Last updated: October 2026
Setting up a VPN on an iPhone is mostly two things: installing the provider's app and tapping Allow when iOS asks to add a VPN configuration. There is also a manual route for work or school VPNs and for people who prefer to avoid third-party apps. This guide covers both, shows how to check that it actually works, and lists the limits iPhones have that most guides skip.
- Install your provider's official app from the App Store and sign in.
- When iOS asks, tap Allow to add the VPN configuration and confirm with Face ID, Touch ID or your passcode.
- Tap Connect and look for the VPN label in the status bar.
- Check your IP address with the VPN on and off to confirm it changed.
Pick your method
| Method | Best for | Catch |
|---|---|---|
| Provider's app | Most people | You trust the provider with your traffic. Proton's manual-setup page lists a kill switch, extra protocols and DNS leak protection as advantages of its own app. |
| Manual setup in Settings (IKEv2, IPSec or L2TP) | Work, school or self-run servers; people who want no app | You need the server details from your provider. Fewer extras. |
| WireGuard app plus a config file | Users who already have a provider that offers WireGuard files | Proton describes it as a manual option and recommends its own app instead. |
Method 1: Set up a VPN with an app
- Choose a provider. Use a company with a published privacy policy and, ideally, an independent audit. Free apps vary widely in quality, so install only from the official, verified publisher in the App Store.
- Install and sign in. Open the app and create an account or sign in. Per Gadget Lite's June 2026 guide (updated July 4, 2026), this is where you pick a plan or the free tier.
- Allow the VPN configuration. iOS shows a prompt along the lines of "[App Name] Would Like to Add VPN Configurations." Tap Allow, then authenticate with Face ID, Touch ID or your passcode. Without this step the VPN cannot start.
- Connect. Tap the connect or power button. Most apps pick a server automatically or let you choose a country. TechRadar and Switching to Mac (August 1, 2026) both say a VPN label appears in the status bar once connected, and Switching to Mac adds a blue VPN tile in Control Center. Gadget Lite says to check Control Center on iPhone X and later.
- View the profile (optional). Go to Settings > General > VPN & Device Management > VPN and tap the "i" icon to see connection details.
Method 2: Set up a VPN manually
Apple's Platform Support page says iPhone and iPad have built-in support for L2TP, IKEv2 and IPSec connections, configured under Settings > General > VPN & Device Management. You need the details from your provider or your workplace's IT team.
- Open Settings > General > VPN & Device Management > VPN > Add VPN Configuration.
- Choose the Type. Gadget Lite recommends IKEv2 (or L2TP/IPSec if your provider requires it).
- Enter a description, the server address, the remote ID (for IKEv2 this is normally the same as the server address, per Gadget Lite), and your username and password. Apple's page also lists an authentication type, and a local ID for IKEv2. For IPSec, Switching to Mac says you also need a group name and shared secret; Gadget Lite warns that L2TP failures are often a mistyped shared secret, so copy and paste it from your provider.
- Tap Done, then switch the Status toggle on.
- If your provider uses a certificate, TechRadar's older guide says to download the root certificate in Safari, then install it under VPN & Device Management before adding the configuration.
Which protocol? TechRadar (a 2023 article written as part of a paid ExpressVPN partnership, so treat its opinions with care) presents IKEv2 as the stronger option and says L2TP is older, can be slow, and cannot encrypt data on its own, so it is usually paired with IPSec. Gadget Lite also recommends IKEv2. If a provider offers it, choose it.
WireGuard option. Proton's support page describes installing the official WireGuard app, downloading a .conf file from your Proton account, importing it as a tunnel and switching it on. It also says Proton strongly recommends its own app instead.
Comparing paid VPN deals? This is a third-party VPN offer link. If you buy through it, we may earn a commission. We have not tested this offer for this article.
Check that it works
- With the VPN off, visit an IP checker such as whatismyip.com and note your IP and location.
- Connect the VPN to a server in another country.
- Check again. Gadget Lite says the displayed location should differ from your real one.
For DNS, WebRTC and kill switch tests, see our guide to the signs a VPN is not working. If the IP does not change, disconnect, pick another server, restart the app and test again.
Catches and limits on iPhone
- Already-open connections. Proton's disclosure says iOS does not close connections that were open before the VPN connected, so some may stay outside the tunnel. Turning on Airplane Mode for a few seconds after connecting, then off, makes apps reconnect through the VPN, though it is not a guarantee.
- No Always On VPN on a personal iPhone. Apple's Platform Security guide (January 28, 2026) says Always On VPN needs a device managed through a device management service and supervised, so a normal personal phone cannot use it. Kill switches in apps are therefore best-effort.
- Work profiles. If your employer or school manages your iPhone, they may install a VPN profile you cannot remove. Ask your IT administrator.
- A VPN is not anonymity. It moves trust from your network or internet provider to the VPN company, and accounts you sign in to still know who you are.
- Follow the law. VPN rules differ by country, and services you use may have their own terms.
FAQ
Do I need to pay for a VPN?
No. Some providers offer free tiers with limits. Choose carefully, since unknown free apps carry the highest documented risk.
Where is the VPN switch in Settings?
In the sources I found, VPN is under Settings > General > VPN & Device Management. If your iOS 27 Settings looks different, search Settings for "VPN".
Why does iOS ask to add VPN configurations?
It is how iOS lets an app create a VPN profile. If you decline, the app cannot connect.
Can I leave the VPN on all the time?
You can, but a VPN may slow your connection and drain battery, and a few apps may not work through one. I have no measured figures for the effect.
My verdict
For most people, the provider's app is the right way: install, tap Allow, connect, and check your IP. Use the manual route only when your workplace or provider gives you the settings, and IKEv2 where possible. Whatever you choose, test it once after setup and keep your expectations realistic: on iPhone, the kill switch is best-effort. For more setup basics worth doing on the same phone, see 10 iPhone settings you should change and how to set up iPhone Emergency SOS.
What I could not verify: the live version of this post, an Apple iPhone User Guide page with iOS 27 VPN steps (my sources describe iOS 18 and iOS 26 menus and Gadget Lite's own page does not list iOS 27 changes), current in-app screens of any provider, and how long setup takes. I did not time or test the steps myself.
Sources: Apple Platform Support: VPN | Apple Platform Security: VPN security | Gadget Lite: How to set up a VPN on iPhone | Switching to Mac: Set up a VPN on iPhone | TechRadar: Use and configure a VPN on iPhone (2023, ExpressVPN partnership) | Proton VPN: Manual WireGuard setup on iOS | Proton VPN: Apple iOS vulnerability disclosure