Setting up a VPN on Android is faster than most people expect. The major VPN providers have dedicated Android apps that handle configuration automatically. Manual setup (via WireGuard or OpenVPN) takes a few extra steps but gives you more control.
This guide covers both approaches.
Method 1: App-based setup (fastest)
App-based setup takes about 2 minutes from download to connected. This is the right approach for most users.
NordVPN on Android
Open the Google Play Store and search for “NordVPN.” Download the official app (published by Tefincom & Co., S.A.). Do not install third-party copies.
Open the app and sign in with your NordVPN account credentials. If you do not have an account yet, tap “Create Account.”
The app will prompt you to allow a VPN configuration. Tap “Allow” when Android asks whether to trust the VPN connection. This is a standard Android security prompt and is expected.
Tap the “Quick Connect” button on the home screen. NordVPN will connect to the fastest available server based on your location. The connection typically establishes in 3 to 5 seconds.
A key icon appears in the Android status bar when the VPN is active. Your traffic is now encrypted.
Choosing a specific server: Tap the “Countries” list to browse servers by location. For streaming, use the “Streaming” category to find servers optimized for specific platforms.
Protocol selection: Go to Settings and then VPN Protocol. NordLynx (WireGuard-based) is the fastest option for most users. OpenVPN is the most universally compatible but slower. IKEv2 is a reasonable middle ground.
ProtonVPN on Android
Search for “ProtonVPN” in the Google Play Store. The official app is published by Proton AG.
Sign in or create a free account. ProtonVPN has a permanently free tier that covers one device with servers in three countries (US, Netherlands, Japan). No payment information is required for the free tier.
Allow the VPN configuration when Android prompts. Select your server and tap “Connect.”
ProtonVPN’s Android app includes a “Stealth” protocol option that obscures VPN traffic as regular HTTPS, useful in restrictive networks.
Download ProtonVPN for Android
Method 2: Manual WireGuard setup
Manual setup is useful if you want to use a VPN without installing the provider’s app, or if you are configuring a server you manage yourself.
Step 1: Install WireGuard
Install the WireGuard app from the Google Play Store (published by WireGuard Development Team). This is the official WireGuard client.
Step 2: Get your WireGuard configuration file
Log into your VPN provider’s account dashboard and look for a “WireGuard” or “Manual configuration” option. Download a configuration file (.conf) for the server you want to use. Most providers that support WireGuard (NordVPN, Mullvad, ProtonVPN, Surfshark) offer this.
For Mullvad specifically:
- Log into your account at mullvad.net
- Go to Account and then WireGuard configuration
- Generate a key pair and download the config file for your chosen server
Step 3: Import the configuration
Open the WireGuard app. Tap the “+” button in the bottom right corner. Choose “Create from file or archive.” Select the .conf file you downloaded. The tunnel appears in your WireGuard app.
Step 4: Connect
Tap the tunnel name and toggle it on. The WireGuard status indicator appears in your status bar.
Manual WireGuard setup has some limitations: you cannot browse servers within the app, you are fixed to the server in the configuration file, and some provider-specific features (kill switch, DNS leak protection) may not be available without the provider’s own app.
Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.
Android VPN settings to know
Always-on VPN: Android has a built-in always-on VPN setting that reconnects automatically if the VPN drops. Enable it in Settings, then Network and Internet, then Advanced, then VPN. Select your VPN and enable “Always-on VPN.” This provides a basic kill switch even if your VPN app does not include one.
Block connections without VPN: In the same settings panel, you can enable “Block connections without VPN.” This prevents any traffic from leaving your device if the VPN is not connected. Enable this if you need a guaranteed kill switch.
Per-app VPN (split tunneling): If your VPN app supports split tunneling, you can exclude specific Android apps from the VPN. This is useful for apps that break with a VPN (some banking apps, regional streaming services) while keeping everything else protected.
DNS leak testing: After connecting, visit dnsleaktest.com or ipleak.net in your browser. If your VPN is working correctly, your IP and DNS server should show your VPN’s location, not your actual location.
Troubleshooting common Android VPN issues
VPN will not connect: Try switching protocols. If NordLynx is not connecting, try OpenVPN. Some networks block WireGuard’s UDP traffic; OpenVPN TCP is the most universally compatible fallback.
Speed is slow: Try a server geographically closer to you. Check if you have a data cap on your mobile plan that might be causing carrier-level throttling. Switch to NordLynx or WireGuard if you are using OpenVPN.
Apps do not work with VPN: Some apps (banking apps, government apps) detect VPN connections and refuse to function. Add them to your split tunneling exclusion list or temporarily disable the VPN to use them.
VPN disconnects on sleep: Disable battery optimization for the VPN app. Go to Settings, then Apps, select your VPN app, then Battery, and choose “Unrestricted.” Android’s battery optimizer aggressively kills background apps, including VPN connections.
For most Android users, the app-based setup with NordVPN or ProtonVPN is the right approach: faster, easier, and includes features like kill switches that manual WireGuard setup does not provide automatically. Use manual WireGuard if you prefer not to have a provider's app running, or if you are managing your own VPN server.
Keep reading: How to Set Up a VPN on iPhone in 2026 and VPN on iPhone and Android: Which is Faster?.