A virtual private network, or VPN, keeps others from tracking your movements online and makes your IP address untraceable. The best VPNs help protect your network and data while unblocking streaming video content worldwide and letting you browse international content like a local no matter where you are.
If you like the idea of a VPN but are unsure how to use one, this guide will help. A simple setup can hide your browser activity and keep your IP address secret when using apps. A more advanced option is to install a VPN at the system level so everything is protected without running a VPN app or extension. You can use a VPN on Windows and macOS so we'll cover each.
Sign up and install your chosen VPN
Whether you pick a popular service like NordVPN or our current top pick, Surfshark, the easiest way to get started is to use the VPN app. Most top VPNs offer software for Windows, macOS, and Linux computers, as well as mobile apps for Android and iOS.
Step 1: Download the program from the appropriate app store or the VPN's website and install it as usual. You'll need to sign up for the service to get an official account and log in to access the VPN service.
Step 2: Most VPNs provide a quick-connect button, so if you don't mind what server you connect to, click that. After a moment or two, you'll connect to the fastest server available at the time.
If you want to appear to be located in a particular country or want to stream services like Netflix while connected to your VPN, you'll need to pick a specific server. Your VPN service of choice will have a list of countries and may designate which ones are best for streaming. Use the server browser, map, or however that particular VPN organizes its options to select the right server for you.
Then, if prompted, click the Connect or Quick Connect button and wait for the notification saying you're connected.
Step 3: If you're happy to manually select a server, or at least manually connect to one each time your system starts, you can draw a line under today's efforts and begin to browse safely and privately thanks to your new VPN. If you want it to be even more hands-off, though, you can look to see if your VPN offers automatic connection and startup options. Most do.
Find the settings menu and look for the relevant tick boxes there. Enable the client to start up with your operating system and to automatically connect. Each time your system boots, you should find it automatically connects you to the fastest server available at the time.
Alternative: Manually configure your VPN under Windows 11
If you like complete control of your VPN connection and you're running Windows 11, you can instead set everything up using the Windows 11 VPN configuration tool. Doing so is a much more in-depth method but does give you more say in how the tunneling works. You'll need to know your way around Windows 11 and should do some supplementary reading before getting started.
With that in mind, here's a crash course on VPN protocols that is well worth reading before you dive into the step-by-step instructions below.
How to understand protocols
Older protocols like Point-to-Point Tunneling Protocol (PPTP) may be easier to configure, but they come with vulnerabilities that make them more susceptible to attacks. If at all possible, you should avoid using PPTP.
Newer protocols, like Layer Two Tunneling Protocol (or L2TP), come with a 256-bit encryption key, deemed safe for top-secret communications for Windows and MacOS users. However, L2TP may be vulnerable to attacks if configured with shared keys, so you’ll also want to be aware of how you authenticate with the VPN service.
OpenVPN protocol is another favorite standard, thanks to how highly configurable and secure it is. It’s difficult to block because it can be run on any port, and it supports both UDP and TCP protocols. The downside is that it may be challenging to set up because it is so highly configurable and often requires third-party software.
In this setup, we’ll use the Internet Key Exchange Version 2 (IKEv2). This standard comes with hearty security, supports a fast connection, and both Windows and Mac mobile operating systems support it. It’s decently simple to set up, and IKEv2 reconnects quickly if you lose your VPN connection. This is crucial and is a big selling point thanks to its ease of switching and reconnecting to different networks with the new crop of LTE-enabled Always Connected PCs.
IKEv2 allows individuals to switch between Wi-Fi and LTE networks without losing their connection to the VPN because it’s based on Mobility and Multihoming standard. However, since IKEv2 is newer than other standards, it may not currently be supported by all VPN providers.
Setting up a virtual private network in Windows 11
Step 1: Navigate to the Windows 11 VPN configuration tool by typing VPN *into the Windows search bar and select *VPN Settings. Alternatively, you can also go to Windows' Settings *menu, click on *Network & Internet, and choose VPN on the left column.
Step 2: Select Add VPN to continue.
Step 3: A pop-up window should appear. Click on the drop-down for VPN Provider and choose Windows (built-in).
In the Connection name field, you can name it anything you want. We chose to name this connection with a combination of our VPN provider’s name, the server location, and the server number. In this case, because we are using NordVPN’s service and connecting to a U.S. server with an ID of 2093 from NordVPN’s directory of servers, we opted for NordVPN USA 2093 as my connection name. Being descriptive will help you identify the server from a list in the future if you decide to add multiple server locations.
Each VPN provider publishes their directory of available connections, and you'll want to consult with your provider on specifics about server addresses. In our case, we chose NordVPN's U.S.-based server at us2093.nordvpn.com. That will be the address that will go into the Server Name Or Address field.
For better connection speeds and reliability, you'll want to opt for a server near you. However, if you're looking to skirt geographic restrictions, you can also choose a server located in another country.
Under VPN Type, choose the connection type you want to use to connect and authenticate your VPN service. As outlined in the protocol guide section above, select IKEv2.
For the Type Of Sign-in Info, we chose User Name And Password. There are different ways you can log in to a VPN and authenticate with the service, including using a smart card, a one-time password, or a certificate. You’ll want to refer to your VPN service for instructions on the best way to log in. Most services will accept a username and password.
After you’re finished, click Save.
Step 4: Your newly created VPN name should appear in the list now. For most types of connections, you should be done and ready to connect, in which case you'll want to jump ahead to Step 19 in this section of the guide. However, for an IKEv2 connection, you’ll want to continue to download a certificate and change some additional settings before you can connect.
Your VPN provider will give you instructions on where to download the certificate from its website. After you’ve downloaded the certificate, click it to open it. A security warning will pop up, and you’ll want to click Open.
Step 5: In the first tab of the certificate labeled General, select Install Certificate located near the bottom.
Step 6: The certificate wizard will appear asking you where you want to install the certificate. Make sure the bubble next to Local Machine is selected. Select Next and then Yes in the following security pop-up.
Step 7: Choose Place All Certificates in the Following Store and then click Browse.
Step 8: A pop-up with a list of locations will appear. Choose Trusted Root Certificates Authorities and click OK.
Step 9: Click Next and then click Finish. Click OK and then click OK again to confirm that the certificate has been installed.
Step 10: Type Control Panel in the Windows season bar. Click on Control Panel to launch it.
Step 11: Select Network and Internet.
Step 12: Choose Network and Sharing Center.
Step 13: On the left column, select Change adapter settings.
Step 14: You should see your VPN connection’s name (NordVPN USA 2093) here. Right-click on it and select Properties. Then click on the Security tab.
Step 15: Choose IKEv2 under the Type of VPN if it wasn’t already specified. Under Data encryption, make sure to select Require Encryption (Disconnect If Server Declines). Under Authentication, select Use Extensive Authentication Protocol (EAP) and select Microsoft: Secured password EAP-MSCHAPv2. Click OK when done.
Step 16: Now, you’re ready to connect. Click on the Wi-Fi symbol on the right-hand side of the Windows taskbar. At the top, you should see your VPN name. Click on it, and then select Connect. If you haven't saved your username and password during configuration, you’ll have to enter your username and password to authenticate with the service. Once the service connects, you should be able to enjoy a more secure internet experience.
There is one limitation to note when you’re using a built-in VPN connection tool, like the one that ships with Windows 11. When you configure the service, you’re identifying a particular server for your PC connection. Depending on your needs, you may want to repeat the steps above to add multiple servers to the list.
If, for example, the current server gets too congested, you can disconnect and connect to a different server to see if speeds are faster. Some users will have country-specific servers to skirt geographical limitations for some streaming services and several local servers to quickly and securely browse the web.
How to set up a virtual private network on a Mac
Setting up a VPN connection on MacOS is very similar to the process on Windows. You’ll want to have your username, password, server address, and certificates ready if you’re using an IKEv2 to login.
Step 1: Download your VPN certificate. Please refer to Step 88 in the Windows section for downloading the certificate and defer to your VPN provider for the specific URL where you can navigate to download your certificate. Once the certificate is downloaded, it will be placed in your Downloads folder on your Mac. Click it to open it.
Step 2: MacOS will then display a new window, asking if you want to Add Certificates. You’ll want to click Add at the bottom right to add the certificate to the login keychain.
Step 3: In the Keychain Access window, log in under the Keychains menu on the left-hand side. Your VPN certificate -- we’re using NordVPN in this step -- will appear. Right-click on the certificate and select Get Info.
Step 4: Choose Always Trust in the dropdown next to When Using This Certificate. Once you approve the new changes, MacOS will ask you to enter your password to save.
Step 5: You’ll want to go to System Settings by typing it into the Spotlight search. In System Settings, select the *VPN *tab.
Step 6: Select Add VPN Configuration and choose IKEv2 from the menu. A window will open with boxes to fill in connection details.
Step 7: The display name can be anything you want. Still, it would be best if you named it with a combination of your VPN provider’s name, server number, and location to be able to identify the connection quickly. You can refer to the Windows guide for more details. For this step, we chose NordVPN USA 2093 because we connected to NordVPN’s 2093 server, which is located in the U.S.
You’ll be able to enter the Server Address and Remote ID. You can refer to your VPN provider’s guide for details — NordVPN publishes a list of its servers. For this step, enter us2093.nordvpn.com into both the Server Address and Remote ID fields. Leave Local ID blank.
Next comes setting up your authentication by heading to the Authentication Settings. Enter the username and password for the connection and select Create.
Step 8: Your new VPN connection will appear in the VPN tab of System Settings. Toggle the switch to connect and start using the VPN. All your internet activities will now pass through your newly established VPN, so you can be sure that your online actions are completely confidential.
If you haven't already chosen a VPN, there are many factors to consider. While there are some good free VPNs, you'll get faster service, more options, and better service if you use our guide to the best subscription-based VPNs.
We can also help you pick the best VPN at school, choose a VPN that works best for streaming, or find a VPN that lets you connect lots of devices.
The cost of service is usually affordable if you subscribe for one or more years at a time, but you might want to check our list of the latest and best VPN deals to make sure you aren't spending more than you need.
