Search “how to set up a VPN on iPhone” and you’ll land on instructions written for IT admins, full of terms like “device profiles” and “MDM” that don’t apply to you at all. Don’t panic. Most people just want to encrypt their traffic on public Wi-Fi or reach a work network from the couch, and iOS actually makes both of those easy once you know where to tap.
This guide covers both real paths: installing a VPN app from the App Store (what almost everyone should do for personal privacy) and manually configuring a VPN profile in Settings (what you’ll do if your employer or school hands you server details). By the end, you’ll know how to connect, confirm it’s working, and fix it when it isn’t.
What Is a VPN on iPhone?
A VPN (Virtual Private Network) creates an encrypted tunnel between your iPhone and a remote server. Instead of your internet traffic going straight from your phone to the websites and apps you use, it passes through that tunnel first. That hides your activity from anyone else on the same network and masks your iPhone’s IP address.
iOS has VPN support built in, but people end up using it in two very different ways. Most everyday users install a consumer VPN app, sign in, and tap Connect; the app quietly builds the technical configuration for you. The other path, manual configuration, is for connecting to a private work or school network, and it requires you to enter server details yourself. Both methods end up in the same place: Settings > General > VPN & Device Management.
Before You Begin
Make sure you have:
- An iPhone running a recent, supported iOS release (menu wording can vary slightly by version)
- Your Apple ID signed in, if you plan to install a VPN app from the App Store
- A stable Wi-Fi or cellular connection
- For app-based setup: the name of a VPN provider you want to use, and its account login (or a plan to sign up during setup)
- For manual setup: the server address, protocol type, and login credentials from your employer’s or school’s IT department; you can’t guess these
| Requirement | Details |
|---|---|
| Device | An iPhone that supports a current iOS release |
| OS version | A recent iOS version (check in Settings > General > About) |
| Apple ID | Required only for downloading a VPN app from the App Store |
| VPN credentials | Required only for manual work/school configuration |
> Not sure which iOS version you’re running? Check Settings > General > About and look at the Software Version line. If you’re behind, head to Settings > General > Software Update first. An outdated iOS version is a common cause of VPN connection failures.
Two Ways to Use a VPN on iPhone
Before the steps, it helps to see the fork in the road:
- App-based VPN: You install an app like a privacy or streaming-focused VPN service from the App Store. The app handles the technical configuration automatically and just asks for your permission once. This is what almost everyone reading this needs.
- Manual VPN configuration: You go into Settings and type in server details yourself, using a protocol like IKEv2, IPSec, or L2TP. This is typically required only when a company or school gives you specific connection information for their private network.
Both create a “VPN configuration” that lives under Settings > General > VPN & Device Management, where you can see everything installed, switch between profiles, or remove ones you no longer use.
Step-by-Step Guide: App-Based VPN Setup
This is the path most people should follow. It’s faster, skips any technical server details, and works well for privacy on public Wi-Fi or masking your location while traveling.
Step 1: Open the App Store and search for a VPN app
Open the App Store app on your iPhone and tap the search tab. Type “VPN” or the name of a specific provider you already trust or subscribe to.

> Tip: This guide intentionally doesn’t recommend a specific provider. There are many reputable options, and the right one depends on your budget and what you actually need: streaming, privacy, or just public Wi-Fi protection. Read the app’s privacy details on its App Store listing before subscribing.
Step 2: Download and open the app
Tap Get (or the price/subscribe button) next to the app you’ve chosen. Authenticate with Face ID, Touch ID, or your Apple ID password if prompted. Once it finishes installing, tap Open, or find it on your Home Screen.
Expected result: The app launches and shows a sign-in or account creation screen.
Step 3: Sign in or create an account
Most VPN apps require an account, either free or paid. Enter your email and password, or sign up for a new subscription if you don’t already have one. Some apps offer a free tier or trial, so read the terms before committing.
Step 4: Allow the VPN configuration
Tap the app’s Connect button. iOS will interrupt with a system prompt that reads something like “[App Name] Would Like to Add VPN Configurations.” This is iOS asking permission before it lets any app build a VPN tunnel on your device, a small but genuinely useful guardrail.
Tap Allow, then authenticate with Face ID, Touch ID, or your device passcode when asked.

> Warning: If you tap Don’t Allow by mistake, the app won’t be able to connect. Just reopen the app and tap Connect again to trigger the prompt a second time.
Step 5: Connect and confirm
Back in the VPN app, tap Connect (or flip the toggle, depending on the app’s design). Within a few seconds, the app’s status should change to “Connected.”

Expected result: A small “VPN” label appears in the status bar near the top of your screen, and the VPN tile in Control Center turns blue. That’s your confirmation the tunnel is active.
Step 6: Choose a server location (optional)
Most consumer VPN apps let you pick which country or city server you connect through. That’s handy for reaching region-specific content, or simply for picking the server closest to you for better speed. Look for a Locations or Servers tab within the app, tap a location, and the app reconnects automatically.
> Tip: A server physically closer to you generally means a faster connection. If streaming feels sluggish, try switching to a server in your own country instead of a distant one.
Step-by-Step Guide: Manual VPN Configuration
Use this path only if an employer or school has handed you specific connection details for a private network. There’s no app involved here; you’re entering the configuration yourself, directly in Settings.
Step 1: Gather your VPN details
Before starting, contact your organization’s IT or help desk and confirm you have:
- The VPN type (IKEv2, IPSec, or L2TP)
- The server address (something like vpn.yourcompany.com)
- Your account/username and password, or a certificate if required
- A Remote ID, if the network requires one (common with IKEv2)
Don’t guess at these. An incorrect server address is the single most common reason manual VPN setups fail.
Step 2: Open VPN & Device Management
On your iPhone, go to Settings > General. Scroll down and look for VPN & Device Management.

Tap VPN & Device Management, then tap VPN at the top of that screen.

Expected result: You’ll see a screen listing any VPN configurations already installed (empty, if this is your first time) and an option to add a new one.
Step 3: Add a VPN configuration
Tap Add VPN Configuration. You’ll land on a form with a Type selector at the top.

Tap Type and choose one of the following, based on what your IT department told you:
- IKEv2: The most modern and commonly recommended protocol for new manual configurations. It reconnects quickly after switching networks and generally offers the best balance of speed and security.
- IPSec: An older protocol still used by some corporate networks; requires a group name and shared secret in addition to your login.
- L2TP: The oldest of the three, layered over IPSec for encryption. Still supported for compatibility with legacy systems, but rarely the first choice for new setups.
Step 4: Fill in the server details
Back on the Add Configuration screen, enter:
- Description: A friendly name so you recognize it later, like “Work VPN”
- Server: The address your IT team provided
- Remote ID: Required for IKEv2 configurations; usually matches the server address
- Authentication: Choose Username or Certificate, then enter your username and password, or select an installed certificate
> Warning: These fields must match exactly what your organization provided. A single typo in the server address or username will cause the connection to fail silently or time out.
Step 5: Save the configuration
Tap Done in the top-right corner. You’ll be returned to the VPN screen, and your new profile will appear in the list.
Step 6: Turn the VPN on
Toggle the switch next to VPN Configurations (or tap the profile itself and switch Status to On, depending on your iOS version). Wait a few seconds for the connection to establish.
Expected result: The status bar shows a “VPN” indicator, and the profile in Settings shows “Connected” beneath its name.
Confirming Your VPN Is Actually Connected
Regardless of which path you took, verify the connection the same way every time:
- Look at the status bar at the top of your screen: a “VPN” label next to the time means you’re connected.
- Open Control Center by swiping down from the top-right corner (or up from the bottom on older iPhone models with a Home button). A blue VPN icon confirms an active session.
- In Settings > General > VPN & Device Management > VPN, the active profile shows “Connected” underneath it.
If none of these show a connection, don’t trust the toggle. A VPN switch that reads “on” doesn’t guarantee your traffic is actually routed through the tunnel, so treat it as not connected and work through the troubleshooting steps below.
If Something Goes Wrong
If your VPN won’t connect at all, try these in order:
- Confirm you have a working Wi-Fi or cellular connection by opening Safari and loading any website.
- Update iOS: Settings > General > Software Update. An outdated iOS version is a frequent cause of VPN handshake failures.
- Toggle Airplane Mode on, wait five seconds, then turn it off. That resets your network connection cleanly.
- Double-check every character in the server address, username, and password against what was provided.
- Restart your iPhone.
Common Issues
VPN won’t connect
Why it happens: Incorrect server address, expired credentials, a weak connection, or an outdated iOS version.
Fix: Re-verify the server address and login details with your VPN provider or IT department, confirm your internet connection is stable, update iOS, and try connecting again.
VPN connects, then immediately disconnects
Why it happens: An unstable network, conflicting network settings, or the VPN app losing background permission.
Fix: Toggle Airplane Mode on and off to reset the connection, force-close and reopen the VPN app, or remove and re-add the VPN profile in Settings > General > VPN & Device Management.
The “Add VPN Configuration” prompt keeps reappearing
Why it happens: You tapped Don’t Allow the first time the app requested permission to add a VPN profile.
Fix: Go to Settings > General > VPN & Device Management, delete the app’s existing profile if one exists, then reopen the VPN app and tap Connect again. Tap Allow this time.

Manual VPN fields are missing or unclear
Why it happens: You don’t have the exact server address, remote ID, or authentication details from your organization.
Fix: Contact your employer’s or school’s IT help desk directly. Don’t guess at these values; a slightly wrong entry fails without a clear error message.
No VPN icon appears despite the toggle being on
Why it happens: The VPN failed to establish a session even though the switch shows as on, or Control Center’s layout is hiding the tile.
Fix: Check Control Center specifically for the VPN icon, toggle the VPN off and back on in Settings, and restart your iPhone if it still doesn’t appear.
VPN app can’t be installed or configured
Why it happens: Screen Time restrictions or an existing device management profile is blocking changes.
Fix: Check Settings > Screen Time > Content & Privacy Restrictions for anything blocking app installs or VPN changes. If your iPhone is managed by a school or employer, ask their IT admin whether a restriction is in place.
Browsing or streaming feels slow after connecting
Why it happens: Encryption and routing through a distant server add overhead, especially if that server is congested.
Fix: Switch to a closer server location in your VPN app, try switching between Wi-Fi and cellular, or disconnect the VPN when you don’t need it.
Tips and Hidden Features
- Switching between multiple VPNs: If you have both a personal VPN app and a work profile installed, open Settings > General > VPN & Device Management > VPN and tap the one you want active. Only one can be connected at a time.
- Removing a VPN profile you no longer need: On the same screen, tap the profile, then tap Delete VPN (or swipe left on it and tap Delete).
- Connect On Demand: Some manual IKEv2 profiles support automatically connecting when you leave trusted Wi-Fi networks. This is typically set up by your IT department rather than something you configure yourself.
- iCloud Private Relay isn’t the same thing: If you have iCloud+, you’ve probably seen “Private Relay” in Settings. It hides your Safari browsing and IP address, but it only covers Safari traffic. It won’t secure other apps the way a real VPN does.
- Public Wi-Fi is where VPNs matter most: A VPN’s biggest everyday benefit is protecting you on networks you don’t control: coffee shops, airports, hotels. On your home Wi-Fi with a secured router, the added protection matters much less.
Frequently Asked Questions
What’s the difference between a VPN app and a manual VPN configuration on iPhone? A VPN app handles all the technical setup for you and just needs your login and a tap to connect, ideal for personal privacy. A manual configuration means you enter the server address, protocol, and credentials yourself, which is typically only necessary for connecting to a private work or school network.
How do I know my VPN is actually connected on iPhone? Check the status bar at the top of your screen for a “VPN” label, or open Control Center and look for the blue VPN icon. You can also check Settings > General > VPN & Device Management > VPN, where an active profile shows “Connected.”
Where do I find VPN settings on iPhone? Go to Settings > General > VPN & Device Management > VPN. This is where every VPN configuration lives, whether it was created by an app or entered manually.
What is IKEv2/IPSec/L2TP and which should I choose? These are VPN protocols, the technical method used to build the encrypted tunnel. IKEv2 is the most modern and generally the best choice for new manual configurations. IPSec and L2TP are older but still used by some corporate networks. If you’re setting one up manually, your IT department will tell you which one to select.
Why won’t my iPhone VPN connect? The most common causes are a wrong server address, expired login credentials, a weak internet connection, or an outdated iOS version. Work through the troubleshooting steps above in order, starting with your internet connection and iOS version.
Do I need a VPN app, or can I set one up manually for free? You can manually configure a VPN for free if you have server details from a private network, like a workplace. But manual configuration isn’t a way to get “free” consumer VPN protection; you need an actual VPN service’s server to connect to, which is exactly what VPN apps provide, often for a subscription fee.
Is a VPN necessary for everyday iPhone use, or just for work/travel/public Wi-Fi? For most people, a VPN matters most in specific situations: public Wi-Fi, international travel, or connecting to a work network. On a secured home Wi-Fi network, the everyday benefit is smaller, though some people still keep a VPN on for general privacy from their internet provider.
How do I remove or switch VPN profiles on iPhone? Go to Settings > General > VPN & Device Management > VPN. Tap a profile to switch to it, or swipe left and tap Delete to remove one you no longer need.
Does using a VPN slow down my iPhone’s internet? Some slowdown is normal because your traffic takes a longer path and gets encrypted along the way. The amount varies by server distance and load; picking a server closer to your actual location usually helps.
Wrapping Up
For almost everyone, the App Store path is the right one: install an app, sign in, tap Allow, and you’re protected in under two minutes. The manual route in Settings > General > VPN & Device Management exists mainly for connecting to a specific work or school network, and it only works if you have the exact server details in hand.
| Step | Action | Applies To |
|---|---|---|
| 1 | Install a VPN app from the App Store and sign in | App-based |
| 2 | Tap Allow on the VPN configuration prompt | App-based |
| 3 | Tap Connect and check the status bar for the VPN icon | App-based |
| 4 | Go to Settings > General > VPN & Device Management > VPN | Manual |
| 5 | Tap Add VPN Configuration, choose IKEv2/IPSec/L2TP, enter server details | Manual |
| 6 | Save and toggle VPN on, then confirm via the status bar | Manual |
If you’re mainly worried about public Wi-Fi safety while traveling or working from a café, a reputable VPN app is worth the subscription. If IT just handed you a server address, follow the manual steps exactly as given, and call the help desk if you’re unsure rather than guessing at a field.
Resources
- Apple Support: Connect to a VPN on iPhone
- Apple Support: If you can’t connect to a VPN
- Apple Support: About iCloud Private Relay
- How to Transfer Data from Windows to Mac Using Migration Assistant (2026)
- set up a VPN for iPhone and iPad
- how to set up a VPN on an iPhone
- VPN for iPhone
- Spotify Not Working on iPhone? 9 Ways to Fix
- Airplay Not Working on Roku TV? Try These 8 Fixes Now
- tvOS 17: All the New Features
- Apple Watch Not Pairing to New Phone? Try These 8 Fixes
- Mac Connected to Wi-Fi but No Internet Access? Try These 12 Fixes
- How to Fix ChatGPT App Not Working on iPhone