The COM Guides
How to set up and use a VPN on Windows 11
Use a provider app or Windows’ built-in VPN profile, verify the connection, and understand what remains outside the tunnel.
Start with the provider's documented method
Most consumer VPN services supply an app that configures modern protocols, server selection, updates, DNS handling, and a kill switch. Download it from the provider's verified website or the Microsoft Store link the provider publishes. Check the publisher name before installing.
For a work VPN, use the instructions from your organisation. Do not improvise server addresses or certificate settings.
Using a provider app
- Install the current app from the verified source.
- Sign in and allow the Windows network-adapter prompt if the publisher is correct.
- Choose a nearby server for lower latency, or the location required for your legitimate use case.
- Enable the kill switch if you need traffic to stop when the tunnel drops.
- Connect, then confirm the app reports a protected state.
Using Windows' built-in VPN profile
You need a server address, VPN type, and sign-in method from the provider or administrator.
- Open Settings → Network & internet → VPN.
- Select Add VPN.
- Choose Windows (built-in) as the provider.
- Enter a recognisable connection name and the supplied server address.
- Choose the specified VPN type and sign-in method. Do not guess: a wrong choice may fail or use weaker authentication than intended.
- Save the profile, select it, and choose Connect.
Microsoft's current Windows VPN instructions cover the built-in fields and connection indicator.
Verify before relying on it
Check that Windows and the provider app both report connected. Visit a reputable HTTPS IP-check service and confirm the public location changed. If the provider offers a DNS-leak test, run it. Disconnect and reconnect once so you know how the kill switch behaves.
Understand the boundary
A VPN moves trust from the local network or internet provider to the VPN operator. It does not stop phishing, malware, account tracking, cookies, or fingerprinting, and it cannot make unsafe downloads safe. Signing in still identifies you to that service. Read the provider's logging, ownership, audit, renewal-price, and cancellation information rather than relying on a slogan.
If you no longer use the VPN, disconnect, remove its Windows profile or uninstall its app, and remove any network adapter or browser extension only when the provider's removal instructions say it is safe to do so.