How to set up a VPN, step by step

For almost everyone, setting up a VPN means installing one app and pressing a button. You pick a provider, download their official app for your device, sign in, and click Connect. The complicated, certificate-and-config version you may have read about is only needed for routers or systems without an app — which we cover separately.

This page is the master guide. It walks through the universal four steps, shows what differs on each platform, explains the two or three settings that are worth turning on straight away, and ends with a 60-second check so you can confirm the VPN is doing its job. Throughout, we keep one honest point in view: a VPN encrypts your traffic and hides your IP address from the sites you visit and from your network — it does not make you anonymous or untraceable.

What you need before you start

You need three things: a device, an internet connection, and an account with a VPN provider. That is it. You do not need to change any network settings by hand, you do not need admin-level networking knowledge, and you do not need to understand encryption to use one. If you can install an app and remember a password, you can set up a VPN — the provider's software does the technical part for you.

Choosing a provider is the one decision that matters. Look for a company that publishes an independent security audit, states a clear no-logs policy, and offers an app for your device. Well-known paid options include NordVPN, Surfshark and ExpressVPN; Proton VPN also has a genuinely free tier with no data cap, which is a good, no-risk way to learn the steps. We also rate Mullvad and Windscribe highly for their clean setup experience even though neither pays us a referral — some of the provider links on this site are affiliate links, and naming two that pay us nothing is the point (see our affiliate disclosure). Prices change constantly and are region- and term-specific, so always check the current price on the provider's own page rather than trusting a number in an article.

The four steps that work on almost any device

Every app-based setup follows the same shape, whether you are on a laptop or a phone. Here is the sequence:

1. Sign up and pay (or start the free tier) on the provider's website. Use the provider's own site, not a search ad, to avoid lookalike pages.
2. Download and install the official app for your platform — from the provider's site or your device's app store.
3. Open the app and sign in. The first time you connect, your operating system asks permission to add a VPN configuration — approve it. That prompt is normal and expected.
4. Press Connect. Most apps default to the fastest nearby server. When the status reads connected, your traffic is now going through the VPN.

That is the whole thing. Everything below is refinement: doing it well on your specific platform, turning on the safety settings, and verifying the result.

Setup by platform: what's actually different

The steps are the same everywhere; only the small details change — where you get the app, what the permission prompt looks like, and where the kill switch lives. This table is the quick reference, and each platform has a full walkthrough linked from it.

Read the detailed walkthrough for your device: set up a VPN on Windows, on Mac, on Linux, on Android, or as a browser extension. Using a Chromebook? See how to use a VPN on a Chromebook.

The browser-extension trap

A browser VPN extension is not the same as a VPN app, and a lot of setup advice glosses over this. An extension only routes the traffic of that one browser. Everything else on your device — other browsers, email clients, system updates, background apps — is still using your normal connection. If you install a Chrome extension and think your whole computer is protected, it is not. Use an extension for quick, browser-only tasks; use the app when you want the whole device covered.

Turn on the settings that matter

Out of the box a VPN will connect, but two or three settings turn a basic connection into a reliable one. Set these once and forget them.

The kill switch is the important one. It blocks your internet if the VPN drops, so your real IP is never exposed during a reconnect. Many apps ship with it off, so switching it on is a genuine part of setup, not an advanced extra. We explain the options in how to set up a VPN kill switch.

Auto-connect tells the app to connect on its own whenever you join an untrusted network — the single most useful setting for anyone who uses public Wi-Fi. On phones, the operating system's own Always-on VPN option enforces this device-wide.

The protocol is usually best left on automatic, but if you want to choose, WireGuard is a sensible modern default for speed and battery. The rest of the first-run choices are covered in our first-time VPN settings guide.

Check it actually worked

Do not assume a green icon means everything is routed correctly. A 60-second check confirms it, and you should repeat it after any setup on any device.

1. With the VPN connected, search 'what is my IP' and open any results page. The IP and location shown should be the VPN server's, not your own city.
2. Run a DNS leak test on a site like dnsleaktest.com. The servers it reports should belong to the VPN, not your internet provider.
3. Open the app's settings and confirm the kill switch shows as on. If it is, your first-time setup is complete.

App or manual setup — which should you use?

Use the official app. For more than 95% of people it is the correct choice, and it is what every step above assumes. The app keeps its server list current, maintains the kill switch, applies updates, and lets you switch locations with one tap.

Manual setup — importing an OpenVPN or WireGuard configuration file into your operating system's built-in VPN client — is only worth it in specific cases: a router that has no app, an operating system the provider does not support, or a workplace that hands you a config file. Manual profiles do not carry a kill switch of their own and will not auto-update, so you take on that maintenance yourself. If you do not have a reason to go manual, do not.

What setting up a VPN does — and does not — do

A correctly set-up VPN encrypts the connection between your device and the VPN server, and replaces your IP address with the server's. That stops your network operator and the sites you visit from seeing your real IP, and protects your traffic on untrusted Wi-Fi.

It does not make you anonymous. Your VPN provider can technically see your traffic, which is why an audited no-logs policy matters. You are still signed into accounts, still identifiable by browser fingerprint, and still bound by the law. A VPN shifts trust from your network to your provider — a real benefit, but a shift, not an invisibility cloak. Anyone promising 'total anonymity' from a setup guide is overselling it.

If it won't connect

Most first-time connection problems come from a firewall, an outdated app, or a busy server. Switch to a different server, update the app, and allow it through your firewall — that clears the majority of cases. Our full checklist is in VPN won't connect: fixes. Once you are connected, how to use a VPN covers the day-to-day: choosing locations, when to leave it on, and when to switch it off.

Set it up on more than one device

One account usually covers several devices, so you don't buy a separate plan per gadget. Most providers allow a number of simultaneous connections — commonly five to ten, and some offer unlimited — which means you install the same app on your laptop, phone and tablet and sign in with the same login on each. Set the important ones up the same way: install, sign in, connect, then turn on the kill switch and auto-connect.

If your household has more devices than your plan allows connections, prioritise the ones that travel or use public Wi-Fi, since those benefit most. A device that never leaves a trusted home network is lower priority. Devices without their own app — some smart TVs, games consoles or streaming sticks — are a different setup entirely and are best handled at the router level rather than per device, which is beyond the scope of this app-based guide.

Keep the setup healthy

A VPN setup isn't quite set-and-forget. Turn on automatic updates for the app, because outdated clients are the single biggest cause of connections that suddenly stop working. Once a month, repeat the quick check from earlier — connect and confirm your IP changes — so you catch a silent problem before you rely on the VPN somewhere it matters. And when you get a new phone or reinstall your operating system, redo the first-time settings; a fresh install won't remember that you had the kill switch on. None of this takes long, and it's the difference between a VPN you trust and one you only hope is working.