Setting up a VPN sounds technical but most modern VPN apps make it a one button affair. The actual challenge is knowing which protocol to pick, which servers connect fastest, and how to set it up on devices that do not have native VPN support like routers and smart TVs.
This guide covers VPN setup across Windows, Mac, iPhone, Android, and router level deployment. Plus what to know about protocols, leaks, and split tunneling.
Pick a VPN first
Before any setup, you need a VPN service. The setup process differs slightly per provider but the principles are the same. For most users, the choice comes down to:
- Privacy focused, ProtonVPN or Mullvad
- Streaming friendly, NordVPN or ExpressVPN
- Free reliable option, ProtonVPN Free or Windscribe Free
- Cheapest paid, Mullvad at $5/month or NordVPN sales at $3/month
This guide covers the setup process which is similar across all of them.
VPN on Windows
Easiest method, install the VPN provider's app. Sign in. Click connect. Done.
For more control or if you want to use built in Windows VPN, configure manually. Open Settings then Network & Internet then VPN then Add VPN. Enter the connection details your VPN provider supplies, server address, VPN type (usually IKEv2 or L2TP), username and password.
The provider app method is recommended. It handles protocol selection, kill switch, and server switching automatically. The manual method is for advanced users or specific configurations.
VPN on Mac
Same approach as Windows. Install the VPN provider app from their website or the Mac App Store. Sign in. Connect.
For manual setup, System Settings then Network. Click the plus sign at the bottom. Pick VPN as interface. Choose protocol (WireGuard if available, otherwise IKEv2). Enter server details from your provider.
Mac handles VPN connections at the system level. Once connected, every app routes through the VPN automatically. The status bar shows a VPN icon when active.
VPN on iPhone
Download the VPN provider app from the App Store. Sign in. Tap Connect. The first time, iOS asks permission to add VPN configurations to settings. Approve.
Once configured, the VPN can connect from the app or from Settings then VPN. The blue VPN icon appears in the status bar when active.
For always on VPN, go to Settings then VPN. Tap the i next to your VPN config. Enable Connect On Demand. iOS connects to VPN automatically based on rules you set (like always on for cellular, off for trusted WiFi).
VPN on Android
Install the VPN provider app from Play Store. Sign in. Tap Connect. Allow VPN connection request from Android.
Android shows a persistent key icon in the status bar while VPN is active. Battery drain increases slightly when VPN is on.
For always on VPN, Settings then Network & Internet then VPN. Tap the settings gear next to your VPN. Enable Always On VPN. Android reconnects automatically if the VPN drops.
VPN on router (cover every device)
Setting VPN on your router means every device on your network is protected. Smart TVs, gaming consoles, IoT devices that cannot install VPN apps all get covered.
Not all routers support VPN client mode. Check yours. Common compatible routers, Asus models with Merlin firmware, FlashRouters preconfigured with VPN, any router running DD-WRT or OpenWRT.
Setup process varies by router, log into router admin page, find VPN client section, enter VPN provider details (server, protocol, credentials), save. The router connects all traffic through the VPN.
Downside, speeds are typically slower than per device VPN because the router has less powerful processors than a phone or laptop.
Pick the right protocol
| Protocol | Speed | Best for |
|---|---|---|
| WireGuard | Fastest | Modern default for everything |
| OpenVPN | Medium | Maximum compatibility, restrictive networks |
| IKEv2 | Fast | Mobile devices, network switching |
| L2TP/IPSec | Slow | Legacy systems only |
| PPTP | Fast but insecure | Never use, deprecated |
WireGuard is the modern default. Use it unless you have a specific reason not to. OpenVPN is the fallback for restrictive networks like office WiFi or some countries that block VPN.
Enable the kill switch
Kill switch is the safety net that cuts internet entirely if the VPN connection drops. Without it, when VPN fails your real IP leaks until reconnection.
Every major VPN provider app has a kill switch in settings. Turn it on. The default behavior is to block all network traffic if VPN drops. Some apps offer per app kill switch (only blocks specific apps).
Configure split tunneling
Split tunneling lets you choose which apps use the VPN and which use your regular connection. Useful when some apps work poorly with VPN (banking apps, location based services).
VPN provider apps have a split tunneling section in settings. Add apps to the list of bypass. Those apps connect normally, others go through VPN.
Common bypass apps, banking apps (some require domestic IP), streaming apps you want to use locally, work apps that need company VPN access.
Test for leaks
After setting up VPN, verify it actually works. Visit ipleak.net or browserleaks.com. The page shows your visible IP, location, and DNS server.
With VPN on, your visible IP should show the VPN server location, not your real one. DNS should also route through the VPN. If your real IP or real DNS shows, the VPN has a leak.
Most leaks come from WebRTC. Disable it in browser settings or use a browser extension that blocks it.
What is your primary VPN use case, privacy, streaming geo unblocking, or work access? The optimal setup differs depending on the answer.