How to Set Up a VPN on Windows 10 & 11

Windows offers three ways to connect to a VPN: using a provider's dedicated client app, using Windows' built-in VPN feature (Settings › Network › VPN), or via PowerShell for enterprise/scripted deployments. This guide covers all three, plus how to configure split tunnelling so only selected apps use the VPN.

Method 1 - Dedicated VPN Client App (Recommended)

StepActionWhere
1Download the installer from your VPN provider's website (e.g., NordVPN for Windows) - Affiliate link - We may earn a commissionProvider website
2Run the installer and follow the setup wizardDownloads folder
3Launch the app and sign inStart menu
4Select a server location and click ConnectApp home screen
5Enable the kill switch in Settings before browsingApp Settings
6Verify with our VPN Leak TestVPN Leak Test

Method 2 - Windows Built-in VPN

StepActionWhere
1Open Settings › Network & Internet › VPNWindows Settings (Win + I)
2Click "Add a VPN connection"VPN settings page
3Set VPN provider to "Windows (built-in)" and choose connection type: IKEv2, L2TP/IPSec, SSTP, or PPTP (use IKEv2)Add VPN dialog
4Enter server address, VPN type, sign-in info from your providerAdd VPN dialog
5Click Save, then click the VPN name and ConnectVPN settings page
6Check the network icon in the taskbar - It should show VPN activeSystem tray

Method 3 - PowerShell VPN Setup

For scripted or enterprise deployments, use Add-VpnConnection in PowerShell (run as Administrator):

  • Open PowerShell as Administrator (right-click Start › Windows PowerShell (Admin)).
  • Run: Add-VpnConnection -Name "MyVPN" -ServerAddress "vpn.example.com" -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -RememberCredential
  • Replace vpn.example.com with your provider's server address.
  • Connect with: rasdial "MyVPN" username password

Split Tunnelling on Windows

  • Most dedicated VPN apps include a split tunnelling feature in their Settings panel.
  • Split tunnelling lets you route only selected apps (e.g., your torrent client) through the VPN while your browser uses your normal connection - Or vice versa.
  • In the Windows built-in VPN, you can enable "Use default gateway on remote network" being unchecked to route only traffic destined for the VPN's network through the tunnel (for corporate remote access).
  • After enabling split tunnelling, re-run the VPN Leak Test from each app to confirm the routing is correct.
  • See our dedicated guide: What Is VPN Split Tunnelling?

How We Evaluate VPNs

Every recommendation in our VPN guides is weighed against the same five criteria:

  • No-logs policy and audits - We prioritise providers whose no-logs claims have been verified by independent auditing firms, and we note real-world events (subpoenas, server seizures) that tested those claims.
  • Leak-test results - A VPN must not expose your real IP, DNS servers, or WebRTC addresses. You can run the same checks we use with our free VPN Leak Test.
  • Speed impact - We favour providers supporting modern protocols (WireGuard, or equivalents like NordLynx and Lightway) that keep overhead low.
  • Jurisdiction - Where a provider is incorporated determines which governments can compel it to hand over data.
  • Price transparency - Clear renewal pricing and honest refund terms. We avoid quoting specific prices in guides because promotions change frequently - Always check current pricing on the provider's site.

Our assessments are based on published third-party audits, vendor documentation, and our own leak-testing tooling - We do not have insider access to any provider's infrastructure. These pages are reviewed periodically and updated when audits, ownership, or features change.

Once you have picked a provider, two practical checks matter more than any review: if your connection fails, see how to fix a VPN that won't connect; and to confirm you are actually protected, learn how to test if your VPN is working.

Affiliate disclosure: Some links to VPN providers in these guides are affiliate links - We may earn a commission at no extra cost to you. This never affects rankings or evaluations.

Last updated: June 2026