A virtual private network (VPN) creates an encrypted connection between your device and a VPN server, helping protect network traffic from being exposed as it travels across the internet. VPNs are commonly used for secure remote access to business networks and can also be used by individuals who want additional privacy when connecting to the internet.
A VPN can be especially useful when you're working remotely or connecting through a public network. However, a VPN is not a complete security solution. It does not make you anonymous, protect you from every type of cyberattack, or replace basic security practices such as using multi-factor authentication, keeping software updated, and protecting your accounts.
In this guide, we'll explain how VPNs work, what to consider when choosing a VPN service, and how to set up a VPN connection on a Windows 11 PC.
What is a VPN?
A virtual private network creates an encrypted connection, often called a tunnel, between your device and a VPN server. Your internet traffic travels through that connection before continuing to its destination.
For example, when you're using a VPN on a laptop connected to public Wi-Fi, the VPN can help protect your traffic between your device and the VPN server. VPN technology can also provide secure remote access to an organization's internal network and resources. NIST describes VPNs as a way to protect communications transmitted across public networks such as the internet.
A VPN can also change the public IP address that websites see because your traffic appears to originate from the VPN server rather than directly from your device.
However, a VPN does not make all of your online activity invisible. The VPN provider can still have visibility into certain information depending on how its service is designed and what it logs. Websites and online services may also identify you through your account, cookies, browser settings, or other technologies.
Why use a VPN?
There are several reasons to use a VPN:
- Protect traffic on networks you don't control: A VPN can encrypt traffic between your device and the VPN server.
- Secure remote access: Businesses can use VPNs to give authorized employees access to internal applications and resources.
- Add privacy on public networks: A VPN can provide an additional layer of protection when using Wi-Fi in places such as hotels, airports, and coffee shops.
- Connect to a private network while traveling: Employees can use an organization's VPN to securely access work resources from another location.
- Change your apparent IP address: A consumer VPN can make your internet traffic appear to come from the VPN server's location.
CISA recommends using an organization's VPN or another authorized secure-access solution when connecting to public networks for work.
Does a VPN make public Wi-Fi completely safe?
No. A VPN can protect the connection between your device and the VPN server, but other risks remain.
For example, an attacker could create a fraudulent Wi-Fi network with a name that looks legitimate. CISA recommends confirming the name and login procedure for a public hotspot before connecting.
You should still:
- Connect only to networks you recognize.
- Keep your operating system and applications updated.
- Use multi-factor authentication on important accounts.
- Avoid entering sensitive information on suspicious websites.
- Use your device's firewall and security software.
- Disconnect from networks you no longer need.
Who uses VPNs?
Businesses and remote workers
Organizations commonly use VPN technology to provide secure remote access to company networks and resources.
A business VPN is different from a consumer VPN subscription. Your company's IT team may require a specific VPN application, configuration, authentication method, or security policy. Always follow your organization's instructions rather than installing a personal VPN to access company resources.
NIST guidance covers both IPsec-based VPNs and SSL/TLS-based VPN technologies for protecting communications and providing remote access.
Individuals
Individuals may use VPN services when they want additional privacy or security while using the internet, particularly when connecting through networks they don't control.
A personal VPN can also change the IP address presented to websites and online services. Keep in mind that this does not guarantee anonymity.
How to choose a VPN service
There are many VPN services available, and their features, privacy practices, security controls, and costs vary.
Before signing up, look beyond the number of servers or countries advertised by a provider.
1. Understand the provider's privacy and logging policies
A VPN provider becomes an intermediary for your internet traffic, so it's important to understand what information the provider collects and how long it retains it.
Read the provider's privacy policy and look for information about:
- What connection or usage information is collected
- How long information is retained
- Whether information is shared with third parties
- How the company responds to legal requests
- Whether the provider publishes independent audits or transparency reports
Avoid assuming that a service is "private" simply because its marketing uses that word.
2. Look for modern security standards
VPN technology uses different protocols and cryptographic technologies. For business deployments, the appropriate configuration depends on the organization's requirements and the VPN technology being used.
IPsec is a widely used framework for protecting IP communications, while SSL/TLS-based VPNs can provide secure remote access to organizational resources.
You generally don't need to select a protocol manually when using a consumer VPN application. The provider's application typically handles the connection configuration.
For a business VPN, your IT department should determine which protocol and configuration you should use.
3. Check device and platform support
If you use several devices, check whether the service supports the operating systems and devices you actually use.
Depending on the provider, support may include:
- Windows PCs
- Macs
- Android devices
- iPhones and iPads
- Routers
- Other supported connected devices
Also check how many simultaneous connections your plan allows.
4. Review the provider's security history
Before choosing a VPN provider, research its reputation and security practices.
Look for information about:
- Security audits
- Data breaches
- Vulnerability disclosures
- Transparency reports
- Company ownership
- Privacy policy changes
- How the provider responds to security incidents
A VPN service is part of your security model, so choosing a provider should involve more than comparing monthly prices.
Do you need a VPN app or the built-in Windows VPN?
Windows 11 can create VPN connections using its built-in VPN settings. Microsoft also notes that personal VPN subscribers may have a dedicated application available from their provider.
The two approaches are different:
| Option | Best for |
|---|---|
| VPN provider app | Personal VPN services that provide their own application and automated configuration |
| Windows built-in VPN | VPN connections where you have the server address, protocol, and authentication information needed to configure the connection |
| Company VPN application | Organizations that require a specific VPN client or security configuration |
If you're connecting to a company network, use the VPN application or configuration provided by your IT department.
How to set up a VPN on Windows 11
Windows 11 includes built-in VPN settings that allow you to create a VPN profile. You'll need the connection information from your VPN provider or organization before you begin.
Microsoft's current instructions use Settings > Network & internet > VPN > Add VPN.
Before you begin
For a work VPN, contact your IT department or check your company's internal documentation. You may need information such as:
- VPN server address
- VPN type
- Authentication method
- Username
- Password or other credentials
- Certificate or security key, if required
For a personal VPN, check your provider's instructions. Some services recommend using their dedicated application instead of manually configuring a Windows VPN connection.
Step 1: Open Windows VPN settings
- Select Start.
- Open Settings.
- Select Network & internet.
- Select VPN.
- Select Add VPN.
Step 2: Create your VPN profile
In the Add a VPN connection window:
- For VPN provider, select Windows (built-in).
- Enter a recognizable name under Connection name.
- Enter the Server name or address supplied by your VPN provider or IT department.
- Select the appropriate VPN type.
- Select the required Type of sign-in info.
- Enter your username, password, or other required credentials.
- Select Save.
The exact information required depends on the VPN service or organization. Don't guess at the VPN type or server address. Use the settings supplied by the provider or your IT department.
Step 3: Connect to your VPN
After you've created the VPN profile:
- Open Settings > Network & internet > VPN.
- Find the VPN connection you created.
- Select Connect.
- Enter additional sign-in information if Windows requests it.
You can also connect through Windows 11 Quick Settings by selecting the network icon on the taskbar and opening the VPN controls.
Step 4: Verify the connection
Return to Settings > Network & internet > VPN.
Your VPN connection should display Connected when the connection is active. Windows can also display a VPN indicator on the taskbar when you're connected to a recognized VPN.
What if your VPN slows down your internet connection?
A VPN can affect connection performance because your traffic is being routed through an additional server.
The effect can vary depending on factors such as:
- Your internet connection
- Distance to the VPN server
- VPN server capacity
- VPN protocol
- Network congestion
- The performance of your device
If your connection becomes noticeably slower, try a different VPN server if your provider offers one. A server geographically closer to you may provide better performance, although results vary.
You can also temporarily disconnect the VPN to determine whether it is contributing to the slowdown.
Are free VPNs safe?
Free does not automatically mean unsafe, but you should understand how a free service makes money and what information it collects.
A VPN provider has infrastructure and operating costs. If a service doesn't charge users directly, review its privacy policy carefully to understand whether it collects information, displays advertising, limits features, or uses another business model.
Before trusting a VPN provider with your internet traffic, investigate its privacy practices, security history, ownership, and reputation.
VPN security best practices
A VPN is one layer of a broader security strategy. For better protection:
Keep your devices updated
Install operating system, browser, application, and security updates promptly. A VPN cannot protect a device from vulnerabilities in outdated software.
Use multi-factor authentication
Enable MFA on important accounts, especially email, financial, work, and cloud accounts. A VPN does not protect an account if someone obtains your password.
Use strong, unique passwords
Use a unique password for every important account and consider using a reputable password manager.
Protect your device
Use your PC's built-in security features, firewall, and endpoint protection. A VPN is designed to protect network communications, not to replace malware protection.
Use your organization's approved VPN for work
If you're accessing business systems, use the VPN or secure-access solution provided by your employer. Organizations may have additional requirements for authentication, device security, and access control. CISA recommends securing VPN gateways and using strong cryptography for organizational VPN infrastructure.
Be careful on public Wi-Fi
A VPN can provide an additional layer of protection, but you should still verify the network you're joining and avoid suspicious connections. CISA recommends confirming public hotspot names and login procedures before connecting.
VPN FAQs
Does a VPN hide my IP address?
A VPN can make websites and online services see the VPN server's public IP address instead of the public IP address associated directly with your internet connection. However, a VPN does not make you completely anonymous.
Websites can still identify you through account logins, cookies, browser information, and other tracking technologies.
Does a VPN protect me from hackers?
A VPN can protect certain network traffic by encrypting the connection between your device and the VPN server. It does not protect against every type of attack.
You still need updated software, strong authentication, malware protection, safe browsing habits, and other security controls.
Is a VPN the same as antivirus software?
No.
A VPN protects network communications between your device and a VPN endpoint. Antivirus and endpoint security technologies help detect and prevent malicious software and other threats on the device.
They address different security problems and can be used together.
Does a VPN make public Wi-Fi safe?
A VPN can make your connection more secure, but it doesn't make an untrusted Wi-Fi network completely safe.
Continue to verify that you're connecting to the legitimate network, keep your device updated, and use other security protections.
Should I use a VPN at home?
That depends on what you're trying to protect and how you use the internet.
A VPN can add privacy and protect traffic between your device and the VPN server, but it isn't necessary for every home internet activity. HTTPS already encrypts traffic between your browser and websites that support it, and a VPN does not replace account security or device protection.
Is Windows 10 still supported?
Microsoft ended Windows 10 support on October 14, 2025. Microsoft recommends moving to Windows 11 because Windows 10 no longer receives free security updates or technical support through Windows Update.
If you're still using Windows 10, consider upgrading to a supported version of Windows before relying on the PC for sensitive work.
A VPN is one part of a secure connection
VPN technology can help protect network traffic and provide secure remote access, but it works best as part of a larger security strategy.
Choose a provider carefully, understand its privacy practices, use modern security configurations, and follow your organization's requirements for work connections. On your Windows 11 PC, you can then create a VPN profile through Settings > Network & internet > VPN and connect whenever you need the additional protection or secure access the VPN provides.
About the Author
Sophie Sirois is a contributing writer for HP® Tech Takes. Sophie is a San Diego-based content creation specialist covering the latest in tech and digital news.
