How to Use a VPN on iPhone: App Setup, Manual Setup and Fixes

To use a VPN on iPhone, the simplest route is to install your VPN provider’s app from the App Store, open it, tap Allow when iOS asks to add VPN configurations, and then tap Connect. If you have server details from an employer or provider instead, you can add the VPN yourself in Settings > General > VPN & Device Management > VPN and switch it on there.

Below is how each method works, how to check that the tunnel is really up, and what to try when it won’t connect. Menu names here reflect iOS 26-era documentation as of October 2026; Apple renames things between releases, so your screens may differ slightly.

Two ways to get a VPN onto your iPhone

According to Apple’s platform support guide, iPhone and iPad include built-in support for L2TP, IKEv2 and IPSec VPN connections. Anything else needs an app.

Method 1: Use your VPN provider’s app

This is the route almost every consumer VPN expects, and it is what Engadget’s walkthrough describes.

1. Open the App Store, search for your VPN provider by name, and install the app published by that company. Check the developer name on the listing so you don’t grab a look-alike.
2. Open the app and sign in with the account you created on the provider’s own website or in the app.
3. When the app first tries to connect, iOS shows a prompt asking to add VPN configurations. Tap Allow.
4. Confirm with Face ID, Touch ID or your device passcode if asked. Guides describe this prompt slightly differently, but the point is the same: iOS won’t let an app install a VPN profile without your approval.
5. Pick a server location (or let the app choose one) and tap Connect.

After the first setup, you normally just open the app and tap Connect or Disconnect. The app also adds an entry under Settings > General > VPN & Device Management > VPN, so you can toggle it from there too.

What the “Allow” prompt actually does

Tapping Allow installs a VPN configuration profile on the phone. It doesn’t hand over your Apple Account or passcode to the app. If an app ever asks you to type your Apple Account password inside the app itself to “enable VPN,” stop and remove it.

Method 2: Add a VPN manually in Settings

Use this when your company IT team, school, or self-hosted server gives you connection details. Apple’s guide says to get these settings from your network administrator or VPN service provider; don’t guess them.

1. Open Settings > General > VPN & Device Management.
2. Tap VPN, then Add VPN Configuration (Apple’s iOS 26 guide labels it Add VPN Connection; the wording has varied between versions).
3. Tap Type and choose IKEv2, IPSec or L2TP, whichever your provider specifies.
4. Fill in the fields. The exact list depends on the type you picked, but typically includes:
   • Description: any name you’ll recognize.
   • Server: the hostname or IP address you were given.
   • Remote ID and Local ID (IKEv2 only): Netgate’s pfSense iOS guide notes the Remote ID is often the same hostname as the server and must match the server certificate, with Local ID often left blank. Follow whatever your admin tells you.
   • Authentication: username and password, a certificate, or a shared secret, depending on the setup.
5. Tap Done.
6. Back on the VPN screen, flip the Status switch on. It should change to Connected.

Apple documents the full set of IKEv2 options in its device management reference. That page is aimed at IT admins, but it is useful if you’re setting up your own server and want to know what iOS supports.

What about WireGuard or OpenVPN?

These aren’t in the Settings Type list. For WireGuard, the usual approach is to install the official WireGuard app from the App Store, tap + or Add a tunnel, and either scan a QR code from your server admin or import a configuration file, as described in Omada’s WireGuard client guide. OpenVPN servers likewise need an OpenVPN-compatible app.

Turning the VPN on and off

You have two places to control it:

• In the VPN app: tap Connect or Disconnect.
• In Settings: go to Settings > General > VPN & Device Management > VPN and use the Status switch under VPN Configurations, as Verizon’s iPhone guide describes.

If you have more than one VPN configuration, tap the one you want on that screen to make it the active one before switching it on. Only one can be connected at a time in the Settings list.

How to check it’s actually working

Seeing “Connected” is a good sign, but it’s worth checking once:

1. Turn the VPN off and visit any IP address lookup site in Safari. Note the IP and location.
2. Turn the VPN on and reload the page.
3. The IP should now belong to the VPN server, and the location should match the server you picked.

If the address doesn’t change, the tunnel isn’t carrying your traffic. Reconnect, or try another server.

Troubleshooting common problems

It won’t connect at all. Check that you’re on a working Wi-Fi or cellular connection first. Then try another server in the app. For manual setups, recheck the server, Remote ID and credentials character by character; one typo is enough to fail.

It keeps reconnecting, or you can’t turn it off. Many apps enable Connect On Demand, which tells iOS to bring the VPN back automatically. Turn it off in the app’s settings, or tap the i next to the profile in Settings > General > VPN & Device Management > VPN and switch Connect On Demand off. Community reports, including VPN provider support blogs and Apple Developer Forums threads, mention on-demand profiles getting stuck in a retry loop after switching between Wi-Fi and cellular; toggling the connection off and on usually clears it.

It stopped working after an iOS update. Update the VPN app first. Some VPN vendors reported configuration problems during iOS 26 betas, and at least one claims Apple trimmed legacy options from the built-in client. We couldn’t confirm that claim against Apple’s own documentation, so if a manual profile breaks after an update, ask your provider or admin whether they have updated settings.

Nothing helps. Delete the profile and set it up fresh: tap the i next to it in the VPN screen, then Delete VPN. Then reinstall the app or re-enter the manual settings. If every server fails, the problem may be on the provider’s side.

Removing a VPN you no longer use

Unused VPN profiles are clutter, and an old one with Connect On Demand switched on can quietly reroute your traffic. Go to Settings > General > VPN & Device Management > VPN, tap the i next to the profile, and choose Delete VPN. Deleting the app alone may not always remove its profile, so check this screen afterward.

VPN vs. iCloud Private Relay

If you pay for iCloud+, you may already have Private Relay turned on. It isn’t a VPN replacement: comparisons agree it mainly covers Safari traffic and keeps you within your general region, while a VPN can tunnel traffic from apps across the device and let you pick a server country. Sources differ on exactly how much traffic Private Relay encrypts, so if you need full-device coverage or a specific location, use a VPN.