That's Windows covered. The same four-step shape applies to every device — see the master guide on how to set up a VPN for the platform-by-platform differences and the settings that carry across all of them.

Make it start with Windows

For a VPN to protect you, it has to be running — so the most useful finishing touch on Windows is to have it launch and connect automatically. In the app's settings, enable 'launch at Windows startup' and 'auto-connect on launch', and turn on auto-connect for untrusted networks. Now the VPN is up before you open a browser, and it reconnects on its own after sleep or a restart. You can still disconnect manually when you need your real connection for a local task.

If you share the PC, remember the VPN app is usually per-user: another Windows account won't inherit your connection or settings, and will need to sign in separately. That's a feature, not a bug — it keeps each person's usage under their own account.

Speed tips specific to Windows

If the VPN feels slow on Windows, work through the cheap wins before blaming the app. Pick a nearby, low-load server — distance is the biggest single factor in speed. Switch the protocol to WireGuard if your provider offers it, since it's typically faster and lighter than OpenVPN on Windows. And check you don't have a second security tool trying to inspect the same traffic, which can add overhead.

One Windows-specific gotcha: leftover virtual network adapters from a previous VPN can conflict with a new one. If you've had several VPNs installed over time, open Device Manager, look under network adapters for old TAP or WireGuard entries belonging to apps you've removed, and uninstall them. A single clean adapter for your current VPN avoids a class of odd, hard-to-diagnose connection failures.

Bottom line

On Windows, the official app is the route to take: install it, sign in, connect, then turn on the kill switch and auto-connect, and let it launch at startup. The built-in Windows VPN client is there for manual configurations — a work VPN or a provider without an app — and lacks a kill switch of its own, so it isn't the choice for everyday privacy. Any Windows edition works; you do not need Windows Pro for a consumer VPN app, and Home handles everything described here. If you set it up and the quick IP check shows the server's location rather than your own, you're done. Keep automatic updates on, and if a connection ever fails, switching servers and updating the app clears the large majority of problems before you need to touch the firewall or protocol.