How to Set Up a VPN on iPhone

Setting up a VPN on iPhone takes less than five minutes using a provider's App Store app. For advanced users, iOS also has a built-in VPN client that supports L2TP, IKEv2, and IPSec configurations - No third-party app required. This guide covers both methods and explains how to verify your VPN is actually protecting you.

Method 1 - Install a VPN App from the App Store

This is the recommended method for most users. The app handles all configuration automatically.

Step	Action	Where
1	Open the App Store and search for your VPN provider	App Store › Search
2	Download and install the official app (e.g., NordVPN or Mullvad VPN) - Affiliate link - We may earn a commission	App Store
3	Open the app, sign in or enter your account number (Mullvad uses anonymous account numbers)	VPN app
4	Tap "Allow" when iOS asks to add VPN configurations	iOS permission prompt
5	Select a server location and tap Connect	VPN app home screen
6	Verify the VPN icon (key icon) appears in the iOS status bar	Top of screen
7	Run a VPN leak test to confirm your IP has changed	VPN Leak Test

Method 2 - IOS Built-in VPN (Settings)

Use this method if your workplace or school provides VPN credentials, or if you want to connect to a self-hosted VPN server without installing a third-party app.

Step	Action	Where
1	Open Settings	iOS Home screen
2	Tap General › VPN & Device Management › VPN	Settings › General
3	Tap "Add VPN Configuration…"	VPN screen
4	Select type: IKEv2 (recommended), IPSec, or L2TP	Type field
5	Enter Description, Server, Remote ID, username, and password provided by your VPN service	Configuration form
6	Tap Done, then toggle the VPN connection on	VPN screen

How to Verify Your iPhone VPN Is Working

• Look for the VPN key icon in the iOS status bar - It appears when the tunnel is active.
• Open Safari and visit our VPN Leak Test - The detected IP should belong to the VPN provider.
• The country shown should match the VPN server you selected, not your physical location.
• Enable "Always-on VPN" under Settings › General › VPN & Device Management for managed devices (requires MDM profile in enterprise environments).
• To prevent leaks when switching between Wi-Fi and mobile data, enable the kill switch in your VPN app's settings.

Choosing the Right Protocol on iOS

Protocol	Speed	Reconnect on Network Change	Best For
WireGuard	Fastest	Excellent	Default choice for iOS apps
IKEv2/IPSec	Fast	Excellent (MOBIKE)	Built-in iOS VPN config
OpenVPN	Good	Good	Compatibility with self-hosted servers
L2TP/IPSec	Moderate	Fair	Legacy - Avoid if possible

Frequently Asked Questions

Should I use an App Store VPN app or iOS's built-in client?

Use the provider's app for everyday use — it handles server selection, the kill switch, and protocol choice for you. The built-in IKEv2/IPSec client is for manual configurations where you have server credentials but no app.

What is iCloud Private Relay and is it a VPN?

It is not a full VPN. It hides your IP from the sites you visit in Safari and encrypts DNS, but it only covers Safari traffic and cannot select a country. A VPN covers every app.

Why does my iPhone VPN disconnect when the screen locks?

iOS suspends background apps aggressively. Enable the provider's always-on or on-demand option, which installs a configuration profile that the system keeps active independently of the app.

Does the VPN cover cellular data as well as Wi-Fi?

Yes. Once the VPN profile is active it applies to all interfaces, so switching from Wi-Fi to 5G keeps the tunnel — IKEv2 in particular handles that handover cleanly.

How we evaluate VPNs: every provider on this site is judged on audited no-logs claims, leak-test results, protocol support, jurisdiction, and price transparency — never on commission. How we score every provider →

ⓘ Affiliate disclosure: Some links to VPN providers in these guides are affiliate links - We may earn a commission at no extra cost to you. This never affects rankings or evaluations.

Last updated: 2026-08-02