How to Set Up a VPN on Windows 10 & 11
Windows offers three ways to connect to a VPN: using a provider's dedicated client app, using Windows' built-in VPN feature (Settings › Network › VPN), or via PowerShell for enterprise/scripted deployments. This guide covers all three, plus how to configure split tunnelling so only selected apps use the VPN.
Method 1 - Dedicated VPN Client App (Recommended)
| Step | Action | Where |
|---|---|---|
| 1 | Download the installer from your VPN provider's website (e.g., NordVPN for Windows) - Affiliate link - We may earn a commission | Provider website |
| 2 | Run the installer and follow the setup wizard | Downloads folder |
| 3 | Launch the app and sign in | Start menu |
| 4 | Select a server location and click Connect | App home screen |
| 5 | Enable the kill switch in Settings before browsing | App Settings |
| 6 | Verify with our VPN Leak Test | VPN Leak Test |
Method 2 - Windows Built-in VPN
| Step | Action | Where |
|---|---|---|
| 1 | Open Settings › Network & Internet › VPN | Windows Settings (Win + I) |
| 2 | Click "Add a VPN connection" | VPN settings page |
| 3 | Set VPN provider to "Windows (built-in)" and choose connection type: IKEv2, L2TP/IPSec, SSTP, or PPTP (use IKEv2) | Add VPN dialog |
| 4 | Enter server address, VPN type, sign-in info from your provider | Add VPN dialog |
| 5 | Click Save, then click the VPN name and Connect | VPN settings page |
| 6 | Check the network icon in the taskbar - It should show VPN active | System tray |
Method 3 - PowerShell VPN Setup
For scripted or enterprise deployments, use Add-VpnConnection in PowerShell (run as Administrator):
- Open PowerShell as Administrator (right-click Start › Windows PowerShell (Admin)).
- Run:
Add-VpnConnection -Name "MyVPN" -ServerAddress "vpn.example.com" -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -RememberCredential - Replace
vpn.example.comwith your provider's server address. - Connect with:
rasdial "MyVPN" username password
Split Tunnelling on Windows
- Most dedicated VPN apps include a split tunnelling feature in their Settings panel.
- Split tunnelling lets you route only selected apps (e.g., your torrent client) through the VPN while your browser uses your normal connection - Or vice versa.
- In the Windows built-in VPN, you can enable "Use default gateway on remote network" being unchecked to route only traffic destined for the VPN's network through the tunnel (for corporate remote access).
- After enabling split tunnelling, re-run the VPN Leak Test from each app to confirm the routing is correct.
- See our dedicated guide: What Is VPN Split Tunnelling?