How to set up a VPN on Windows 11

If you have bought a personal VPN subscription, begin with the provider’s Windows app. If your IT department has sent a server address, VPN type and sign-in instructions for the Windows client, use the built-in profile instead. The choice matters. Typing your provider’s homepage into Windows’ server field will not tell Windows which VPN protocol or credentials to use.

Install a provider’s desktop app

Download the installer from the service you subscribed to. If the download page offers different processors, open Settings → System → About and read System type. Pick the matching installer, such as an ARM build for an Arm-based PC when the provider offers one. Approve the installation only if the publisher matches the software you expected.

Open the app from Start, sign in and make one automatic connection. In Proton VPN’s Windows app, for example, Connect makes the default connection and the app displays the chosen location. Changing to a specific city can depend on the plan. Leave the protocol on its automatic setting for the first attempt so you have a baseline.

A Chrome or Edge extension has a narrower scope than the desktop client. If your aim is to route a game launcher or your email software through the VPN, check the Windows app’s split-tunnelling list for exclusions. A browser extension alone will not cover those other programmes.

Add a Windows VPN profile when you have the details

1. Get the server name or address, VPN type and sign-in method from your service or IT team. Check whether there are separate credentials for manual connections. If the instructions supply a file for a particular client, follow those instructions.
2. Go to Settings → Network & internet → VPN and choose Add VPN. In the provider field select Windows (built-in). Give the connection a recognisable name such as “Office access”.
3. Enter the server details and sign-in method exactly as supplied. This may involve a certificate or a one-time code rather than a saved password. Leave workplace security settings as instructed.
4. Save the profile. Return to VPN, find that connection and select Connect. Complete any authentication prompt. For a recognised profile, Windows shows the connection state on this screen.

Check the result that matters

For a consumer VPN, compare your public address in the same browser before and after connecting. Keep the underlying Wi-Fi unchanged and refresh What can they see?. A new address associated with the VPN route is evidence that this browser request took that route. If the map still says London, look at the address and network rather than the city.

For a work VPN the meaningful test may be opening an approved internal service. Some employers intentionally send only office traffic down the tunnel. In that case your usual public address can still appear while the internal service becomes reachable. Ask IT which result to expect before diagnosing a fault.

Pin down a failure without resetting the PC

If the fault persists, record the Windows version, app version, connection type, approximate time and displayed error. That gives the provider more to act on than “the internet is slow”, without sending a password or private browsing history. For further tests, use the VPN diagnostics guide.

Windows references

• Microsoft’s instructions for Windows VPN profiles
• Proton’s Windows app and connection options