What Is a VPN on iPhone and How Do You Use One?

A VPN sends your iPhone's internet traffic through an encrypted tunnel to a server run by the VPN provider, and out to the internet from there. Two things change as a result: the networks you pass through can no longer read what you are doing, and the sites you visit see the VPN server's address instead of yours.

That is genuinely useful in some situations and close to pointless in others, so it is worth being precise about which.

What it actually protects you from

• Untrusted Wi-Fi. On hotel, airport or café networks, a VPN stops anyone else on that network — or the operator — from reading your traffic.
• Your network provider's visibility. Your carrier or ISP can see which sites you connect to. Through a VPN they see only the tunnel.
• Location-based blocking. Connecting through another country changes the address services see, though many streaming services detect and block VPNs specifically.

What it does not do

This is where most VPN marketing overreaches.

• It is not anonymity. Logged-in accounts still identify you. Signing into a service through a VPN tells that service exactly who you are.
• It does not stop tracking. Cookies, advertising identifiers and browser fingerprinting are unaffected.
• It is not antivirus. A VPN does not stop malware or phishing.
• It moves trust rather than removing it. Your provider can see what your ISP used to. That makes the provider's logging policy the single most important thing about it.

Modern browsing is almost entirely encrypted already, which means the case for a VPN rests mainly on hiding which sites you visit, not the contents.

Setting one up with an app

This is the route almost everyone should take.

1. Install your provider's app from the App Store and sign in.
2. Tap connect. iOS asks permission to add a VPN configuration — approve it with Face ID, Touch ID or your passcode.
3. A VPN badge appears in the status bar while connected.

The app handles server selection and reconnection, which manual configuration does not.

Configuring one manually

Useful for a work network or a server you run yourself. Go to Settings > General > VPN & Device Management > VPN > Add VPN Configuration, choose the type — IKEv2, IPsec or L2TP — and enter the server, remote ID, and credentials your administrator provided. Save, then switch it on from the same screen or from the top of Settings.

Choosing a provider

The provider sees everything your ISP used to, so the choice matters more than the feature list.

• A real no-logs policy, ideally one that has been independently audited rather than merely asserted.
• A clear business model. Free VPNs have to make money somehow, and selling browsing data is the usual answer. Paying is the safer default.
• A kill switch, so traffic stops rather than leaking if the tunnel drops.
• Servers where you need them, since distance costs speed.

The costs

Encryption and the extra hop reduce speed — usually modestly on a good provider, badly on a distant or overloaded server. Battery use rises because the radio works harder and the tunnel is maintained continuously. Both are reasons to connect when you need it rather than leaving it on permanently, unless your threat model justifies it.

Frequently asked questions

Should I leave the VPN on all the time?

On untrusted networks, yes. At home the benefit is narrower — it mainly hides your browsing from your ISP — and you pay for it in battery and speed.

Why does my VPN keep disconnecting?

Usually iOS suspending the app in the background. Enable the provider's always-on or on-demand option, which reconnects automatically.

Are free VPNs safe?

Treat them with suspicion. Running servers costs money, and free services have repeatedly been found to log and sell user data.

Is using a VPN legal?

In most countries yes, though some restrict or ban them. Using one does not exempt you from a service's terms — breaking a streaming service's rules can still cost you the account.