How to Set Up a VPN Connection on Windows

Windows has a built-in VPN client that does not require extra software for many providers β€” here is how to add and connect to a VPN using only Settings.

  1. Open VPN settings

    Go to Settings > Network & Internet > VPN (or search "VPN settings"), which lists any VPN connections you have already added.

  2. Click "Add a VPN connection"

    For the VPN provider field, choose "Windows (built-in)" unless you are using a dedicated app from your VPN service.

  3. Enter the connection name and server address

    Give the connection a name you will recognize later, then enter the server address or hostname supplied by your VPN provider.

  4. Select the VPN type

    Pick the protocol your provider supports β€” IKEv2, L2TP/IPsec, PPTP, SSTP, or Automatic β€” since choosing the wrong one is a common reason connections fail.

  5. Enter your sign-in information

    Choose the sign-in type (username and password, certificate, or smart card) and enter the credentials your provider gave you.

  6. Save and connect

    Click Save, select the new connection, click Connect, then confirm it worked by checking the network icon or visiting an IP-check site.

Choosing the right VPN type for your provider

Most consumer VPN apps skip this screen entirely by handling the connection through their own client, so the built-in Windows VPN is mainly useful for corporate VPNs or services that hand you raw server credentials for manual setup. The protocol field matters more than it looks β€” if your provider specifies IKEv2 but you select Automatic or a different protocol, the connection can fail outright or connect without actually encrypting traffic correctly.

Troubleshooting a VPN that will not connect

Start by double-checking the username, password, and server address for typos, since these are rejected silently in some setups. Next, confirm the protocol matches what your provider specifies. Firewall or antivirus software can also block VPN ports, so temporarily disabling third-party security software is a useful diagnostic step. If none of that works, check whether your provider actually requires its own app rather than a manual configuration.

Frequently Asked Questions

Should I use the Windows built-in VPN client or my provider's app?

Most paid VPN services recommend their own app because it handles server switching, kill switches, and split tunneling automatically. The built-in Windows client is mainly useful for corporate VPNs or services that only offer manual configuration.

Why does Windows show "Connected" but my IP address has not changed?

Check whether split tunneling is enabled in the connection's advanced settings, and confirm using an IP-check site while the connection is active. A DNS leak is another common cause, which can sometimes be fixed by manually setting DNS under the connection's adapter options.