Setting up a VPN on an iPhone takes about two minutes. iOS has had built-in VPN support since the early days, and every major VPN provider has an App Store app. Here is the complete guide, from choosing a VPN to fixing common issues.
Method 1: Using a VPN App (Recommended)
This is the easiest and most feature-complete approach. VPN apps handle everything automatically: kill switch, protocol selection, DNS leak protection, and easy server switching.
Step 1: Download the VPN App
Open the App Store and search for your VPN provider. The main options are:
- NordVPN (recommended, best all-rounder)
- ProtonVPN (best for privacy, has free plan)
- Surfshark (best value, unlimited devices)
- ExpressVPN (easy to use, fast)
Download and install the app.
Step 2: Sign In
Open the app, tap Sign In and enter your account credentials. If you do not have an account yet, create one through the provider’s website (not the App Store, to avoid the Apple payment fee markup).
Step 3: Allow VPN Permission
On first connection, iOS will ask for permission to add a VPN configuration. Tap Allow. This adds the VPN profile to your iPhone’s settings. You can verify it under Settings > General > VPN & Device Management > VPN.
Step 4: Connect
Tap the connect button in the app. Most apps auto-select the fastest server. You will see a small VPN indicator in the iPhone status bar (the letters “VPN” appear next to your signal bars) when connected.
Step 5: Configure Settings
In the VPN app’s settings, consider enabling:
- Kill switch (called “Network Lock” in ExpressVPN, or “Kill Switch” in NordVPN): Blocks all traffic if the VPN disconnects
- Auto-connect on untrusted networks: Connects automatically when joining unknown Wi-Fi networks
- Preferred protocol: WireGuard or IKEv2 for best performance on iOS
Method 2: Manual IKEv2 Configuration
If you want to configure a VPN without an app (for corporate VPNs or advanced setups), iOS supports IKEv2 natively.
Requirements
- Server address from your VPN provider
- Username and password (or certificate)
Steps
- Open Settings
- Tap General
- Scroll to VPN & Device Management
- Tap VPN
- Tap Add VPN Configuration
- Select IKEv2 as the type
- Enter:
- Description (any name you want)
- Server (your provider’s server address)
- Remote ID (usually the same as the server)
- Local ID (leave blank or same as server)
- User Authentication: Username
- Username and Password
- Tap Done
- Toggle the VPN to On
Limitation of Manual Setup
Manual IKEv2 has no kill switch. If the VPN connection drops, your traffic continues through your regular connection without any notification. For privacy protection, a VPN app with kill switch is significantly safer.
Best VPNs for iPhone in 2026
| VPN | iOS App Quality | Kill Switch | Free Plan | Price (annual) |
|---|---|---|---|---|
| NordVPN | Excellent | Yes | No | $59.88 |
| ExpressVPN | Excellent | Yes | No | $59.88 |
| ProtonVPN | Very good | Yes | Yes | $47.88 |
| Surfshark | Very good | Yes | No | $38.28 |
| Mullvad | Good | Yes | No | $66 |
iOS-Specific VPN Considerations
iOS VPN Kill Switch Limitation
Apple’s iOS has a partial kill switch limitation: if the VPN profile is removed from Settings (by a software update or system reset), traffic flows without VPN protection without alerting you. The most reliable apps work around this with always-on VPN profiles, but it is worth being aware of.
NordVPN’s Advanced Kill Switch on iOS is the most robust implementation, blocking traffic at the network level.
VPN on Wi-Fi Calling
With a VPN enabled, Wi-Fi calling may route differently. Some carriers disable Wi-Fi calling when a VPN is active. If you need Wi-Fi calling, add your carrier’s connection to the split tunneling exception list if your VPN app supports it.
Battery Impact
VPN encryption adds CPU usage, which affects battery life. WireGuard is the most efficient protocol for iOS. In testing, NordVPN with NordLynx (WireGuard) has the lowest battery impact. OpenVPN draws noticeably more power.
Troubleshooting Common iPhone VPN Issues
VPN says “Connected” but no traffic goes through: Toggle the VPN off and on. Check that you have data or Wi-Fi connectivity independently.
Netflix (or another app) is not seeing the VPN location: Some apps use GPS or carrier data rather than IP-based location. A VPN cannot spoof GPS location on iPhone.
VPN disconnects when switching from Wi-Fi to cellular: Enable the app’s auto-reconnect feature. iOS may drop the VPN connection during network switching.
Cannot install VPN app from App Store: If you are in a country where the VPN provider’s app is removed from the local App Store (China, Russia), use a non-local Apple ID or download via a different region’s App Store.
Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.
Our verdict: The easiest and safest way to use a VPN on iPhone is through a native app with kill switch enabled. NordVPN and ExpressVPN have the most polished iOS apps. For users who want a free option, ProtonVPN’s free plan works on iOS with unlimited bandwidth. Manual IKEv2 setup is adequate for basic needs but lacks the kill switch protection that app-based VPNs provide.
FAQ
Does iPhone have a built-in VPN? iOS supports manual VPN configuration (IKEv2, L2TP, IPSec) but has no built-in VPN service. You need a provider and either their app or manual configuration.
Is a VPN free on iPhone? ProtonVPN’s free tier is available on iOS with unlimited bandwidth and no ads. It limits servers to 5 countries and 1 simultaneous device. Most other free VPN apps have data caps or weaker privacy practices.
Does a VPN work on iPhone without Wi-Fi? Yes. A VPN works on cellular data connections as well as Wi-Fi. It encrypts all traffic from your iPhone regardless of connection type.
Can you see VPN usage on an iPhone bill? No. Your carrier sees data usage (volume) but not the content or destinations. VPN traffic appears as a single encrypted stream to the VPN server. Your carrier cannot see what you are doing inside the VPN.
After setup: the three-check verification
Finish any iPhone install with the same trio: a leak test in Safari (DNS and WebRTC behaving), a forced app-kill mid-download to watch the on-demand rule re-raise the tunnel, and one day of battery observation to confirm the negligible-drain promise on your specific handset. Pass all three and the phone’s VPN life is configured rather than assumed, which on the device that travels everywhere is the difference that counts.
iPhone VPN life after this page: invisible, mostly. The icon appears on hostile networks, the battery doesn’t notice, and the device most likely to meet strange Wi-Fi carries its protection automatically, which was the entire point of the twenty minutes you just spent.
(Steps verified on current iOS; Apple occasionally relocates settings between versions, and the provider’s iOS guide is the canonical fallback when a menu drifts.)
Keep reading: How to Set Up a VPN on Your Router: Step-by-Step Guide 2026 and How to Use a VPN on iPhone and Android in 2026.