How to Set Up a VPN on Windows 10 & 11

Windows offers three ways to connect to a VPN: using a provider's dedicated client app, using Windows' built-in VPN feature (Settings › Network › VPN), or via PowerShell for enterprise/scripted deployments. This guide covers all three, plus how to configure split tunnelling so only selected apps use the VPN.

Method 1 - Dedicated VPN Client App (Recommended)

Step	Action	Where
1	Download the installer from your VPN provider's website (e.g., NordVPN for Windows) - Affiliate link - We may earn a commission	Provider website
2	Run the installer and follow the setup wizard	Downloads folder
3	Launch the app and sign in	Start menu
4	Select a server location and click Connect	App home screen
5	Enable the kill switch in Settings before browsing	App Settings
6	Verify with our VPN Leak Test	VPN Leak Test

Method 2 - Windows Built-in VPN

Step	Action	Where
1	Open Settings › Network & Internet › VPN	Windows Settings (Win + I)
2	Click "Add a VPN connection"	VPN settings page
3	Set VPN provider to "Windows (built-in)" and choose connection type: IKEv2, L2TP/IPSec, SSTP, or PPTP (use IKEv2)	Add VPN dialog
4	Enter server address, VPN type, sign-in info from your provider	Add VPN dialog
5	Click Save, then click the VPN name and Connect	VPN settings page
6	Check the network icon in the taskbar - It should show VPN active	System tray

Method 3 - PowerShell VPN Setup

For scripted or enterprise deployments, use Add-VpnConnection in PowerShell (run as Administrator):

• Open PowerShell as Administrator (right-click Start › Windows PowerShell (Admin)).
• Run: Add-VpnConnection -Name "MyVPN" -ServerAddress "vpn.example.com" -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -RememberCredential
• Replace vpn.example.com with your provider's server address.
• Connect with: rasdial "MyVPN" username password

Split Tunnelling on Windows

• Most dedicated VPN apps include a split tunnelling feature in their Settings panel.
• Split tunnelling lets you route only selected apps (e.g., your torrent client) through the VPN while your browser uses your normal connection - Or vice versa.
• In the Windows built-in VPN, you can enable "Use default gateway on remote network" being unchecked to route only traffic destined for the VPN's network through the tunnel (for corporate remote access).
• After enabling split tunnelling, re-run the VPN Leak Test from each app to confirm the routing is correct.
• See our dedicated guide: What Is VPN Split Tunnelling?

Frequently Asked Questions

Should I use the provider's app or the built-in Windows VPN client?

The provider's app, in nearly all cases. Windows' built-in client does not support WireGuard, has no kill switch, and offers no server selection — it exists for manual corporate configurations.

Why does my internet stop working after I disconnect the VPN?

Usually a stale kill-switch firewall rule that was not removed cleanly. Reconnecting and then disconnecting properly through the app normally clears it; failing that, resetting the network adapter will.

How do I make the VPN connect automatically at startup?

Most provider apps have a launch-on-startup plus auto-connect pair of settings. Enable both, and set auto-connect to trigger on untrusted networks if the option exists.

Can I set up a VPN with PowerShell?

Yes, via the Add-VpnConnection cmdlet, which is useful for scripting deployments across several machines. It is limited to the protocols the built-in client supports, so no WireGuard.

How we evaluate VPNs: every provider on this site is judged on audited no-logs claims, leak-test results, protocol support, jurisdiction, and price transparency — never on commission. How we score every provider →

ⓘ Affiliate disclosure: Some links to VPN providers in these guides are affiliate links - We may earn a commission at no extra cost to you. This never affects rankings or evaluations.

Last updated: 2026-08-02