How to Set Up a VPN on Your Phone (iPhone and Android)

To set up a VPN on your phone, install the provider's official app from the App Store or Google Play, open it, sign in, and tap Connect — then accept the one-time system prompt that appears the first time. That's the whole core process, and it's the same shape on iPhone and Android. The details that matter come after you connect: choosing a protocol that's gentle on battery, and deciding how aggressively the VPN should turn itself on. This guide covers both platforms and the settings we'd change on a fresh install.

Before you start: pick the app, not just the brand

The most important setup step happens before you install anything: choosing a provider you can trust with your traffic. A VPN sees everything the network used to, so the company behind the app matters more than any toggle. Install only the official app — search the provider's own name, check the developer, and avoid clones with slightly-off names. If you haven't chosen yet, our best VPNs for iPhone and Android guide names the apps we'd actually put on a phone, including a free one.

Setting up a VPN on iPhone

On iPhone, the flow is: install the app from the App Store, open it, sign in, and tap Connect. iOS then shows a one-time "would like to add VPN Configurations" prompt — tap Allow and authenticate with Face ID or your passcode. From then on the app can connect without asking again, and you'll see the VPN badge in the status bar when it's active. There's no system kill switch on iOS, so the setting to look for in the app is Connect On Demand or auto-connect, which reconnects the tunnel whenever your iPhone has a connection.

1. Install the official app from the App Store and open it.
2. Sign in, tap Connect, and tap Allow on the one-time VPN configuration prompt.
3. In the app's settings, choose a WireGuard-style protocol and enable Connect On Demand.

Setting up a VPN on Android

On Android, install the app from Google Play, open it, sign in, and tap Connect. Android shows a "connection request" permission dialog the first time — tap OK. The one big Android bonus is the operating system's own kill switch: in Settings, under VPN, you can enable Always-on VPN and Block connections without VPN so the phone blocks traffic if the tunnel drops. It's worth turning on once the app is working. Our Android kill-switch guide covers that in detail, including how to test it actually blocks.

1. Install the official app from Google Play and open it.
2. Sign in, tap Connect, and accept Android's connection-request prompt.
3. In Settings, VPN, enable Always-on VPN and Block connections without VPN for a system kill switch.

The settings worth changing after setup

Once you're connected, three settings are worth a look. First, protocol: pick WireGuard (or the provider's WireGuard-based option) for the best balance of speed and battery on mobile. Second, auto-connect: set the VPN to come on automatically for unknown Wi-Fi, so you're not relying on remembering to tap Connect at a cafe. Third, split tunnelling if your app supports it (widely available on Android, managed-only on iOS), which lets you exclude apps like your banking app that dislike VPNs. Skip the aggressive "connect on every network including home" option unless you specifically want it — it's the most common cause of a VPN that won't stay off.

How to check it's actually working

To confirm the VPN is doing its job, connect, then search "what is my IP" in your browser — the address and location should be the server's, not yours. Most VPN apps also have a built-in status screen showing the connected server. If you want to be thorough, run a DNS-leak test from the provider's own tool or a reputable site to make sure your DNS requests are going through the tunnel too. If the IP hasn't changed, you're not actually connected — reopen the app and reconnect.

Common setup problems and quick fixes

Most first-time setup snags have simple causes. If the app won't connect at all, switch the protocol — a network that blocks one protocol will often allow WireGuard or the provider's own option. If a specific app (often a banking or streaming app) misbehaves while the VPN is on, add it to split tunnelling so it bypasses the tunnel, or briefly disconnect. If your phone shows the VPN as connected but your IP hasn't changed, disconnect fully and reconnect; a stale session is the usual culprit. And if the tunnel keeps dropping in the background on Android, exclude the VPN app from battery optimisation so the system stops closing it.

• Won't connect: change the protocol, or try a different server.
• One app breaks: use split tunnelling to exclude it (Android), or disconnect briefly.
• IP didn't change: fully disconnect and reconnect to clear a stale session.
• Tunnel drops in the background (Android): exclude the app from battery optimisation.

One phone, several networks

The reason phone VPN setup is worth getting right is that your phone moves between networks all day — home Wi-Fi, mobile data, the office, a cafe. A good configuration handles that automatically: auto-connect (or Connect On Demand on iPhone) brings the tunnel up on untrusted networks, and trusted-network rules let it stand down at home so you're not spending battery where you don't need protection. Set those once and you rarely think about the VPN again — it's on when it should be and off when it shouldn't. That's the difference between a VPN you actually keep using and one you install, find annoying, and forget.