How to Set Up a VPN on Windows — 2026 Step-by-Step Guide
Windows supports VPN connections both through provider apps and natively via built-in IKEv2/L2TP support. The app method is fastest and gives you access to features like kill switch, split tunneling, and automatic server selection. Manual methods work without installing extra software.
Method 1: Install the VPN app (recommended)
Download and install your VPN provider's Windows client.
NordVPN, ExpressVPN, and Surfshark have full-featured Windows apps with a kill switch. Enable it in Settings to prevent traffic leaks if the VPN disconnects.
- 1. Download the Windows installer from your VPN provider's website
- 2. Run the .exe installer and follow the prompts
- 3. Open the app and log in
- 4. Click 'Quick Connect' to connect to the fastest available server
- 5. A VPN icon appears in the system tray — right-click for quick options
Enable the kill switch
A kill switch blocks all internet traffic if the VPN drops. In NordVPN: Settings → Kill Switch → turn on Internet Kill Switch. In Surfshark: Settings → VPN Settings → Killswitch → enable. In ExpressVPN: Options → General → Network Lock.
Method 2: Windows built-in VPN (IKEv2 or L2TP)
Works without any app. Go to Settings → Network & internet → VPN → Add a VPN connection.
- Set VPN provider to 'Windows (built-in)'
- Choose connection name (any label), server name (from provider), and VPN type (IKEv2 recommended)
- Under Sign-in info, enter username and password from your VPN provider
- Click Save → click the VPN in the list → Connect
- Note: Built-in VPN has no kill switch; for security-critical use, prefer a VPN app
Method 3: OpenVPN on Windows
- 1. Download the OpenVPN GUI from openvpn.net (free, open-source)
- 2. Download .ovpn config files from your VPN provider
- 3. Right-click the OpenVPN system tray icon → Import file → select the .ovpn file
- 4. Right-click again → Connect → enter credentials when prompted
Method 4: WireGuard on Windows
- 1. Download WireGuard from wireguard.com (free)
- 2. Click 'Import tunnel(s) from file' and select the .conf file from your provider
- 3. Click Activate to connect
- 4. WireGuard on Windows is significantly faster than OpenVPN
Troubleshooting
- TAP adapter error: Reinstall the VPN app — the virtual network adapter needs repair
- Slow speeds: Switch to WireGuard protocol in app settings
- VPN blocking local network: Enable split tunneling or adjust the VPN's local network settings
- Windows Defender flagging VPN: Add the VPN app folder to Defender exclusions
Frequently asked questions
Does Windows 11 have a built-in VPN?
Windows 11 has built-in support for IKEv2, L2TP/IPSec, PPTP, and SSTP protocols. You can add a VPN in Settings → Network & Internet → VPN. However, the built-in client lacks a kill switch and advanced features — third-party apps are recommended for regular use.
What's the best VPN for Windows?
NordVPN has the most feature-complete Windows app including Threat Protection (blocks ads and malware), Meshnet, and split tunneling. ExpressVPN has the fastest speeds. Mullvad is best for privacy, and Surfshark is the best value.
Can I use a VPN with Windows 10?
Yes — all major VPN providers support Windows 10 and 11. The methods are identical. The built-in VPN client in Windows 10 is under Settings → Network & Internet → VPN.