Your IP:Unknown

·

Your Status: Unknown

Skip to main content

How to set up the built-in VPN client in Windows

Cybersecurity threats are growing every day, and a virtual private network (VPN) is one of the best tools to improve your privacy and security online. Fortunately for PC users, Windows’ built-in VPN client offers a simple way to create a more secure connection to the internet. This guide explains everything you need to know about using it, including setup steps, limitations, and troubleshooting tips.

Aug 21, 2025

8 min read

Does Windows have a built-in VPN client?

Windows does have a built-in VPN client, but it doesn’t come with a VPN service out of the box. This limitation means it provides the tools for configuration, but you still need to subscribe to a third-party VPN provider, paid or free, to make the client work.

But what is Windows' built-in VPN client?

Windows' built-in VPN client is a tool that lets you connect to a VPN without downloading extra software. It’s already part of the Windows operating system (OS), and you can use it to manually set up a secure connection by entering details from your VPN provider, like server addresses and login credentials.

Should you use Windows' built-in VPN client?

Whether or not you should use the Windows built-in VPN depends on your needs. If you prefer a lightweight and basic solution to secure your connection and stop your ISP (internet service provider) from seeing your activity, the built-in client can be a suitable option. It supports VPN protocols like PPTP, IKEv2, L2TP/IPSec, or SSTP, which help establish reliable and secure connections.

After signing up with a VPN provider, you’ll receive the information you need to create an individual connection profile. While it works for simple VPN setups, each profile can only handle one server address and protocol at a time, which makes it less user-friendly compared to standalone VPN apps that offer seamless server switching and advanced features.

For a more well-rounded perspective on whether it’s the right choice for your needs, let’s explore the pros and cons of using the Windows built-in VPN client:

Pros:

  • You don’t need to install extra software since the VPN client is already part of the Windows OS.

  • You can manually set up custom VPN profiles to suit specific needs.

  • It doesn’t require additional system resources.

Cons:

  • Windows’ built-in VPN client lacks advanced features like a kill switch, split tunneling by app or destination, and automatic protocol selection.

  • It doesn’t support modern protocols like OpenVPN or WireGuard.

  • Setting it up can be tedious because you need to manually create profiles for each server and protocol.

  • It relies on external VPN services for encryption since it doesn’t provide encryption on its own.

In summary, the Windows built-in VPN client is a decent choice for users who need basic functionality and don’t mind manual configuration. However, for a smoother experience with advanced features, standalone VPN apps are much better suited. Whether or not you should use the built-in client depends on how much customization, convenience, and security you require.

If you decide to proceed, the next step is to learn how to use the Windows built-in VPN client and set up a new VPN connection profile.

How to set up a new VPN connection profile in Windows

To set up a VPN on the Windows built-in VPN client, you’ll need your VPN provider’s details, such as the server address, VPN type, and login credentials. Once you have this information, follow the steps below:

  1. 1.Click the “Start” button (window icon) and select “Settings.”
    How to set up a new VPN connection profile in Windows step 1
  2. 2.In the “Settings” window, click “Network & internet” from the left-hand menu.
    How to set up a new VPN connection profile in Windows step 2
  3. 3.Click “VPN.”
    How to set up a new VPN connection profile in Windows step 3
  4. 4.Click “Add VPN.”
    How to set up a new VPN connection profile in Windows step 4
  5. 5.In the “Add a VPN connection” window: 1) Set the “VPN provider” to “Windows (built-in),” 2) Enter a name for the connection in the “Connection name” field, 3) Input the server address provided by your VPN service, 4) Select the VPN type (such as IKEv2 or SSTP), 5) Enter your login credentials (username and password) or select a different type of sign-in information.
    How to set up a new VPN connection profile in Windows step 5
  6. 6.Click “Save” to create the VPN connection profile.
    How to set up a new VPN connection profile in Windows step 6
  7. 7.You will now see the VPN profile listed under the VPN connections section. Click “Connect” to activate it. Once connected, your browsing activity will be encrypted and routed through the VPN.
How to set up a new VPN connection profile in Windows step 7

How to disconnect from the Windows built-in VPN client

If you want to disconnect from the VPN client, follow these steps:

  1. 1.Click the “Start” button (window icon) and open “Settings.”
  2. 2.Navigate to “Network & internet.”
  3. 3.Click “VPN.”
  4. 4.Click “Disconnect” next to the VPN connection you want to turn off.

How to troubleshoot errors when setting up the Windows built-in VPN client

Sometimes errors might occur while setting up the built-in VPN client. Here’s an example of an error and how to fix it:

Error

The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.

Solution

  1. 1.Open the command prompt as an administrator by pressing the “Windows” key + “R,” typing "cmd", and then pressing “Ctrl” + “Shift” + “Enter.”
  2. 2.Type in your password if prompted.
  3. 3.Then, enter the following command and click “Enter.”
Set-VpnConnectionIPsecConfiguration -ConnectionName "NordVPN" -AuthenticationTransformConstants SHA196 -CipherTransformConstants AES256 -EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup None -DHGroup Group14 -PassThru -Force

Important: Replace "NordVPN" with the name of your VPN connection.

Other common errors and fixes include:

  • Incorrect server settings. Double-check the server name or address provided by your VPN service. A small typo can prevent the connection from working.
  • Unsupported protocols. Ensure that your VPN provider supports protocols that work with the Windows client, such as PPTP, IKEv2, L2TP/IPSec, or SSTP.
  • Outdated system. Make sure your version of Windows is up to date to avoid compatibility problems with newer protocols or features.

Additional note: If you’re using a service other than NordVPN, check with your VPN provider for the correct encryption and protocol settings before running commands. The example provided uses NordVPN as a placeholder, but you can follow these steps with any VPN service that supports protocols compatible with Windows' built-in VPN client.

How to choose the right VPN for Windows

The VPN you choose determines the security, speed, and overall functionality of your VPN experience. To help you make the best decision, here are the key features to look for in a VPN for Windows:

  • Strong privacy measures. Choose a provider with a no-logs policy to ensure your online activity isn’t tracked or stored. Also, make sure the provider offers robust encryption to protect your online traffic from prying eyes.
  • Fast and stable speeds. Opt for a VPN with high-speed servers and reliable performance to avoid slow connections or buffering, especially during tasks like streaming or video calls.
  • Ease of manual setup. Look for VPN providers that offer clear setup guides and detailed instructions, which make it simple to configure the VPN with the Windows built-in client manually.
  • Support for required protocols. The Windows built-in VPN client only supports PPTP, IKEv2, SSTP, and L2TP/IPSec protocols, so ensure your chosen VPN provider is compatible with these protocols.

Online security starts with a click.

Stay safe with the world’s leading VPN

FAQ

Violeta Lyskoit | NordVPN

Violeta Lyskoit

Violeta is a copywriter who is keen on showing readers how to navigate the web safely, making sure their digital footprint stays private.