How to use a VPN on iPhone and iPad

Originally written byMutuo MbillaContributing writer Updated byWoofresh editors Updated November 4, 2026 First published February 2022

Install your VPN provider's app from the App Store, sign in, tap Connect and tap Allow when iOS asks to add a VPN configuration. That covers most people. If your provider gives you manual settings instead, add them under Settings, General, VPN & Device Management, then VPN. iCloud Private Relay, included with iCloud+, is a lighter option that protects Safari browsing but can't place you in another country.

A VPN app on your iPhone encrypts the traffic between the phone and the VPN company's server, so the Wi-Fi network you're on sees only a connection to that server, and the sites and apps you use see the server's IP address instead of yours. That is most useful on Wi-Fi you don't control, such as a hotel, an airport or a cafe. Setting one up takes a few minutes. The steps below use Surfshark's iOS app as the worked example because its help center documents each screen, but NordVPN, ExpressVPN and other providers follow the same pattern. Everything here was checked against the providers' and Apple's help pages on November 4, 2026, and the same steps work on an iPad.

Before you start

You need a VPN subscription or a free plan, and an iPhone on a recent version of iOS. Surfshark's app needs iOS 17 or later; other apps list their minimum version on their App Store page. If you want to try a VPN before paying, Proton VPN has a free plan for one device with no data limit.

Think about where you buy. Surfshark's 30-day money-back guarantee covers subscriptions bought on its website, while Surfshark sends anyone who subscribed through the App Store to Apple for a refund. If you think you might want your money back, check your provider's refund policy, and consider buying on its website and then signing in on the phone.

Set up a VPN with the provider's app

Buy a plan on the provider's website, or choose Create account inside the app.
Open the App Store, search for the VPN by name and install it.
Open the app and tap Log in. Use the email and password you signed up with. If you bought through a linked Apple, Google or Microsoft account, choose that option instead. Surfshark also lets you sign in by approving the login from another device where you're already signed in.
Accept the privacy policy prompt.
Tap Connect to join the fastest recommended server, or tap the location tile and pick a country or city. The first time you connect, the app asks for the permissions a VPN needs: tap Continue, then Allow when iOS asks to add the VPN to your configurations.

When the app shows Connected with a running timer, your traffic is going through the VPN. To stop, open the app and disconnect.

Turn on the kill switch

A kill switch cuts your internet connection if the VPN drops, so nothing travels over the open network while the app reconnects. In Surfshark's iOS app it's under Settings, then VPN settings, then Kill Switch. Look for the same setting in your app after you install it.

Set up a VPN manually

Use a manual setup when your provider has no iOS app, when your employer gives you VPN details, or when you'd rather not install another app. iPhones have a VPN client built in. You give it a server and a login, and you turn it on and off in Settings. Here's how it works with Surfshark's IKEv2 settings:

Sign in to the provider's website and find its manual setup page. Surfshark's is under Products, then VPN, then Manual Setup. Generate service credentials there. These are a separate username and password, not your account email and password.
Note the hostname of the server you want, from the provider's server list.
In Safari, download the provider's IKEv2 certificate and tap Allow. Open Settings, tap Profile Downloaded, then Install, and confirm.
Go to Settings, then General, then VPN & Device Management, then VPN, and tap Add VPN Configuration.
Fill in the form. For Surfshark: Type is IKEv2, Description is any name you like, Server and Remote ID are both the server hostname, Local ID stays empty, User Authentication is Username, and the username and password are your service credentials. Leave Proxy off and tap Done.
Use the switch next to the configuration to connect and disconnect.

Each configuration points at one server, so to change country you add another configuration with a different hostname. Some providers, Surfshark among them, also publish manual WireGuard settings, which you load into the WireGuard app instead.

Check that it works

Once you're connected, run an IP leak test and a DNS leak test. Surfshark hosts both on its website, and other providers publish their own. The IP address you see should belong to the VPN server, and the DNS servers listed should belong to the VPN provider rather than your mobile carrier or the Wi-Fi network.

iCloud Private Relay or a VPN

If you pay for iCloud+, or someone in your Family Sharing group does, your iPhone already has iCloud Private Relay. It sends your Safari browsing through two relays. Apple runs the first, which sees your IP address but not the site you're visiting, because your DNS requests are encrypted. A third party runs the second, which gives you a temporary IP address and connects you to the site. Turn it on under Settings, then your name, then iCloud, then Private Relay.

It covers less than a VPN does:

Apple describes it as protection for browsing in Safari. A VPN app covers traffic from every app unless you set exceptions with a feature such as Surfshark's Bypasser.
Its IP Address Location setting offers two choices: Maintain General Location or Use Country and Time Zone. You can't pick a server in another country.
It isn't available in every country or region, and it switches itself off when you travel somewhere it isn't offered.
Some websites ask for extra steps to sign in, because they can't see your IP address. In Safari you can tap the page menu and choose Show IP Address to let one site through.

Private Relay is a sensible default for Safari if you already pay for iCloud+. Get a VPN if you want every app covered, a choice of server location, or protection in countries where Private Relay isn't offered.

Streaming with a VPN on iPhone

Streaming services decide what to show in each country, and many try to block VPN traffic. Surfshark's own Netflix guide tells you to connect to a server in your home country, and its terms forbid using the service against the law or the rules of a site you visit. So the use VPN companies support is watching what you already pay for while you're traveling, with your connection encrypted. Check each streaming service's terms before you rely on a VPN with it.

Which VPN to use on an iPhone

Any VPN with a well-kept iOS app will work with the steps above. If you're choosing, decide how many devices you need to cover and whether you want to try before paying. Surfshark allows unlimited devices on one subscription and NordVPN allows 10 at once. Our guide to the best VPNs for iPhone compares current prices and trials, and our step-by-step guides to installing Surfshark and installing NordVPN cover each app across all your devices.

Questions people ask

Does the iPhone have a built-in VPN?

It has a built-in VPN client, but not a VPN service. You can add a configuration under Settings, then General, then VPN & Device Management, then VPN, using server details from a VPN provider or your employer. Apple's iCloud Private Relay, included with iCloud+, is a separate feature that covers Safari browsing.

Is iCloud Private Relay the same as a VPN?

No. Private Relay protects your browsing in Safari and encrypts your DNS requests, and it only lets you keep your general location or blur it to your country and time zone. A VPN app covers every app on the phone and lets you choose which country's server to use.

How do I turn off a VPN on my iPhone?

Open the VPN app and tap Disconnect. For a manual configuration, go to Settings, then General, then VPN & Device Management, then VPN, and turn off the status switch. To remove a VPN completely, delete the app or the configuration.

Is there a free VPN for iPhone?

Proton VPN has a free plan for one device with no data limit, and its paid plans cover up to 10 devices. Surfshark and NordVPN are paid services; Surfshark offers a 30-day money-back guarantee on subscriptions bought through its website.

Why can't I get a refund from my VPN provider?

If you subscribed through the App Store, the provider may not be able to refund you. Surfshark, for example, offers a 30-day money-back guarantee on subscriptions bought through its website and sends App Store customers to Apple Support for refunds. Check your provider's refund policy before you buy.

Can I use a VPN to watch Netflix on my iPhone?

You can watch your own Netflix account with a VPN connected, and Surfshark recommends a server in your home country for it. Streaming services set their catalogs by country and many block VPN traffic, so check the service's terms before you rely on a VPN to watch it.