How to Install a VPN on Android

Before you sign up for a VPN subscription check that the VPN service comes with a custom VPN app for Android.

If it does, you can download the VPN app from the Google Play Store. If you live in a country where you can’t access the Google Play Store, skip to ‘Method 4: APK File’.

We’ve used ExpressVPN for this guide because it has a very simple Android app, and it offers a 30-day money-back guarantee.

It’s also the best VPN around – you can read our full, independent ExpressVPN review here.

If you have chosen a different VPN provider, you will need to follow a slightly different process, but this guide will give you the basics.

Installing the VPN app provided by your VPN service is the easiest way to get up and running quickly.

In most cases, it’ll also provide convenient and user-friendly access to different servers, which is handy if you want to switch between VPN locations.

Getting set up with a custom VPN app for Android will take you less than five minutes. Here’s how to do it:

1. Find your VPN provider’s custom Android app on the Google Play Store.
   We recommend following the link to the Google Play Store through the VPN’s official website to avoid downloading potentially dangerous copycat software.
2. Tap Install to download the VPN app. Once this step is complete, the green button will say Open.
3. Tap Open to launch the VPN app and then tap Sign In.
4. Enter your VPN subscription credentials into the relevant boxes – in this case your email address and password – and then tap Sign In.
5. ExpressVPN asks new users if they would like to share crash reports, speed tests, and information about whether the VPN connection attempts succeed or not.While this information is not personally identifiable, we recommend tapping No Thanks.

6. Tap OK to start the VPN connection set up process.
7. Tap OK to accept the VPN connection request.
8. Here is the ExpressVPN Android app main screen. It’s a fairly typical example of custom VPN apps for Android, with a large connect button in the center and the chosen server location below.To see the list of server locations tap the three horizontal dots to the right of the server location name.

9. You can choose from any of the VPN server locations listed here. Just tap the one you want to connect to.
10. Before you connect to the VPN it’s best to check the security settings. Usually you can find this by clicking on a cog symbol or, in ExpressVPN’s case, the burger menu (three horizontal lines).Be sure to enable the kill switch and leak protection if the app comes with those features.

    Here is ExpressVPN’s settings menu. Tap on Network protection to enable ExpressVPN’s Android app version of a kill switch.

11. Once you’ve taken a look at the VPN settings, it’s time to connect to the VPN. Tap the circular connect button in the middle of the main screen of the VPN app.ExpressVPN’s connect button turns green when the VPN is connected. Tap this button again to disconnect.

    You should always test your VPN for any leaks. You can find out how to do this and how to resolve any issues in our IP, DNS, WebRTC leaks guide.

    Now that your ExpressVPN connection is set up, it will stay connected in the background, and you can use your phone normally.Just glance at the status bar and look for the key to verify that your phone is connected.

If you don’t want to use the custom VPN app from your VPN service provider, or it doesn’t come with one, you can configure the VPN configuration files using a third-party VPN app instead, like OpenVPN for Android.

You use these third-party apps to connect to your provider’s server network using account credentials it provides you for a similar overall experience to using your provider’s own app.

Third-party apps may be more configurable than the VPN service provider’s custom app, and they even permit you to use multiple providers within a single app, if you have more than one subscription.

We will be using OpenVPN for Android for this guide, as it’s open-source, which means it can be scrutinized for security flaws and vulnerabilities, and the OpenVPN protocol itself offers the best balance between performance and security.

You can also use OpenVPN Connect, OpenVPN, Inc’s official app for Android.

ExpressVPN recommends OpenVPN for Android as it works better with its configuration files, while NordVPN recommends OpenVPN Connect. It’s best to contact your VPN service provider to find out which app it recommends.

If your VPN provider doesn’t have OpenVPN configuration files available, you can skip to ‘Method 3’, which shows you how to manually configure L2TP files.

Here’s how to manually configure a VPN on Android using the OpenVPN for Android software:

1. Find OpenVPN for Android (or OpenVPN Connect) on the Google Play Store and tap Install.
2. Once the app has successfully downloaded, the green button will read Open. Tap to open up the OpenVPN for Android app.
3. This is the main screen of the OpenVPN for Android app. We’ll come back to this after we’ve downloaded the configuration files from ExpressVPN’s website.
   
4. Go to your VPN service provider’s website on your mobile browser and log into your VPN account using your credentials.
   
5. Now go to the section of the VPN account page where you can set up the VPN on various devices. Tap Set Up ExpressVPN.
   
6. Tap Show other devices.
   
7. Scroll through the list devices and tap Manual Config.
   
8. Tap OpenVPN. Here you will see your unique username and password for OpenVPN manual configuration. You will need these later.
   
9. You can download as many configuration files as you’d like – each one will allow you to connect to a different VPN server location – but we recommend starting with one until you know how to do the whole installation process.Tap the server location you wish to connect to and it will automatically download to your phone’s storage. We chose USA – New York.

10. Now go back to the OpenVPN for Android app and tap the folder download symbol at the top right-hand corner of the app (in between the + symbol and the three vertical dots).
    
11. Find the VPN configuration file in your Downloads folder. Some users will have to go to Internal storage before navigating to the Downloads folder in order to select the file. When you’ve found the file tap on it.
    
12. Tap on the tick symbol to finish the config file download.
    
13. Tap the Edit symbol to the right-hand side of the configuration file name.
    
14. Under the Basic tab enter the unique OpenVPN username and password that is displayed within your account on the ExpressVPN website. Then tap on the Back icon on your device.Note: OpenVPN for Android has many configuration options; we’re just showing the basics here, but you can come back and customize your VPN profile later.

15. Tap on your created profile.
    
16. Tap OK to accept the connection request.
    
17. Once the VPN has successfully connected you will see a connection notification and a key icon will remain in the top-left corner of your screen for the duration of the VPN connection. Be sure to test the VPN connection for any IP, DNS, or WebRTC leaks.
    
18. To disconnect from the VPN tap the OpenVPN profile from within the OpenVPN for Android app and tap DISCONNECT.
    

There are many configurable options that you can play with within the OpenVPN for Android app to tailor your connection.

For instance, you can toggle between UDP and TCP, override the DNS settings, block IPv6 and IPv4 leaks, and allow internet traffic of certain apps to travel outside of the VPN tunnel (split tunneling).

You should only play around with these settings if you are confident that you know what you’re doing.

There are other open-source third-party apps that you can use to configure different VPN protocols, such as strongSwan for IKEv2/IPsec and WireGuard for WireGuard protocol, but OpenVPN remains our preferred protocol and software.

Beginners should prioritize using the VPN provider’s custom app over manual configuration.

If your VPN provider doesn’t come with OpenVPN configuration files it is possible to configure L2TP/IPSec, IKEv2/IPSec, and PPTP configuration files using the built-in Android VPN client.

This means that you don’t have to download any third-party apps at all.

However, we don’t recommend this method.

While this type of setup doesn’t take up as much space on your device, in some cases it’s not as secure as using the VPN provider’s app or OpenVPN for Android.

That’s because of the VPN protocols that the built-in Android VPN client supports, or – in some cases – the way they are set up.

PPTP is a very outdated and insecure VPN protocol and can be hacked in minutes. L2TP/IPSec uses pre-shared keys, which are publicly available on VPN websites and open the door to potential man-in-the-middle attacks.

Our top recommended VPNs only supply setup instructions for installing IKEv2 using the open-source strongSwan app rather than Android’s built-in VPN client.

You can read more about encryption and protocols in our detailed guide.

While we don’t recommend this VPN setup, we’ll show you how to install a VPN this way as a last resort.

The manual connection method will vary slightly depending on the VPN protocol and the device you’re using, but the process is similar enough for you to get the gist from these instructions.

In this example we’ll use ExpressVPN to create an L2TP/IPSec connection.

We’re using Android 9.1.0. In other versions of Android, the location and appearance of the VPN settings screens may be slightly different.

To create your VPN connection manually:

1. Go to the VPN provider’s website on your Android device and sign into your VPN account using your credentials.
   
2. Tap Set Up ExpressVPN in the device setup section.
   
3. Scroll down the list of devices and tap Manual Config.
   
4. Tap on PPTP & L2TP-IPsec. ExpressVPN warns that these VPN protocols provide weak security benefits.
   
5. Scroll down and you’ll see your username and password for this setup. You’ll need these later so keep the tab open.
   
6. Tap the + symbol next to the VPN server locations and copy the server address of your chosen VPN server.You can configure multiple VPN server locations, but let’s start with one for ease. We chose USA – New york.
   
7. Now go to your phone’s Settings menu. Find Connections settings, tap More connection settings, and then VPN. This will bring up Android’s built-in VPN client. If you haven’t installed a VPN before it will say ‘No VPNs.’
   
8. Tap on the three vertical dots at the top right-hand corner and then tap Add VPN profile.
   
9. Now fill in the fields with the following information:Name: Put anything you want here. We recommend writing the VPN service name and the server name. E.g. ExpressVPN New York.
   Type: Toggle L2TP/IPSec PSK. PSK stands for pre-shared key.
   Server address: Paste the VPN server address from your account on the VPN provider’s website.
   L2TP secret: Leave this field blank.
   IPSec identifier: Leave this field blank.
   IPSec pre-shared key: Paste the VPN provider’s pre-shared key here. You’ll find this on your VPN provider’s set up instructions.
   Tap Save.
10. Now tap the VPN profile from the main screen and enter the username and password that was shown within your VPN account under the PPTP & L2TP-IPsec manual configuration section. Tap Connect.
    
11. Once the VPN has successfully connected you will see the key symbol in the top left-hand corner of your device.As always, you should test your VPN connection for any IP, DNS, or WebRTC leaks.
    
12. To disconnect, just tap on the VPN profile within the Android built-in client and tap Disconnect.
    

If you can’t access the Google Play Store, it’s still possible to install the VPN provider’s custom app onto your Android device if the service provides an APK file.

APK files can be downloaded directly to Android devices from outside the Google Play Store.

You’ll have to change some of your phone’s permissions in order to allow APK file downloads from external sources, and you shouldn’t download them from unofficial websites.

Always download APK files from the VPN provider’s official website.

If you don’t you risk downloading files that have been tampered with – they may contain malicious content that could harm your device and your online security.

Here are our step-by-step instructions for installing an APK file VPN app for your Android device:

1. First you’ll need to change your phone’s permissions to allow the downloading of files from outside of the Google Play Store.Go to your phone’s Settings menu, then to Security. Now tap Install unknown apps (sometimes labeled Install apps from external sources) and tap on the web browser you want to use for downloading APK files.

   Toggle on Allow from this source.

2. Go to the VPN provider’s website and log into your account using your credentials.
   
3. Tap Set Up ExpressVPN under the device setup section.
   
4. Tap Download APK.
   
5. A warning will popup stating that the file may harm your device. If you’re download the APK file from the official website of a VPN provider you trust – we trust ExpressVPN – tap OK.
   
6. Tap Install to finish the installation process.
   
7. The app has now been installed. Tap Open to open the VPN custom app for Android.
   

You can now follow steps 3-11 from Method 1 if you’d like to know how to use the ExpressVPN app, and by extension the vast majority of VPN apps for Android that work similarly to ExpressVPN.

The final way to protect the internet traffic on your Android device is to install the VPN at router level.

When you install a VPN on your router it protects all of the traffic that flows through the router, providing the benefits of a VPN to all of the devices in your home at the same time.

This is ideal if you want to protect devices that don’t have custom VPN apps, like smart TVs and game consoles.

It’s not the best way to protect your Android device, though.

When you install a VPN at router level it’s trickier to change the VPN settings and server locations than if you are using the custom VPN app for Android.

One more thing to remember is that not all routers support VPN software, particularly modem routers that come with your internet package.

If your router doesn’t support VPN client software and you’re looking to buy a new piece of hardware, it’s worth checking your VPN provider’s website to check compatibility first.

Setting Up a VPN on Your Router

There are a few different ways to use a VPN on your router:

1. Buy a pre-configured router.
2. Manually configure the VPN using the native VPN client software that comes with your current software (avoid PPTP or L2TP/IPSec setups as they are insecure).
3. Flash your current router with new firmware that supports OpenVPN and then manually configure the VPN.
4. Use a VPN applet. These are currently quite rare and not many VPN services provide them. ExpressVPN has an applet.

To read our detailed router installation instructions see our separate routers guide.

Remember that setting up a VPN at router level means that internet traffic is only encrypted when it reaches the router.

That means that traffic between devices and the router is not secured, so if someone is capable of connecting to your network they can still read your traffic.

We recommend setting up your VPN at router level and using the Per device feature (similar to split tunneling) to exclude any devices on which you can install native VPN apps, such as Android.

To see how to set up these native VPN apps, please go to Method 1.

It’s impossible for us to provide instructions for every router here, and some Android devices — particularly those running older versions of Android — will look different to these instructions.

If you get stuck, your VPN service provider should be your first port of call.

They’ll be able to walk you through the process and get you up and running with your VPN on your Android phone.

The best way to set up a VPN for your Android smartphone or tablet is to download the custom VPN app from your VPN service provider.

It’s quick, easy, and safe.

For those who want more configurability, using OpenVPN for Android to manually configure the router might be better suited than the custom VPN app.

We don’t recommend using Android’s built-in VPN client as it only supports less secure VPN protocols like PPTP and L2TP/IPSec.

Yes, you do need to use a VPN on your Android smartphone.

When you’re out and about you probably connect to public WiFi.

Public WiFi is notoriously insecure, leaving your personal data vulnerable to hackers.

If you want to keep your personal information safe and secure you need to use a VPN.

VPNs encrypt all of your Android’s internet traffic, preventing snooping third parties from seeing what you’re doing online.

In addition to the privacy benefits, using a VPN on your phone helps you to unlock restricted or censored content.

Libraries, schools, and governments block certain websites. VPNs lets you access those websites securely and privately.

You now know that VPNs are essential tools if you want to use public Wifi securely and safely.

But should you use a VPN at home too?

Yes.

Even if your home WiFi is more secure than public hotspots your internet traffic is still vulnerable.

Without a VPN your ISP logs everything you do online and can sell that to third parties, sometimes without your permission.

The government can also get a hold of your personal information, too.

Using a VPN is important home and away.

There are loads of VPNs that provide support for Android devices but the best of them all is ExpressVPN.

That’s why we used it for all the installation examples in this guide.

ExpressVPN has a simple and safe custom VPN for Android devices. It’s fast, secure, and can be installed in minutes.

You can read about the rest of our top VPN recommendations for Android here.

If you want to protect your Android smartphone or tablet without spending a cent, there are loads of free VPNs available for Android.

However, our VPN security risk index found that many free Android VPNs are dangerous and unsafe to use.

If you want to use an Android VPN for free take a look at our list of the best free VPNs for Android.

You can install a VPN on your Android TV but it’s not quite the same process as setting one up on your Android smartphone or tablet.

Some VPN services do provide custom VPN apps for Android TV, like ExpressVPN and NordVPN, which you can download and set up in minutes, but the vast majority of VPNs don’t come with one.

If you want to install a VPN on your Android TV and there’s no custom app for it you’ll have to install the VPN at router level.

Take a look at our guide for installing a VPN on your TV.