For a personal VPN, install the provider’s official Windows app, sign in, select a server, and connect. For work or a manually supplied VPN, use Windows 11’s built-in profile with the exact server address, VPN type, and sign-in details from your employer or provider. Start by confirming which of those two situations applies to you.
A provider app is usually easier because it handles servers, protocols, automatic connection, and features such as a kill switch. Windows’ built-in client is useful when IT or a VPN provider gives you the required connection details. Windows 11 SE does not include the built-in VPN profile feature.
Key takeaways
- Use the provider app for most personal VPN subscriptions.
- Get the exact server, VPN type, credentials, and certificate from IT for a work VPN.
- Download only from Microsoft Store or the provider’s official website.
- Confirm that the app or Windows says “Connected” before changing always-on settings.
- Test important sites and apps during the refund period.
- Record the renewal date, renewal amount, and refund deadline.
Should you use a Windows VPN app or the built-in VPN?
Choose a provider app when you have a personal subscription and want the shortest setup. The app usually supplies the provider’s server list, supported protocols, automatic server selection, auto-connect, split tunneling, kill switch, and account controls. NordVPN, Surfshark, ExpressVPN, and Proton VPN each publish Windows installation paths for their own apps.
Choose Windows’ built-in VPN when your employer or provider gives you manual connection details. Microsoft’s path is Settings → Network & internet → VPN → Add VPN. Select Windows (built-in), enter a connection name, server name or address, VPN type, and sign-in method, then save.
The built-in client does not include a consumer VPN subscription or a universal server list. The correct protocol and credentials must come from the VPN operator. Depending on the connection, the sign-in method may use a username and password, one-time password, certificate, or smart card.
For a personal VPN, the provider app is the practical choice. For work, use the exact settings supplied by IT, even when the app looks simpler. If the company requires a certificate or a particular VPN type, ask IT for the server address, VPN type, credentials, certificate, or required app before changing Windows settings.
How do you install a VPN app on Windows 11?
First confirm that the provider supports your version of Windows 11 and that you have enough account access to sign in. Download the installer from the provider’s official website or Microsoft Store when a Store version is available. Avoid installers from download directories or unofficial links.
The usual sequence is:
- Download the official Windows installer.
- Open it and approve the Windows permission prompt.
- Complete the installation wizard.
- Launch the app and sign in.
- Select Connect, Quick-connect, or the provider’s equivalent.
- Confirm that the app reports a connected or protected state.
NordVPN says its Windows app supports Windows 10 64-bit and Windows 11. Its installation sequence uses NordVPNInstall.exe, followed by the Windows permission prompt, Next, and Install. After launching the app, sign in through the Nord Account page and select Secure my connection. You can visit NordVPN if that is the provider you selected.
Surfshark’s Windows instructions say to download the official app, choose the installer for the computer’s processor architecture, install it, sign in, and select Quick-connect. Surfshark’s Windows guide was updated September 11, 2026. Its app is the better fit if you want provider-managed locations and protocol choices.
ExpressVPN’s setup page asks you to select Windows and Download Now. The setup may provide an activation code, then ask you to sign in with an email link, password, or activation code. ExpressVPN also supports connecting on launch and configuring auto-connect by network type. Its official ExpressVPN site is the correct starting point for the installer.
Proton VPN says its Windows installer supports Windows 10 and newer, including an ARM64 download. Run the correct installer, approve the permission prompt, complete the wizard, and sign in with a Proton account. Proton’s official VPN site provides the current Windows download and plan choices.
If the provider does not publish a Windows app for your version, use the built-in profile only when the provider supplies the exact manual settings. Do not guess the server address or VPN type.
What will the VPN cost, and what is free or renewed?
A free tier, free trial, and money-back window are different. A free tier has no subscription charge but usually has fewer locations or features. A free trial may provide paid features for a set period. A money-back window means you pay first and request a refund under the provider’s terms.
The following figures are for the US region and were checked on October 28, 2026.
Surfshark states that its two-year subscriptions are paid at the beginning and renew annually after the initial period. The $67.23 and $107.73 totals are introductory payments, not renewal prices. Surfshark provides a 30-day money-back guarantee, and VAT may apply.
Proton VPN’s free plan includes unlimited data, one simultaneous device, DNS leak protection, and free servers in 10 countries. It is a free tier, not a paid trial or money-back offer. Paid Proton plans have a 30-day money-back guarantee. Before paying, review the final Proton checkout screen for the current US plan name, amount due, billing interval, renewal amount, and refund terms.
ExpressVPN states that new users receive a 30-day money-back guarantee for eligible direct purchases. Purchases billed through Google Play or Apple’s App Store follow the relevant app-store refund process instead. Read the applicable renewal amount and billing interval on the ExpressVPN checkout page before paying.
NordVPN’s prices change often, so read the current NordVPN checkout and renewal terms before paying, including the plan name, US amount due upfront, effective monthly figure, renewal price, billing interval, and refund window.
Keep the renewal date and refund deadline somewhere you will see them. During the provider’s refund period, test the sites and applications that matter to you before deciding whether to keep the subscription.
How do you connect, confirm, and keep the VPN on?
Open the provider app and select Connect or Quick-connect. The app should show a connected, protected, or similar status. Windows also shows Connected below a saved VPN profile, and Microsoft says a blue VPN shield appears on the taskbar when a recognized VPN is connected.
Test an ordinary website, then test the services you actually plan to use. Check work applications, school services, banking, streaming, games, or file tools before enabling always-on behavior. A VPN can change how a service handles your connection, and some applications do not work properly through every VPN server.
Auto-connect is useful when you want the VPN to start on untrusted Wi-Fi or whenever Windows starts. A kill switch blocks traffic when the VPN disconnects, but it can also make the internet appear broken until the VPN reconnects. Test both features before relying on them.
Keep the provider’s renewal date and refund deadline. If your main concern is battery use, see Does a VPN Drain Your Battery? What Uses Less before choosing an always-on setting.
What should you do when the VPN will not connect or breaks the internet?
Start with the least disruptive checks. Disconnect the VPN and confirm that ordinary internet access works. Then reconnect using another location instead of Quick-connect. A single server can be unavailable or unsuitable for the network you are using.
Update the VPN app. If the provider supports several protocols, try another one. Surfshark documents switching among WireGuard, OpenVPN UDP, and OpenVPN TCP. NordVPN documents changing the protocol to Auto and trying specific countries. A different protocol can help when a network blocks or interferes with one connection type.
Check whether antivirus software is blocking or quarantining the VPN app. Review its exclusions without disabling protection broadly. Remove or disable other VPN applications because their virtual adapters and filtering rules can interfere with one another.
Try another network, such as a phone hotspot. If the VPN works there, the current Wi-Fi, workplace network, school network, or router may restrict VPN traffic. Follow the provider’s current Windows troubleshooting guide or contact its support team if the problem continues.
If Windows Firewall blocks the app, open Windows Security → Firewall & network protection → Allow an app through firewall. Allowing the app is safer than opening a port. Microsoft warns that opening ports increases exposure, so do not open one unless the provider or administrator gives a specific reason.
Surfshark documents disabling IPv6 because its service does not currently support IPv6. Change that setting only when the provider’s instructions call for it. NordVPN documents updating the app, checking antivirus exclusions, changing protocol settings, restarting, and using its diagnostic network reset.
Use Windows’ Get Help app to run the Network and Internet troubleshooter. Save network reset for later. Windows 11 places it under Settings → Network & internet → Advanced network settings → Network reset. Microsoft says network reset removes installed network adapters and restores their settings to defaults, and VPN software may need to be reinstalled afterward.
If the app stays on Connecting, Windows shows no internet after connection, or another adapter appears to be interfering, use VPN Not Connecting? Fixes for Phone, PC and Wi-Fi for the next troubleshooting steps.
What can and cannot a Windows VPN do?
A VPN encrypts the connection between your Windows device and the VPN server. It also changes the IP address that websites see. This can help when you need a work connection, want to use a provider’s network, or want to reduce the information visible to the local network or ISP.
It does not make you anonymous. Logged-in accounts, cookies, and device fingerprints can still identify you. The FTC warns that a VPN app can intercept internet traffic, so using one shifts trust from the local network or ISP to the VPN provider.
A VPN does not replace HTTPS, operating-system updates, antivirus protection, phishing protection, strong passwords, or account security. It does not prevent malware, browser fingerprinting, every form of tracking, or the provider from technically seeing traffic that passes through its service.
A kill switch can block traffic when the VPN disconnects, but it applies only when enabled and working. Split tunneling can send selected apps or IP addresses outside the VPN. Check those settings before assuming every Windows program uses the tunnel.
Will a VPN work for privacy, streaming, banking, or school?
A VPN can fit a specific privacy, work, or location need, but the service you use still controls access. Streaming providers increasingly block connections that appear to use a VPN. Netflix says VPN use can trigger a VPN or proxy error, and it does not support VPN connections for live events or an ad-supported experience.
If Netflix shows a proxy message, work through the Netflix proxy error fixes. A different server may work temporarily, but no provider can guarantee access to every streaming catalog or service.
For banking, school, work, and gaming, use the country and server that match the service’s requirements. A bank may challenge or block an unfamiliar location. A workplace may require its own VPN, certificate, or approved app. A nearby server generally reduces distance-related latency, but it may not be the best choice for every application.
Privacy claims should be read at the provider level. NordVPN says Deloitte Audit Lithuania assessed its IT systems, supporting infrastructure, and no-logs claims at the end of 2024. Surfshark says Deloitte’s 2025 assurance reviewed evidence, server configurations, deployment processes, and privacy procedures. ExpressVPN says KPMG’s February 28, 2025 assessment covered TrustedServer and privacy-policy controls under ISAE (UK) 3000. Proton VPN says Securitum’s 2026 audit reviewed production infrastructure, procedures, staff practices, and logging-related controls. Each audit covers the named provider and stated scope, not every VPN service.
What should you choose for your Windows setup?
Use a provider app if you want a personal VPN working quickly with automatic server selection, account controls, and optional connection features. Proton’s free plan is a reasonable starting point if one device, unlimited data, and 10 free-country locations meet your needs. Its tradeoff is fewer locations and advanced options than paid plans.
Choose a paid subscription when you need more locations, more devices, or provider features that the free tier does not include. Before paying, compare the amount charged upfront with the renewal amount, then test the sites and applications that matter during the refund period. The Free vs Paid VPN: What You Give Up and What You Pay can help with that decision.
Use Windows’ built-in client when an employer or provider supplies exact manual settings. If your main question is what a VPN changes, read What Is a VPN and What Does It Do next. If you are checking rules for a trip or a particular service, read Is Using a VPN Legal and check the current law and service terms for the country and service involved.
Frequently asked questions
Does Windows 11 have a built-in VPN?
Yes. Windows 11 includes a VPN profile feature under Settings → Network & internet → VPN, but it does not include a subscription or server network. You need a work or provider-supplied server address, VPN type, and sign-in details.
How do I set up a VPN on my PC?
For a personal VPN, install the provider’s official Windows app, sign in, and connect. For a manual profile, choose Settings → Network & internet → VPN → Add VPN, select Windows (built-in), and enter the exact settings supplied by your employer or provider.
How do I set my VPN settings?
Edit a saved Windows profile through Settings → Network & internet → VPN, then choose Advanced options → Edit. The provider app normally controls the server, protocol, auto-connect, split tunneling, and kill switch.
How do I know if my VPN is set up?
Windows shows Connected below the VPN profile and a blue VPN shield on the taskbar when connected to a recognized VPN. The provider app should also show a connected or protected status.
Is there a 100% free VPN for Windows?
Proton VPN says its free plan has unlimited data, one simultaneous device, DNS leak protection, and servers in 10 countries. It is a free tier, not a paid trial or money-back offer, and paid plans add locations and features.
Should I set up a VPN on my laptop?
Set one up if you need access to a work network, a specific privacy arrangement, or a required location. You do not need one for every connection, and HTTPS, updates, phishing protection, and account security still matter.
Is a free VPN safe to use?
Safety depends on the provider’s practices, permissions, privacy policy, business model, and technical controls. The FTC warns that some VPN apps may fail to encrypt traffic, request unexpected permissions, or share information with third parties.
What country should I set my VPN to?
Use your own country for ordinary browsing, banking, and services that expect your usual location. Use the country required by your employer or service terms, and choose a nearby location when lower distance-related latency matters.
How do I add a VPN configuration to Windows 11?
Open Settings → Network & internet → VPN → Add VPN. Select Windows (built-in), enter a recognizable connection name, server address, VPN type, and sign-in method, then select Save.
Which free VPN can I use on Windows 11?
Proton VPN publishes a free Windows option with unlimited data, one simultaneous device, DNS leak protection, and free servers in 10 countries. Review the current free-plan limits before signing up.
Is it good to turn on a VPN?
It can be useful for work access, a specific privacy need, or routing traffic through another network. It can also affect streaming, banking, school, work, and gaming services, so test the applications you need before enabling always-on use.
Is it legal to have a VPN?
VPN technology is widely used for lawful work and personal connections, but the law depends on where you use the device and what you do with the connection. Follow the provider’s terms and the terms of the streaming, banking, workplace, school, or gaming service involved.
Glossary
Find more VPN guides on Tunnel Verdict. Have a question about your own setup? Contact us and include your device and the VPN you use.
