A VPN on your phone is more important than one on your laptop in many ways. Your phone connects to more networks: home WiFi, cellular data, work networks, and a stream of unfamiliar public WiFi hotspots. Each of those is a different exposure point. A VPN set to connect automatically handles all of them.
Setting up a VPN on iPhone (iOS)
Method 1: App (recommended)
Download the VPN app from the App Store. NordVPN, ProtonVPN, Surfshark, and ExpressVPN all have dedicated iOS apps.
- Open the App Store and search for your VPN provider
- Download and install the app
- Open the app and log in with your credentials
- Tap Connect. iOS will prompt you to allow the VPN to add a configuration to your device. Tap Allow.
- You’re connected.
The VPN app handles everything, including server selection, protocol choice, and the kill switch. This is the correct method for most users.
Method 2: Manual configuration (iOS Settings)
iOS supports manual VPN configuration through Settings > General > VPN & Device Management > VPN > Add VPN Configuration.
Supported protocols: IKEv2, IPSec, L2TP. This method works if your VPN provider supports these protocols but doesn’t have an iOS app. For most major providers, the app method is simpler and more functional.
iOS-specific settings to configure in your VPN app:
Enable the kill switch if your app supports it. On iOS, the kill switch behavior is limited by Apple: iOS can block internet access when the VPN is disconnected (via “Always On VPN” in device management), but most consumer VPN apps implement a best-effort version. Check your provider’s documentation.
Enable “Auto-connect on untrusted networks” if available. This connects the VPN automatically whenever you join a network that isn’t on your trusted list.
Setting up a VPN on Android
Android has broader VPN support than iOS, including native WireGuard support in recent versions.
Method 1: App (recommended)
- Open the Google Play Store and search for your VPN provider
- Install the app
- Log in and tap Connect
- Android will request permission to set up the VPN connection. Allow it.
Method 2: Android built-in VPN settings
Settings > Network & Internet > VPN > Add VPN.
Android supports IKEv2/IPSec, L2TP/IPSec, and (on recent Android versions) WireGuard natively. This method is useful for manual configurations or enterprise VPNs.
Android-specific settings:
In the VPN app, enable “Always-on VPN” if available. This keeps the VPN connected even after the app is closed or the device restarts.
In Android Settings > Network & Internet > VPN, you can enable “Always-on VPN” and “Block connections without VPN” (the kill switch) at the OS level. This provides stronger leak protection than app-level kill switches because it operates at the system network stack.
For Android 10+: Settings > Network & Internet > VPN > (your VPN) > gear icon > enable Always-on VPN and Block connections without VPN.
Battery and performance on mobile
A VPN uses some battery power for encryption. In practice, this is small: typically 5-10% additional battery consumption on modern hardware with WireGuard. OpenVPN uses more battery because of higher CPU overhead.
Use WireGuard (or its equivalent: NordLynx on NordVPN, Nexus/WireGuard on Surfshark) for the best balance of speed and battery efficiency on mobile.
Split tunneling on mobile
Split tunneling lets you route only specific apps through the VPN while others use your regular connection. This is useful if you want streaming apps through the VPN but your banking app through your regular IP (some banks flag VPN connections).
NordVPN and Surfshark both support split tunneling on Android. iOS has more restrictions on split tunneling due to Apple’s VPN API limitations, but some providers implement partial support.
Common issues and fixes
VPN disconnects when the screen turns off: On Android, go to Battery settings and disable battery optimization for the VPN app. On iOS, this behavior is limited by the OS: use an app that supports persistent background connection.
Slow speeds on mobile: Switch from OpenVPN to WireGuard in the app settings. Also try a server closer to your physical location.
App not available in your country’s app store: Switch your account region to a country where the app is available, download it, then switch back.
Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.
VPN setup on mobile takes under two minutes with any major provider's app. On Android, use the OS-level kill switch for the strongest protection. On iOS, enable auto-connect on untrusted networks. Use WireGuard for the best battery and speed performance on both platforms.
The platform differences that actually matter
Both stores carry the same major apps, but the platforms diverge underneath in ways worth knowing. Android exposes the deeper controls: system-level Always-on VPN with Block connections without VPN gives a true OS-enforced kill switch, and per-app split tunneling is native and universal. iOS routes everything through Apple’s network extension framework: excellent reliability and battery behavior, but kill-switch semantics depend on the provider’s on-demand rules and real per-app splitting is restricted by platform policy.
Battery anxiety, the most common mobile objection, is dated on both platforms: WireGuard-class protocols idle efficiently enough that overnight drain attributable to the VPN measures in low single digits. The setting that matters more is auto-connect on untrusted Wi-Fi, which both platforms’ major apps support and which turns the phone’s most dangerous habit (joining remembered public networks silently) into a non-event.
Mobile-specific threats the VPN does and doesn’t cover
The phone threat model differs from the laptop’s. The VPN covers the network half: public Wi-Fi interception, carrier-level traffic profiling (US carriers’ data programs being the standing example), and IP exposure to apps and sites. It does not cover the platform half: app permissions vacuuming contacts and location, SDK-level trackers inside apps (which see device identifiers regardless of IP), and SMS-based phishing. Pair the tunnel with permission hygiene and the boring updates, and the phone’s realistic risks are mostly handled.
One mobile-only feature worth seeking out: providers’ tracker-blocking DNS modes (NordVPN’s Threat Protection, Proton’s NetShield) work system-wide on phones, trimming in-app ad tracking that browser-based blockers never see. On a device where most internet life happens inside apps rather than tabs, that DNS layer quietly does more privacy work than the IP masking.
Setup order for a new phone
The five-minute checklist when a device arrives: install the provider’s app and log in, enable auto-connect on untrusted networks, enable the kill-switch equivalent (Android’s system toggle or the app’s iOS on-demand rule), add the widget or control-center shortcut for one-tap connects, and run one leak test from the mobile browser to confirm DNS behaves. After that the VPN should disappear into the phone’s plumbing, surfacing only as the small key icon that means the café Wi-Fi is somebody else’s problem.
Cross-platform households get one closing economy note: every major subscription covers both platforms simultaneously, so the iPhone-or-Android framing only decides settings, never the purchase. Configure each device to its platform’s strengths and the same account protects the whole pocket-sized fleet.
Keep reading: How to Set Up a VPN on iPhone in 2026: Step-by-Step Guide and How to Set Up a VPN on Android TV in 2026.