Using a VPN on Windows or a Mac works the same way in outline: install the provider’s desktop app, sign in, allow the network permission the system requests, choose a server, and connect. You can also add a VPN manually through system settings, which is what many workplaces expect.
Pick the setup method
The provider’s app is easiest. It handles protocols, server lists and updates, and often includes extras such as a kill switch and split tunneling. The built-in route is better when an employer or a home server supplies connection details, because no extra software is involved.
If you have not chosen a service yet, start with how to choose a VPN. Download the app only from the provider’s official site or the system’s official store, and avoid links from adverts or forum posts.
Set up a VPN on Windows
With an app
- Download the installer from the provider’s website and run it.
- Approve the administrator prompt. The app needs this to add a virtual network adapter.
- Sign in, choose a server or leave it on automatic, and connect.
With built-in settings
Open Settings, then Network & internet, then VPN, and choose Add VPN. Enter the provider or server name, a connection name, the VPN type and your sign-in details, then save. Return to the VPN list and select Connect. The exact layout can differ between Windows releases.
Set up a VPN on a Mac
With an app
Install the app, open it and sign in. macOS will ask permission to add VPN configurations, and may need your Mac password or Touch ID. Accept, then connect. A VPN indicator appears in the menu bar, and some apps also place their own icon there.
With built-in settings
Open System Settings, then VPN (or Network in older layouts), and add a VPN configuration. Choose the type your provider supports, such as IKEv2, fill in the server address, remote ID and credentials, and save. You can tick an option to show the VPN status in the menu bar for quick toggling.
Settings worth checking
| Option | Why it helps |
|---|---|
| Kill switch | Blocks traffic if the tunnel drops |
| Launch at start-up and auto-connect | Protects you without having to remember |
| Protocol choice | WireGuard, OpenVPN and IKEv2 are all established standards |
| Split tunneling | Lets chosen apps skip the VPN, for example a printer or work tool |
| DNS leak protection | Keeps name lookups inside the tunnel |
The reasoning behind the first and fourth options is covered in our explainers on the VPN kill switch and split tunneling.
Test that the VPN on Windows or Mac works
- Before connecting, note your public IP address using any address-checking page.
- Connect to the VPN and reload. The address should differ and match the server location.
- Check for DNS leaks, since your computer’s lookups may still go to your ordinary provider. See how to check for DNS leaks.
- Disconnect from Wi-Fi briefly and watch what the app does, to confirm the kill switch behaves as expected.
Common problems
If the connection will not start, close other VPN software first, as multiple virtual adapters can clash. Firewalls or security suites occasionally block the app; allow it in their settings rather than switching the protection off. If a particular website fails to load, try another server, change protocol or temporarily exclude it using split tunneling, keeping in mind that services set their own rules about VPN use.
On a work laptop, do not install personal VPN software without asking, as it may conflict with company policies or the work VPN. Computers also remember networks, so on a home network you can often turn off auto-connect to avoid pointless detours.
Remember that a VPN is one layer. Keep your operating system updated, use a strong password and keep a sensible firewall on. If you work away from home, our guide to a secure remote work setup puts these pieces together.
Habits that keep the connection trustworthy
Treat the VPN app like any other security software. Keep it updated, because both Windows and macOS change how network extensions work, and an old client may stop behaving properly after a system update. Check the app’s settings after major updates to see that the kill switch and auto-connect options are still switched on.
Be careful about browser extensions that call themselves VPNs. They usually only proxy browser traffic, not everything on the computer, and they can see the sites you visit. A full app or system-level profile covers every program, including email clients and updaters.
Also think about what you are protecting against. On a coffee shop network, a VPN helps. On your own trusted home network it mainly hides your activity from your internet provider and from sites that would otherwise see your home address. Choose when to run it accordingly, and remember that some work or banking sites may behave differently when they see a VPN address.
Where to start
Install the app you trust, connect, confirm that your IP address changes, and switch on the kill switch and auto-connect. Then test once on a different network, such as a phone hotspot, so you know it behaves the way you expect. For more on protecting your devices, visit our device security hub.
Frequently asked questions
Can I use the built-in VPN settings instead of an app?
Yes, both Windows and macOS can store VPN profiles manually. You need server details and credentials from your provider or employer, and some protocols may not be supported without an app.
Should I turn on the kill switch?
Usually yes, if the app offers one. It blocks internet traffic when the VPN drops so your real address is not exposed by accident.
Will a VPN slow down my computer?
Encryption and routing add some overhead, so speed can change. A nearby server and a modern protocol keep the effect small.
Do I need a separate VPN for each computer?
Not necessarily. Many services let one account run on several devices at once, but the limit varies by provider, so check yours.
