Whether you’re connecting to a work network remotely, protecting your traffic on public WiFi, or accessing region-locked content securely, Windows makes setting up a VPN straightforward — no third-party software required, unless you specifically want one. Windows 11 and 10 both include a built-in VPN client that works with most providers and workplace networks.
Quick answer: To set up a VPN in Windows 11, go to Settings > Network & internet > VPN, select Add VPN, choose Windows (built-in) as the provider, enter the connection name and server address given by your VPN service or IT department, then select Save. Connect afterward from the same VPN page, the taskbar network icon, or Quick Settings (Windows key + A). If you’re using a consumer VPN service, installing that provider’s own app is usually faster and requires no manual configuration at all.
Below is the complete setup process, how to choose the right protocol, how to secure the connection properly, and fixes for the most common VPN errors.
Two Ways to Set Up a VPN: Which One Do You Need?
| Situation | Recommended Method | Setup Difficulty |
|---|---|---|
| Personal VPN subscription (privacy, streaming, public WiFi protection) | Provider’s own app | Easiest |
| Work or company VPN | Windows built-in client (manual setup) | Moderate |
| Self-hosted VPN (WireGuard, OpenVPN server you run yourself) | Provider or protocol-specific app | Moderate |
| No app available for your provider, or IT gave you server details directly | Windows built-in client (manual setup) | Moderate |
Method 1: Install Your Provider’s App (Fastest for Personal VPNs)
If you’ve subscribed to a consumer VPN service, this is almost always the simpler and more secure path, since the app handles protocol selection, server switching, and security settings automatically.
- Subscribe to a reputable VPN provider and get your account credentials
- Download the provider’s Windows app from the Microsoft Store or directly from the provider’s official website
- Run the installer and sign in with your account
- Choose a server location from the app’s list and select Connect
There’s generally no need to touch Windows’ built-in VPN settings at all with this method, since the app manages the connection independently.
Method 2: Set Up a VPN Using Windows’ Built-In Client
This is the right approach for a work VPN, a self-hosted server, or any provider that doesn’t offer its own dedicated app.
1. Open VPN Settings
Press Windows key + I to open Settings, then select Network & internet, followed by VPN.
2. Add a New VPN Connection
Select Add VPN. In the form that appears:
- For VPN provider, choose Windows (built-in)
- In Connection name, enter something you’ll recognize later, such as “Work VPN” or “Home Network”
- In Server name or address, enter the address given to you — this can be a domain (such as vpn.company.com) or an IP address
- For VPN type, select Automatic to let Windows negotiate the protocol, or choose the specific protocol your provider or IT department requires (see the protocol section below)
- For Type of sign-in info, select how you’ll authenticate — typically User name and password, though certificate-based and smart card options are also available for business networks
- Optionally enter your username and password now, or leave these blank and Windows will prompt you each time you connect
- Select Save
3. Connect to the VPN
Once saved, you can connect in any of these ways:
- From Settings: Return to Network & internet > VPN, select your connection, and select Connect
- From Quick Settings: Press Windows key + A, select the VPN button, choose your connection, and select Connect
- From the taskbar: Select the network icon in the system tray, choose your VPN entry, and select Connect
Choosing the Right VPN Protocol
If your provider or IT department specifies a protocol rather than leaving it on Automatic, here’s what each option generally offers:
| Protocol | Security Level | Best For |
|---|---|---|
| IKEv2 | Strong | Mobile devices and networks that switch frequently, due to fast reconnection |
| SSTP | Strong | Networks with strict firewalls, since it runs over standard web traffic ports |
| L2TP/IPsec | Good | Older or basic business VPN setups; requires a pre-shared key |
| PPTP | Weak — avoid if possible | Legacy compatibility only; largely considered outdated and insecure today |
If you’re not sure which to pick and Automatic isn’t working, IKEv2 is generally the strongest, most broadly supported modern choice for both work and personal use.
How to Keep Your VPN Connection Secure
Setting up a VPN is only half the job — using it securely matters just as much:
- Choose a reputable provider. For personal VPNs, research the provider’s logging policy and security track record before subscribing, since a VPN is only as trustworthy as the company running it
- Avoid PPTP whenever an alternative is available, since it has known security weaknesses by modern standards
- Use strong, unique credentials for your VPN account, separate from passwords used elsewhere
- Enable your VPN before joining public WiFi, such as at a coffee shop or airport, rather than connecting to the network first and the VPN second
- Check for DNS leaks occasionally using an online DNS leak test, which confirms your DNS requests are actually routing through the VPN rather than leaking to your regular internet provider
- Keep Windows updated, since VPN-related security patches are sometimes included in routine system updates
Configuring L2TP/IPsec With a Pre-Shared Key
L2TP/IPsec connections often require an additional shared secret beyond the standard username and password.
- Go to Settings > Network & internet > VPN
- Select your VPN connection, then select Advanced options
- Select Edit
- Enter the pre-shared key provided by your VPN service or IT department in the appropriate field
- Select Save
Common Problems and How to Fix Them
VPN Won’t Connect at All
- Double-check the server address for typos, since even a small error prevents a connection
- Confirm your internet connection is working normally without the VPN active
- Try switching the VPN type from Automatic to a specific protocol, such as IKEv2, since some networks block certain protocols by default
- Restart your PC and try connecting again, since a stuck network adapter is a common, simple cause
“The Remote Connection Was Not Made” Error
This generic error usually points to either an incorrect server address, a firewall blocking the connection, or an expired/incorrect credential.
- Reconfirm your connection details directly with your VPN provider or IT department
- Temporarily disable third-party antivirus or firewall software to test whether it’s interfering with the connection
- If you’re on a work VPN, confirm your account hasn’t been locked or your password hasn’t expired
VPN Connects but You Have No Internet Access
- Check your DNS settings, since a misconfigured DNS is a frequent cause of this specific issue on work VPNs
- Go to Network Connections (press Windows key + R, type
ncpa.cpl, and press Enter), right-click your VPN adapter, and check its Internet Protocol Version 4 (TCP/IPv4) properties for any DNS settings that may need adjusting - Contact your IT department if this is a work VPN, since internal DNS configuration is often something they need to confirm on their end
Frequent Disconnections
- Switch from Automatic to IKEv2 specifically, since it’s designed to reconnect quickly and handle network changes more gracefully than some other protocols
- Check whether your PC’s sleep or power-saving settings are disconnecting the network adapter during periods of inactivity
- If you’re on WiFi, try a wired connection to rule out WiFi instability as the underlying cause
Frequently Asked Questions
How do I set up a VPN in Windows 11 without a provider’s app? Go to Settings > Network & internet > VPN, select Add VPN, choose Windows (built-in) as the provider, and enter the connection name, server address, and protocol given to you. This works for both work VPNs and personal VPN services that don’t offer a dedicated Windows app.
What’s the difference between using a VPN app and Windows’ built-in VPN client? A provider’s own app typically handles protocol selection, server switching, and security settings automatically, making it the simpler choice for personal VPN subscriptions. The built-in Windows client requires manually entering connection details and is generally used for work VPNs or providers without their own app.
Which VPN protocol is the most secure in Windows? IKEv2 and SSTP are both considered strong, modern options. PPTP is available for legacy compatibility but has known security weaknesses and should be avoided if any alternative protocol is offered instead.
Why won’t my VPN connect in Windows? The most common causes are an incorrect server address, the wrong VPN type selected, or a firewall blocking the connection. Double-checking your connection details and trying a specific protocol instead of Automatic resolves most connection failures.
Can I use a VPN on Windows without slowing down my internet? Some speed reduction is normal with any VPN, since your traffic is being encrypted and routed through an additional server. Choosing a server location closer to you and using a modern protocol like IKEv2 typically minimizes the impact compared to older protocols.
How do I set up a VPN for a work network in Windows? Your IT department will typically provide a server address, protocol, and authentication method. Enter these under Settings > Network & internet > VPN > Add VPN, selecting Windows (built-in) as the provider, and contact your IT team directly if you’re unsure which specific settings to use.
Is Windows’ built-in VPN client as secure as a paid VPN app? The built-in client itself is secure when configured with a strong protocol like IKEv2 or SSTP, since it’s handling the same underlying encryption standards. The bigger security factor is which VPN service or server you’re actually connecting to, not whether you used the built-in client or a dedicated app to configure it.
A secure VPN connection is one part of keeping your Windows PC well protected overall. If your antivirus definitions haven’t been checked recently, our guide on updating Windows Security signatures manually covers a related security task worth pairing with your VPN setup. And if you access work resources remotely alongside your VPN, see our guide on connecting to your PC remotely on Windows for related settings worth knowing.