guide · static export
Security

Connect to a VPN With the Built-In Windows Client

Windows speaks several VPN protocols without any extra software. Good enough for a work tunnel or a home router, and it starts before you sign in.

by@guidox updated:10/31/26 time:20 min level:Intermediate tested on:Windows 11 24H2 works on:Windows 10, Windows 11 tools:VPN server details
TL;DR

Add a VPN profile under **Network & internet > VPN**, choose the protocol and enter the server and credentials. Test it once from the settings page before relying on it.

Before you start

Requirements

  • Server details
  • Admin rights
  • Fifteen minutes
Step by step

Instructions

01

Get the four values from the provider

You need the server address, the tunnel type, the authentication method and the credentials. A profile with a guessed protocol fails at the handshake without a useful error.

02

Add the profile

The VPN page takes the provider name, the address and the type. Choose the protocol the server actually offers; automatic detection only works for some combinations.

Settings > Network & internet > VPN > Add VPN
03

Store credentials only if the machine is yours

Saving the username helps on a personal laptop. On a shared machine the saved credential is usable by anyone who signs in.

⚠ warningA pre-shared key for L2TP is stored in the clear in the profile. Use a protocol with certificate authentication where the server supports it.
04

Set split versus full tunnel deliberately

The advanced options decide whether all traffic uses the tunnel or only the remote subnet. Full tunnel protects more and costs more bandwidth.

tipSplit tunnel keeps local network printing and media servers working while remote resources go through the VPN.
05

Connect and verify the route

After connecting, check that the machine has the address the server assigned. A connection that reports success without an address routes nothing.

ipconfig /all
06

Decide about auto-connect

The profile can connect on demand or when the network changes. On-demand is convenient and hides a failing server until the moment you need it.

Troubleshooting

Common issues

Error 720 or 809

The protocol or the port is blocked. Check the tunnel type and the router's forwarding rules.

It connects but nothing loads

DNS is not going through the tunnel. Set the DNS server the provider gave you.

It drops every few minutes

A double NAT or aggressive firewall. Try another protocol first.

The profile is greyed out

A policy manages VPN connections on this machine.

FAQ

Frequently asked

Is this enough for privacy?

It hides traffic from the local network. The provider still sees it.

Can it start before sign-in?

Only for some protocols. A device tunnel needs an enterprise setup.

How to undo this

Remove the VPN profile from the same settings page. Stored credentials and routes are deleted with it.

Changelog · 1 entry
  1. 2026-10-31
    First version
Interactive version: checklist, feedback, related guides →

Free · no account needed · tracks your progress