How to Set Up a VPN on iPhone
This guide explains how to install and configure a VPN application on iPhone or iPad. The steps below apply to the iOS VPN platform in general, with specific examples drawn from Snap VPN where relevant. The process takes approximately three minutes the first time and is retained across reboots.
Prerequisites
Before installing a VPN on iPhone, confirm that the device meets the following requirements.
- Operating system. Snap VPN requires iOS 17 or later. Older iOS versions cannot install applications that use the current Network Extension framework features. The installed iOS version is shown under Settings → General → About → Software Version.
- Apple ID. A signed-in Apple ID is required to install applications from the App Store. The Apple ID is also used to process the subscription if one is initiated.
- Storage. The application requires approximately 15 MB of available storage.
- Network connectivity. An active internet connection is required to download the application and to establish the VPN tunnel.
Installation
Installation follows the standard App Store flow.
- Open the App Store and search for the VPN application by name. Confirm the developer matches the provider before installing.
- Tap the install button. iOS prompts for Face ID, Touch ID, or the Apple ID password depending on device configuration.
- When the installation completes, launch the application from the home screen.
The first launch may briefly request authorization to display notifications. This authorization is optional and can be modified later from Settings → Notifications.
The iOS VPN Profile
iOS does not allow applications to manage VPN connections without an explicit user-installed VPN profile. The first time a VPN application attempts to establish a tunnel, iOS displays a system-level prompt requesting permission to add a VPN configuration. This is the standard iOS authorization flow and applies to every VPN application on the platform.
The prompt typically reads “[Application name] Would Like to Add VPN Configurations.” Tap Allow. iOS may then request the device passcode, Touch ID, or Face ID to confirm.
Once approved, the VPN profile is registered with the iOS Network Extension framework. The profile is visible under Settings → General → VPN & Device Management → VPN, and the application can subsequently establish or terminate the tunnel without further prompts.
The first-time prompt does not appear again unless the application is deleted and reinstalled, or the profile is removed manually from Settings.
First Connection
After the VPN profile is installed, the application's main screen displays the available server locations. Snap VPN highlights the recommended server based on geographic proximity, but any of the available locations across Europe, the Americas, and Asia-Pacific can be selected.
Tap the connect control. The tunnel typically establishes in well under one second. The application's interface and the iOS status bar both indicate the active connection state — the iOS status bar displays a small VPN badge while the tunnel is active.
To verify the connection, an external service that reports the observed IP address can be opened in a browser. The address shown should correspond to the selected server location rather than the local network.
Day-to-Day Use
After the initial setup, day-to-day use is straightforward.
- Launch and connect. Open the application and tap the connect control. No login is required because the application does not maintain user accounts.
- Switch locations. Select a different city to switch the exit server. The previous tunnel is closed and a new one is established. The transition typically takes under two seconds.
- Disconnect. Tap the connect control again to terminate the tunnel. Network traffic returns to the default interface.
The tunnel survives suspending and resuming the device. When the network changes — for example, switching between Wi-Fi and cellular — the application re-establishes the tunnel automatically. The behavior depends on the protocol; WireGuard handles network changes through its stateless design.
On-Demand Rules
iOS supports VPN-on-demand rules that establish the tunnel automatically under specific conditions. Common configurations include connecting automatically on untrusted Wi-Fi networks and excluding specific networks — such as a home network — from automatic connection.
On-demand rules are configured within the VPN application. Snap VPN provides a small set of presets covering the most common patterns: always-on, on cellular only, on untrusted Wi-Fi only, and off. The rule is enforced by iOS, which means the tunnel can be established before any application requests network access.
Troubleshooting
The most common issues during initial setup are listed below.
The VPN Profile Prompt Does Not Appear
If the system prompt to add the VPN profile is dismissed accidentally, terminate the application and relaunch it. The prompt is presented again the next time the application attempts to establish a connection.
The Connection Fails Immediately
Connection failures during the first attempt are typically caused by restrictive local networks. Public Wi-Fi hotspots that block VPN traffic, captive portals that have not been completed, and corporate firewalls are the most common sources. Connecting to a different network or completing the captive portal sign-in usually resolves the issue.
Traffic Continues After Disconnect
On iOS, terminating the application does not always close the VPN tunnel because the Network Extension runs independently of the host application. To force the tunnel to close, use the connect control in the application or disable the configuration from Settings → General → VPN & Device Management.
Battery Impact
Modern VPN protocols have minimal battery impact on iOS. If battery impact is unexpectedly high, switch to WireGuard if the application offers a choice — see the protocol comparison — and verify that on-demand rules are not configured to maintain the tunnel during periods of low activity.
For additional questions, contact information is available on the support page. For broader background on what a VPN does and does not protect, see our introduction to VPNs.