How to Set Up a VPN on Any Device in 2026 — Complete Guide
Before You Start — Choosing a VPN
Before diving into setup instructions, you need a VPN subscription. We recommend NordVPN or Surfshark for most users — both offer native apps for every major platform, use modern protocols, and provide step-by-step setup guides within their apps.
If you already have a VPN subscription, make sure you have your account credentials ready. Some providers use separate "service credentials" for manual protocol configuration (different from your website login), so check your account dashboard if needed.
Setting Up a VPN on Windows
Method 1: Native App (Recommended)
1. Download the VPN app from your provider's official website (not third-party download sites) 2. Install the application — accept the default settings unless you have specific requirements 3. Log in with your VPN account credentials 4. Select a protocol: Go to Settings and choose NordLynx (NordVPN) or WireGuard (Surfshark/others). These offer the best speed and security balance 5. Enable the kill switch: In Settings, find the Kill Switch option and turn it on. This prevents data leaks if the VPN drops 6. Connect: Click the Quick Connect button or choose a specific country/server from the map or list 7. Verify: Visit a site like ipleak.net to confirm your IP address shows the VPN server's location, not your real one
Method 2: Manual WireGuard Configuration
For advanced users who prefer the standalone WireGuard client:
1. Download WireGuard from wireguard.com 2. Generate a WireGuard configuration file from your VPN provider's dashboard 3. Open WireGuard, click "Import tunnel(s) from file," and select the .conf file 4. Click "Activate" to connect
Optimizing Windows Settings
- Disable IPv6 in Network Adapter settings if your VPN does not support it (to prevent IPv6 leaks) - Set DNS manually to your VPN provider's DNS servers as a backup: Network Settings → Change adapter options → Properties → IPv4 → Use the following DNS server addresses - Enable auto-connect in the VPN app so the VPN starts when Windows boots
Setting Up a VPN on macOS
Method 1: Native App
1. Download the VPN app from the provider's website or the Mac App Store 2. Install and grant the necessary permissions — macOS will ask to allow a VPN configuration and possibly a system extension 3. Log in with your credentials 4. Select protocol: Choose WireGuard or NordLynx in the app settings. IKEv2 is also a solid choice on macOS 5. Enable kill switch: Turn on the kill switch in settings. On macOS, this typically uses the Network Extension framework 6. Connect and verify at ipleak.net
macOS-Specific Notes
macOS's built-in firewall does not interfere with VPN apps, but if you use Little Snitch or another third-party firewall, you may need to create rules allowing VPN traffic. The VPN app itself will prompt for permissions during installation.
The Mac App Store version may have slightly fewer features than the direct download version due to Apple's sandboxing requirements. For full functionality (including split tunneling), download directly from the provider's website.
Setting Up a VPN on iPhone / iPad (iOS)
Method 1: App Store App
1. Download the VPN app from the App Store 2. Open the app and log in with your credentials 3. Allow VPN Configuration: iOS will ask "App would like to add VPN configurations." Tap Allow and authenticate with Face ID/Touch ID 4. Select protocol: Choose IKEv2 or WireGuard in the app settings. IKEv2 is particularly good on iOS due to native system integration 5. Enable kill switch: Look for "Kill Switch" or "Block connections without VPN" in settings 6. Enable auto-connect: Set the VPN to connect automatically when joining WiFi networks (especially important for public WiFi) 7. Connect and verify your IP at ipleak.net in Safari
iOS-Specific Tips
- Enable On-Demand VPN in iOS Settings → VPN → tap the (i) next to your VPN → Connect On Demand. This ensures the VPN reconnects automatically after network changes - iOS's built-in VPN status icon (the "VPN" label in the status bar) provides a quick visual confirmation that your connection is active - If the VPN disconnects when your iPhone sleeps, enable "Connect On Demand" and check that battery optimization is not killing the VPN app in the background
Setting Up a VPN on Android
Method 1: Play Store App or APK
1. Download from Google Play Store or your provider's website (APK for sideloading if Play Store is unavailable) 2. Install and log in 3. Grant permissions: Android will ask to allow VPN connections. Tap OK 4. Select protocol: Choose WireGuard for best performance. Android's WireGuard implementation is excellent 5. Enable kill switch: Two options: - App-level kill switch: Enable within the VPN app settings - Android system-level: Go to Settings → Network → VPN → tap the gear icon next to your VPN → enable "Always-on VPN" and "Block connections without VPN." This is the most secure option as it is enforced by the OS 6. Enable auto-connect: Set the VPN to activate on all networks or on untrusted WiFi only 7. Connect and verify at ipleak.net
Android-Specific Tips
- Using Android's built-in "Always-on VPN" with "Block connections without VPN" is the strongest kill switch available on any platform — it prevents any app from accessing the internet without the VPN, even during boot - Split tunneling on Android lets you exclude specific apps from the VPN (useful for banking apps that block VPN connections) - If your battery drains faster with VPN active, switch from OpenVPN to WireGuard — it uses significantly less battery due to lower CPU overhead
Setting Up a VPN on Your Router
Router-level VPN setup protects every device on your network, including smart TVs, gaming consoles, IoT devices, and guests. Here is a summary of the process:
Compatible Routers
| Router Type | Difficulty | VPN Support |
|---|---|---|
| Asus (Merlin firmware) | Easy | Built-in VPN client |
| GL.iNet travel routers | Easy | Built-in WireGuard/OpenVPN |
| Netgear (select models) | Medium | OpenVPN via admin panel |
| DD-WRT compatible | Medium | OpenVPN via custom firmware |
| OpenWrt compatible | Advanced | WireGuard or OpenVPN |
Basic Steps (Asus Router Example)
1. Log into your router at 192.168.1.1 2. Go to VPN → VPN Client 3. Upload the .ovpn configuration file from your VPN provider 4. Enter your VPN service credentials 5. Set DNS to "Strict" to prevent DNS leaks 6. Activate and verify at ipleak.net from any connected device
For detailed router instructions, see our dedicated router VPN setup guide.
Choosing the Right Protocol
| Protocol | Speed | Security | Battery Usage | Best For |
|---|---|---|---|---|
| NordLynx | Fastest | Excellent | Low | NordVPN users |
| WireGuard | Very fast | Excellent | Low | General use |
| IKEv2 | Fast | Very good | Low | iOS, mobile |
| OpenVPN (UDP) | Moderate | Excellent | Medium | Firewall bypass |
| OpenVPN (TCP) | Slow | Excellent | High | Restrictive networks |
Enabling and Testing the Kill Switch
A kill switch is a critical VPN feature that blocks all internet traffic if the VPN connection drops, preventing your real IP from being exposed even momentarily.
How to test your kill switch: 1. Connect to the VPN and open ipleak.net — note the VPN IP 2. Open your system's network settings and manually disconnect the WiFi or Ethernet adapter 3. Reconnect the adapter — your browser should show no internet until the VPN reconnects 4. If you can access any website during the brief disconnection, your kill switch is not working properly
Auto-Connect Settings
Configure your VPN to connect automatically in these scenarios: - On boot/startup: Ensures protection from the moment your device turns on - On untrusted WiFi: Automatically activates when joining networks that are not in your trusted list - Always: The safest option — VPN is always active
Most VPN apps offer granular auto-connect options. At minimum, enable auto-connect for all WiFi networks outside your home.
IP and DNS Leak Testing
After setting up your VPN, perform these tests to verify everything works correctly:
1. IP leak test: Visit ipleak.net or whatismyip.com — your displayed IP should match the VPN server's location, not your real one 2. DNS leak test: Visit dnsleaktest.com and run the extended test. All DNS servers listed should belong to your VPN provider, not your ISP 3. WebRTC leak test: Visit browserleaks.com/webrtc — your real IP should not appear. If it does, disable WebRTC in your browser or use the VPN's browser extension which typically blocks WebRTC leaks 4. IPv6 leak test: Visit test-ipv6.com — if your VPN does not support IPv6, the test should show no IPv6 connectivity (which means IPv6 is properly blocked)
Run these tests periodically, especially after VPN app updates or OS updates that may reset network configurations.
