How to Add and Set Up a VPN Connection in Windows 11 (Built-In Client)
You want to add a VPN connection in Windows 11 using the built-in client — no third-party app needed — with the server details your provider or IT department gave you.
Why: Windows 11 includes a native VPN client that handles IKEv2, L2TP/IPsec, SSTP, and PPTP. You enter the server address and sign-in details once, save the profile, then connect or disconnect from the taskbar. You only need a separate app if your provider requires their own protocol.
Step 1: Open the Add VPN screen
- Open Settings (Windows key + I).
- Go to Network & internet > VPN.
- Select Add VPN (top right).
Step 2: Fill in the connection details
In the Add a VPN connection dialog, complete each field:
- VPN provider: choose Windows (built-in).
- Connection name: a name you’ll recognize (for example, Work VPN). This is just a label.
- Server name or address: the address your provider gave you — a domain like
vpn.example.comor an IP like203.0.113.10. - VPN type: the protocol the server uses (IKEv2, L2TP/IPsec, SSTP, or PPTP). If you’re not sure, choose Automatic and Windows will try to negotiate it — but a specific type is more reliable when you know it.
- Type of sign-in info: how you authenticate — User name and password, one-time password, certificate, or smart card.
- User name and Password: enter these if you chose user name and password. You can leave them blank to be prompted at connect time.
Then select Save.
Step 3: Connect
Two ways to connect once the profile is saved:
- From the taskbar: select the network/volume/battery cluster, choose VPN, then toggle your connection on (or select Manage VPN connections if you have several).
- From Settings: go to Network & internet > VPN, then select Connect next to your connection.
If you left credentials blank, you’ll be prompted for them now. When it shows Connected, the VPN is active.
FAQ
Which VPN type should I pick? Use whatever your provider/admin specifies. IKEv2 is common and reconnects well; L2TP/IPsec usually needs a pre-shared key or certificate; PPTP is legacy and not recommended for security. Automatic is a safe fallback if you genuinely don’t know.
I connected but have no internet now. That’s a split-tunneling/DNS issue, not a setup mistake — the profile is fine. See the separate guide on a VPN that connects but gives no internet.
Do I need an admin account? To add a profile for just your own account, no. To make it available to all users on the PC (the “global phone book”), you need admin rights — that’s done via PowerShell with the -AllUserConnection switch.