Kodi has no VPN switch of its own
Kodi is a media player, and it has no setting where you type in VPN details. The usual way to protect Kodi is to install a VPN app on the device Kodi runs on, connect, and then open Kodi. Kodi's traffic goes through the VPN along with everything else on that device.
That means the steps depend on your hardware. Kodi runs on Android, Linux, BSD, macOS, iOS, tvOS and Windows, according to Team Kodi's own project page. The current stable release is Kodi 21.3 Omega, published on October 31, 2025. Kodi 22 Piers reached its first release candidate on September 27, 2026, and the VPN steps below work the same on either version.
A VPN stops your internet provider, and anyone else on the same network, from seeing which streams and sites Kodi connects to, and sites see the VPN server's IP address instead of yours. It won't make an unlicensed stream legal, and it won't protect you from a bad add-on you install yourself, so stick to add-ons from sources you trust.
Fire TV Stick and Fire TV
Start by checking which operating system your stick runs, because Amazon now sells two kinds. Go to Settings > My Fire TV > About. The screen shows either Fire OS or Vega OS followed by a version number.
Amazon's device specifications list three Vega OS sticks: the Fire TV Stick 4K Select (2025), the Fire TV Stick 4K 3rd generation (2026) and the Fire TV Stick HD (2026). The Fire TV Stick 4K Plus (2025) and the 2023 Fire TV Stick 4K and 4K Max run Fire OS. Proton VPN says its own Android app can't be installed on a Vega OS stick. Kodi runs on Fire TV as an Android app, so if Kodi is the reason you're buying a stick, check the model before you pay.
On a Fire OS stick that already has Kodi:
- Search for your VPN in the Amazon Appstore on the stick.
- Install the app and open it.
- Sign in. Proton VPN's Vega OS app, for one, lets you scan a QR code or enter a short code on its website, which saves typing a password with the remote.
- Connect to a server, ideally one near you for speed.
- Press Home, open Kodi and start your video.
Check the app's version requirements first. Surfshark needs Fire OS 5 or later and also has an app for Vega OS. Proton VPN's Fire OS app needs Fire OS 7 or later, and Proton has a separate Vega OS app. Surfshark notes that the first-generation Fire TV Stick doesn't support any VPN app, so on that model you need a VPN on your router instead (see below).
Android TV, Google TV and Nvidia Shield
Kodi is in the Google Play Store, and so are the main VPN apps, which makes Android TV the easiest box to set up.
- Open the Play Store on the TV and search for your VPN.
- Install it, open it and sign in.
- Accept Android's request to set up a VPN connection. The app can't connect until you do.
- Connect, then open Kodi.
Surfshark and Proton VPN both list Android TV apps. One quirk worth knowing: Surfshark says its app doesn't support Ethernet connections on Android TVs and boxes running Android 9, so use Wi-Fi on those or pick a different VPN.
Windows PC and Mac
- Download the VPN app from the provider's website (or the Mac App Store) and install it.
- Sign in and connect to a server.
- Open Kodi.
If your VPN has split tunneling, look at its settings before you watch anything. Split tunneling lets chosen apps skip the VPN, and if Kodi is on the skip list, it won't be protected. Some people use this the other way round: Kodi goes through the VPN while a paid streaming app uses the normal connection.
iPhone, iPad and Apple TV
On Apple devices the VPN app covers every app on the device, Kodi included. Install the VPN from the App Store, tap Allow when it asks to add a VPN configuration, connect, and then open Kodi. Our iPad VPN guide has the full steps.
For Apple TV, you need a VPN that makes a tvOS app. Proton VPN's Apple TV app needs tvOS 17 or later.
Android phones and tablets
Install the VPN from Google Play, sign in, accept the connection request and connect before you open Kodi. Our Android VPN guide covers the settings in more detail, including what to do if you can't use an app.
LibreELEC and other Kodi-only boxes
LibreELEC, the small Linux system many people put on a Raspberry Pi to run Kodi, has no app store for VPN apps. You have two choices.
The first is WireGuard, which LibreELEC supports through its network manager, ConnMan. You download a WireGuard configuration from your VPN provider, convert it to ConnMan's own file format and save it in /storage/.config/wireguard/. LibreELEC's wiki walks through the rest, which involves a few terminal commands over SSH and a small service file so the tunnel starts at boot. ConnMan sends all traffic through the tunnel by default. This route suits people who are comfortable editing files on the box.
The second is to put the VPN on your router, which needs no changes to the Kodi box at all.
On your router
A VPN on the router covers every device on your network, including Kodi boxes and old Fire TV Sticks that can't run a VPN app. Everything in the house then uses the VPN, unless your router lets you choose which devices go through it. Check that your router supports VPN connections before you buy anything, then follow your VPN provider's router guide for your model.
Check that it's working
Most VPN apps show a status such as "Connected" or "Protected". To confirm that Kodi itself is covered, connect on the device, open a browser on the same device and visit any "what is my IP" site. If it shows the VPN server's location instead of yours, Kodi's traffic is going through the VPN too, unless split tunneling excludes it.
Fixing common problems
If videos buffer after you connect, pick a server closer to you or try a different protocol in the VPN app's settings. A distant server adds delay to every request.
If a source stops working, the service may be blocking known VPN addresses. Try another server in the same country, or, for a service you pay for, use split tunneling to let that app skip the VPN.
If the VPN drops when the stick sleeps, look for an auto-connect setting in the VPN app and turn on its kill switch if it has one. A kill switch cuts the internet connection when the VPN drops, so Kodi doesn't carry on over your normal connection without you noticing.
Which VPN to use
For a Kodi setup, the deciding questions are whether the VPN has an app for your exact device and how many devices one plan covers. Surfshark allows unlimited devices on one account, which helps if Kodi runs on a stick, a laptop and a phone. Proton VPN has a free plan for one device with no data cap, though Proton says streaming support is a paid feature. Our guides to the best VPN for Kodi and the best VPN for Fire TV Stick compare current prices and plans.
