How to connect a VPN on a phone or computer: three ways, and where people most often go wrong

“Connect a VPN” sounds like one action, but it is really two: get access to a server from whoever runs it, and set that access up on your device. Below — the ways this is done, how they differ on Android, iPhone, a computer and a router, whether phone Settings alone will do, and where people trip up most often.

What “connecting a VPN” means

A VPN is an encrypted tunnel from your device to a server, which then goes out to the internet in its own name (in detail, with our own measurement of what a site and your provider see, — in “What is a VPN, in plain words”). So every connection has two sides:

• The server. It is run by a service you pay (or that gives you a trial), or by you on a rented machine. Without a server there is nothing to connect to: neither phones nor Windows come with any “built-in free servers”.
• The client on your device. The program that brings the tunnel up and sends traffic through it. It can be the service’s own app, a universal app you paste someone’s settings into, or a client built into the system.

The tunnel runs on top of the internet you already have — Wi-Fi or mobile data. If there is no internet at all, a VPN will not add it.

Three ways to connect, and a fourth built in

What exactly the service gives you decides what you connect with and how.

1. The service’s app is the shortest path: install, sign in, tap. The app fetches servers, protocols and their settings itself, and if the service changes something you do not have to reinstall anything. The one drawback: apps do not exist for every system. Mayak’s is for Android and Android TV only, for now.
2. A subscription link is for systems where the service has no app of its own. A universal app is empty by itself: it has no servers, they arrive through the link. The order is almost always the same: copy the link → “+” in the app → “Import from clipboard” → switch on. In detail, with Happ as the example, — in “Happ subscription”. The link works like a password: whoever has it can connect to your access.
3. A config file (also called a config or a key) describes one connection to one server together with the device’s secret key. Only the app for the protocol it was written for can open it. What each line of such a file means — in our AmneziaWG config walkthrough.
4. The client built into the system is a separate case — the next section.

Can you set up a VPN in Settings, without an app

Yes, but only if you have been given the details for such a connection: server address, connection type, username and password or a shared key. Settings do not give you a server — they are only the form you type those details into. Where it lives, according to the official help pages of Google, Apple and Microsoft (checked on 28 September 2026):

• Android: Settings → Network & internet → VPN → add a network. Manufacturer skins (Samsung, Xiaomi, Huawei) can move it — the easiest way is to search Settings for “VPN”. Since Android 12 new connections of the old types (PPTP, L2TP) can no longer be created; IKEv2/IPsec is what is left in the list.
• iPhone: Settings → General → VPN & Device Management → VPN → Add VPN Configuration. The built-in client understands IKEv2, IPsec and L2TP.
• Windows 11: Settings → Network & internet → VPN → Add VPN (on Windows 10 — Add a VPN connection). Types to choose from: IKEv2, L2TP/IPsec, SSTP, PPTP or Automatic.

All these protocols are old corporate ones: this is how people connect to a work network, and the sign-in details come from an administrator. There is no free server “in Settings”. Mayak does not connect with such details: our protocols are AmneziaWG and X-ray, the systems’ built-in clients do not know them, so with us you need one of the three ways above.

What to install on each device

Here is the gist for each system. Buttons, store links and full app lists are gathered on one page — “Where to tap on your device”.

An Android phone

The service’s app from Google Play or from the service’s own site, not from a link in a chat. On the first connection Android shows the system “Connection request” dialog — its text is the same for every such app, and it is worth accepting only if you trust the service (what that dialog means). While the tunnel is up, a key icon sits at the top of the screen. Mayak installs from Google Play or as a file; the account is created right in the app. A Huawei or Honor phone without Google Play — a separate walkthrough. How to choose a service for Android and which phone settings get in the way of any VPN — in “VPN for Android”.

iPhone and iPad

If the service has its own app in the App Store — that. If not, as with us right now, — a universal app and a subscription link. For Mayak that is Happ or INCY: both were checked with a live connection, but the real Happ (publisher Flyfrog LLC) is not in the Russian App Store right now, while INCY (publisher LLC ITDEV) is there and free. The first time, the iPhone asks you to allow the app to add a VPN configuration — a system question, like the dialog on Android. What the Russian App Store actually has and how to spot a look-alike — in our check of Apple’s catalogue.

A computer or laptop

Mayak has no app of its own for Windows and Mac — you connect with the same Happ and the subscription link (checked live on both Windows 11 and Mac). On Linux the account page gives you an AmneziaWG config file, opened by the official AmneziaWG app. How an app differs from a browser extension and what to install on each system — in “VPN for a computer or laptop”.

A TV or TV box

A TV or box on Android TV takes the same Mayak app, with sign-in by a code from your phone. Samsung on Tizen and LG on webOS cannot install our app. Which TVs can and which cannot, and the four install steps — in “VPN on your TV”; which box will do — here.

A router

A VPN on the router works for every device on the home network at once, including ones where no app can be installed. We checked this on OpenWrt — both with our AmneziaWG file and with the subscription link. Stock Keenetic firmware does not take our file yet. Seven steps and the pitfalls — in “VPN on a router”.

Every connected device takes a slot in the plan — whether through our app, someone else’s or a file: “Start” — up to 3 devices, “Family” — up to 5, “Max” — up to 10. How to add a second device properly — in “One VPN on several devices”.

How to tell the VPN is connected

• The status in the app. Ours says “Protected”. A tapped button does not yet mean the tunnel is up — look at the status.
• The icon in the status bar. On Android it is a key at the top of the screen, and the notification shade says “VPN activated”.
• The address changed. Open our IP address check before and after connecting: the address should be different. How to check for a DNS leak too — step by step.

Common mistakes when connecting

1. The app came from the wrong place. Stores carry apps with similar names from other publishers. Install from the store through a link on the service’s site, or from the site itself. If the app will not download or install — what the phone is telling you and what to do.
2. The system dialog was closed with “Cancel”. Without permission the tunnel will not come up: the switch turns on and immediately goes off. Tap “Connect” again and accept the request.
3. Another app holds the tunnel. On Android only one such connection runs at a time, and an app with “Always-on VPN” turned on does not give up its place. Turn that option off for everything you do not use (this and the previous cause — in “Why a VPN will not connect”).
4. One file or key on two devices. We measured this: the connection starts dropping on both. Each device gets its own connection (the measurement and how to do it right).
5. The subscription link ended up in someone else’s hands. Anyone who has it takes a slot in your plan. If it leaked — change it in your account, and the old one stops working.
6. The icon is on, but sites do not load. The tunnel is up, traffic is not flowing — a separate case with five causes: “Connected but nothing loads”.
7. Access has run out. The trial or paid period ended — the app will say so. Nothing needs setting up again, just extend it: with Mayak you pay in your account, with a Russian card or SBP.

If “Connecting…” hangs forever or the connection keeps dropping, that is no longer a mistake at setup but a break along the way. Where it happens is walked through step by step in “Why a VPN will not connect” and “Why a VPN keeps disconnecting”.

What we checked

• Where the VPN form lives in the built-in settings and which types it knows. Checked on 28 September 2026 against the official help pages of Google (Android), Apple (iPhone) and Microsoft (Windows 10 and 11). We did not walk through the forms themselves on every system version and manufacturer skin.
• Our own ways to connect. This article made no new measurements: it brings together what was checked in other walkthroughs, and every item links to one. Happ on iPhone, Windows 11 and Mac and INCY on iPhone were checked with a live connection (22 and 25 September 2026), the AmneziaWG file on Linux with a live tunnel, the router on OpenWrt, the TV on Android TV.
• One file on two devices — our own measurement, in detail in the article about several devices.

What we do not know

• We have not tested other services or their apps. How connecting works with them we only know from what they say.
• We did not check every Android skin. The path Network & internet → VPN comes from Google’s help for stock Android; on your phone the item may be named and placed differently.
• We have not connected apps outside our list to a Mayak link live. The checked ones are named above and on the connection page; for the rest the honest answer is “not measured”.
• Your case may match none of these. Write to support from the Help Center with what you see on the screen — that is how new items get onto this list.

Short answers

How do I connect a VPN on an Android phone in Settings for free? The form is there: Settings → Network & internet → VPN. But it does not give you a server — you type in the address, username and password issued by whoever runs the server, and since Android 12 only the IKEv2/IPsec type is left. There are no free servers “in Settings”; what you pay free services with — in a separate piece.

How do I connect a VPN on an iPhone in Settings, without an app? Settings → General → VPN & Device Management → VPN → Add VPN Configuration — if you have details for IKEv2, IPsec or L2TP. Mayak does need an app: the iPhone’s built-in client does not know our protocols, so you need Happ or INCY and the subscription link.

How do I connect a VPN on Windows 10 or 11 without extra software? Through Settings → Network & internet → VPN, if you have details for IKEv2, L2TP/IPsec, SSTP or PPTP. Otherwise you need a program: for Mayak on Windows that is Happ with the subscription link — step by step.

How do I connect a VPN on a laptop? The same way as on a computer with the same system: Windows, macOS or Linux. The only difference is that a laptop moves between networks more often — after switching Wi-Fi, it is worth checking the status still says “connected”.

How do I connect a VPN through Happ? Happ is an empty client with no servers of its own. You need a subscription link from a service: copy it → “+” in Happ → “Import from clipboard” → switch on. Where to get the link and what is inside — “Happ subscription”.

How do I connect a VPN to a router? You need a router whose firmware speaks the right protocol. We checked OpenWrt: both the AmneziaWG file and the subscription link. In detail — in the router article.

How do I connect a VPN if Telegram does not work? If you are used to getting keys from a Telegram bot — Mayak does not need Telegram: the app installs from Google Play or the site, the account is created in the app or in the account page in a browser, and payment happens there too. Why Telegram itself can stay silent even with a VPN on — a separate walkthrough.

How do I connect a VPN without internet? You cannot: the tunnel runs on top of a connection that already works. Wi-Fi or mobile data first, then the VPN. If mobile data opens only some sites, that is a different case — about the whitelist.

How do I connect a VPN if my subscription has ended? Renew it with the same service. With Mayak that is the account page: a Russian card or SBP, no need to reinstall the app. If you will not renew and the internet disappeared after switching off — what to check.

How much does it cost to connect with Mayak? The “Start” plan is 300 ₽ a month for up to 3 devices, “Family” 500 ₽ for up to 5, “Max” 700 ₽ for up to 10. Before paying, 3 days free once you confirm your email, no card required — where the catch in free trials is.