How to Set Up a VPN on Any Device

Platform-specific setup guides for the VPNs in our top 5 ranking. Each setup takes about five minutes.

By Jordan Brennan · Editor & Lead Tester

Last updated: April 24, 2026

Windows 10 and Windows 11

1. Purchase your VPN and note the login credentials in the confirmation email.
2. Download the Windows installer from the provider's official site (not third-party download sites).
3. Double-click the downloaded file and step through the installer. Accept the default install location.
4. Launch the app. Sign in with your email and password.
5. In Settings, enable Kill Switch and set Protocol to WireGuard, Lightway, or NordLynx.
6. Press the large "Connect" button. Once the status changes to "Connected," verify via ipleak.net.

macOS

1. Download the macOS app from the provider's official site or the Mac App Store.
2. Drag the app into your Applications folder.
3. Launch the app. macOS may ask for permission to add a VPN configuration — click Allow.
4. Sign in. In Preferences, enable Kill Switch and set the protocol to WireGuard or Lightway.
5. Click Connect. Verify at ipleak.net.

iOS (iPhone and iPad)

1. Install the VPN's app from the App Store.
2. Open the app. Sign in with your email and password.
3. The first time you connect, iOS will prompt you to allow VPN configurations — tap Allow and confirm with Face ID / Touch ID.
4. Tap Connect. The VPN icon will appear in the status bar.
5. In Settings, enable "VPN On Demand" if you want the VPN to auto-connect on untrusted Wi-Fi networks.

Android

1. Install the VPN app from the Google Play Store. Some VPNs also publish APK files outside Play Store for privacy-focused users.
2. Open the app and sign in.
3. The first connection will trigger a system prompt to allow VPN configurations — tap OK.
4. Enable "Always-on VPN" in Android Settings → Network → VPN. This forces all traffic through the VPN and prevents leaks during reconnects.

Linux

NordVPN, Surfshark, Proton VPN, and ExpressVPN all publish native Linux apps. Installation varies by distribution:

• Ubuntu/Debian: Download the .deb from the provider's site and install with sudo dpkg -i filename.deb.
• Fedora/RHEL: Download the .rpm and install with sudo dnf install filename.rpm.
• Arch: Most providers are in the AUR.
• After installation, run the CLI tool (e.g., nordvpn login, nordvpn connect).

Router installation (household-wide VPN)

A VPN at the router level protects every device on the network — including game consoles, smart TVs, and guests. Two routes:

Buy a pre-configured VPN router

ExpressVPN's Aircove is the easiest option: plug it in, run the ExpressVPN app, pick a country. ASUSWRT-Merlin firmware on ASUS routers supports OpenVPN and WireGuard natively. GL.iNet "travel routers" are another good option for frequent travelers.

Flash DD-WRT or OpenWRT

For advanced users with a compatible router, flashing third-party firmware unlocks VPN client capabilities. This is a more involved process — follow the provider's specific guide. The benefit is one-time setup for permanent coverage.

Smart TVs and streaming sticks

• Amazon Fire TV: Install the VPN app directly from the Fire TV app store.
• Apple TV: Install from the App Store on tvOS 17+.
• Android TV: Install from the Google Play Store.
• Samsung / LG / Roku: These do not support VPN apps natively. Install the VPN on your router instead.

Post-installation checklist

• Verify IP and DNS leak status at ipleak.net.
• Confirm kill switch is enabled on every platform.
• Set the protocol to WireGuard, Lightway, or NordLynx (not OpenVPN by default).
• Enable split tunneling if you need to exclude banking apps, Apple Pay, or local services.
• Test streaming on the country servers you actually plan to use.