How to Set Up a VPN in 10 Minutes (With Pictures)

By the Privacy Plain English Team · September 17, 2026 · 8 min read

We may earn commissions from providers linked here — it never changes our instructions. Read our full disclosure.

Setting up a VPN is genuinely one of the easiest tech tasks you'll ever do — easier than assembling flat-pack furniture, and you only do it once. This walkthrough is written generically so it works with any major provider (NordVPN, ExpressVPN, Surfshark, Proton VPN, Mullvad, and the rest all follow the same shape). Give yourself ten unhurried minutes.

Before You Start: What You Need

• A VPN account. Signed up on the provider's official website. Keep your login email and password handy.
• Your device — phone, laptop, or both. Most subscriptions cover 5–10 devices, so you can do both in one sitting.
• About 10 minutes and a normal internet connection.

Step 1: Download the App From the Official Site Only

Go to your VPN provider's website — type the address yourself rather than clicking an ad — and find the Download or Get the app button. Pick your platform (Windows, macOS, iOS, Android). On phones, it's usually simpler to search the provider's exact name in the App Store or Google Play; check that the developer name matches the VPN company before installing.

Run the installer (on computers) or tap Install (on phones). This takes 1–2 minutes. The app will ask for standard permissions — on Windows/macOS it needs permission to install a network adapter (that's how the tunnel works); on phones it will ask to add a VPN configuration. These are normal. Say yes.

Step 2: Log In and Pick a Server

Open the app and log in with the account you created. You'll land on the main screen: a big Connect or power button and a server list or map.

For everyday privacy, tap Connect (or pick the nearest city/country). Closest server = fastest speeds, because your traffic travels the shortest distance. You do not need to overthink this — "nearest" is the right answer 95% of the time. Only choose a specific other country when you want to appear there (for example, streaming a show that's only available abroad).

The button should change color or show "Connected" within a few seconds, often with your new virtual location displayed ("Connected — Chicago, United States").

Step 3: Turn On the Kill Switch

This is the single most important toggle in the app. The kill switch blocks all internet traffic if the VPN connection drops, so a blip doesn't silently expose your real IP address.

Where to find it: open Settings (usually a gear icon), look for Kill Switch — sometimes under "Security," "Connection," or "Advanced." Flip it on. On some apps you get two options: an app-level kill switch (blocks everything) is the one you want; a few apps also offer per-app kill switches for advanced users. Turn it on, leave it on, never think about it again.

Step 4: Choose Your Protocol

The "protocol" is the method your device uses to build the encrypted tunnel. In Settings, look for Protocol or VPN Protocol. Your options will typically include:

• WireGuard — the modern default. Fast, with a small, auditable codebase. Use this unless you have a reason not to.
• OpenVPN — the battle-tested veteran. Slightly slower, extremely well scrutinized. Switch to this if WireGuard is blocked on a restrictive network (some hotels and workplaces filter it).
• Automatic — let the app choose. Honestly fine for most beginners; good apps pick WireGuard by default.

Avoid any provider pushing only a proprietary protocol with no independent review — transparency is the point.

Step 5: Verify It's Working

Don't just trust the green "Connected" badge — verify, once, in about 60 seconds:

1. With the VPN connected, open your browser and search for "what is my IP" or visit a DNS leak test site.
2. Check the IP address and location shown. They should match the VPN server's location (e.g., Chicago if you connected to Chicago) — not your real city.
3. On a DNS leak test, the DNS servers listed should belong to your VPN provider, not your ISP. If you see your ISP's name (Comcast, BT, Deutsche Telekom…), something is leaking — check the kill switch and leak protection settings, or contact support.
4. Disconnect the VPN and check again — the IP should change back to your real one. This confirms the test was actually measuring the VPN.

That's it. You're done. Day-to-day, you just open the app and hit Connect.

Setting Up a Second Device

Repeat Steps 1–2 on your phone (or laptop): install from the official app store, log in with the same account. There's nothing to "link" — your subscription covers multiple simultaneous connections (usually 5–10 devices), and each device connects independently.

Two phone-specific tips:

• Turn on auto-connect for untrusted Wi-Fi. Most mobile apps offer "auto-connect on untrusted networks" — enable it, and the VPN engages itself every time you join hotel or airport Wi-Fi. This is the feature that makes travel privacy automatic.
• Expect a battery nudge. A VPN uses slightly more battery because of encryption. On modern phones it's modest — roughly a few percent over a day — and worth it.

Troubleshooting: 3 Common First-Day Problems

1. "It connects, but the internet feels slow"

First, switch to a nearer server. Then try switching protocols (WireGuard ↔ OpenVPN). If a specific site won't load, try a different server in the same country — that site may be blocking your current server's IP. A 10–20% speed drop is normal; an 80% drop means something's wrong.

2. "My banking app or streaming service blocks me"

Banks and streaming services often flag VPN IPs as suspicious. The fix most providers suggest: use split tunneling (in Settings on many apps) to route just that one app outside the VPN, or temporarily disconnect for that task. This is normal and not a sign your VPN is broken.

3. "Hotel Wi-Fi won't let me connect — it wants me to log in first"

Captive portals (the "enter your room number" page) block the VPN tunnel until you authenticate. Fix: disconnect the VPN, join the Wi-Fi, complete the portal login in your browser, then connect the VPN. Some apps have a "allow LAN/captive portal" option to smooth this out — enable it before your trip.

FAQ

Do I need to keep the app open all the time?

No — but the VPN needs to be connected to protect you. Many apps can auto-connect at startup or on untrusted Wi-Fi. Set that once and forget it.

Can my whole household use one subscription?

Yes. Nearly all paid plans allow 5–10 simultaneous connections, which covers a typical household's phones and laptops.

Should I install it on my router instead?

For most beginners, no. Router installation protects every device at home automatically, but it's fiddly, slows the whole network through one tunnel, and makes switching server locations annoying. Apps on your devices are simpler and more flexible. Revisit the router idea only if you have devices that can't run apps (some smart TVs, game consoles).

How do I know the VPN is still connected later?

Your phone shows a small VPN icon in the status bar; desktop apps show an icon in the system tray/menu bar. If the kill switch is on, a dropped connection blocks traffic rather than leaking — you'll notice because the internet "stops," which is the kill switch doing its job. Just reconnect.