VPN Not Working on Windows 11: The Beginner’s Step-By-Step Fix Guide
Many Windows 11 users face problems when their VPN suddenly stops working, refuses to connect, or connects but doesn’t load any websites. This can be frustrating, especially if you rely on a VPN for privacy, streaming, or secure remote work. The good news is that most issues come from small misconfigurations, outdated drivers, or blocked connections, all of which you can fix yourself.
This guide walks you through simple and detailed troubleshooting steps, starting with the basics and moving into advanced fixes. Follow each section in order, and you’ll quickly get your VPN running smoothly again.
Access content across the globe at the highest speed rate.
70% of our readers choose Private Internet Access
70% of our readers choose ExpressVPN
Browse the web from multiple devices with industry-standard security protocols.
Faster dedicated servers for specific actions (currently at summer discounts)
How to Fix VPN Not Working on Windows 11
Table of contents
- How to Fix VPN Not Working on Windows 11
- Fast “which step next?” flow
- Quick checks (2 minutes)
- 1) Confirm your account and try other servers
- 2) Update or clean-reinstall the VPN app
- 3) Switch the VPN protocol (the “language” your VPN uses)
- 4) Turn off Windows’ proxy (unless your company requires it)
- 5) Fix “Connected but no internet” (DNS + gateway)
- 6) Reset Windows’ network stack (cleans low-level issues)
- 7) Disable IPv6 (only if problems persist)
- 8) Reinstall Windows’ virtual VPN drivers (WAN Miniports)
- 9) Update or roll back your network (Wi-Fi/Ethernet) driver
- 10) Allow the VPN through Windows Firewall
- 11) Pause third-party security apps (just for testing)
- 12) Create a manual Windows VPN connection (bypasses buggy apps)
- 12B) Set up the built-in Windows 11 VPN (step-by-step)
- 13) Fix IKEv2 / L2TP specifics (only if you use these)
- 14) Lower the MTU size (fixes stalls or timeouts)
- 15) Check your router for VPN-blocking settings
- 16) Use split tunneling when one app misbehaves
- 17) Clear captive portals (hotels, schools, airports)
- 18) Remove old VPN profiles and extra adapters
- 19) Grab logs and error codes (fast-track support)
- 20) Try a different VPN app (only as a last check)
- FAQs
Fast “which step next?” flow
- No internet at all? Do Steps 6 → 5A → 5B → 9.
- Connects but nothing loads? Do Steps 5A → 5B → 7 → 14.
- Won’t connect anywhere? Do Steps 3 → 2 → 8 → 10 → 11.
- Works on hotspot but not home Wi-Fi? Do Steps 15 → 3 → 5A.
- Only one app fails? Do Step 16.
Quick checks (2 minutes)
1) Restart everything.
– Turn your PC off and back on.
– Unplug your router and modem for 30 seconds, then plug them back in.
Why this helps: you reset stuck network processes and clear temporary glitches.
2) Test the internet without the VPN.
– Disconnect the VPN.
– Open a few websites.
Why this helps: you confirm the base connection works before you troubleshoot the VPN.
3) Try a different network.
– Turn on your phone’s hotspot and connect your PC to it, or try a different Wi-Fi.
3) Try a different network.
– Turn on your phone’s hotspot and connect your PC to it, or try a different Wi-Fi.
Why this helps: you learn if your home or office network blocks VPN traffic. If the VPN works elsewhere but fails on your home Wi-Fi, follow this guide on fixing VPN not working on Wi-Fi.
1) Confirm your account and try other servers
1) Open your VPN app. Sign out.
2) Sign back in with your correct email and password.
3) Click Quick Connect once.
4) Manually choose two different cities and try connecting to each.
Why this helps: expired sessions, overloaded servers, or blocked regions cause many failures. Relogging refreshes your session; new servers avoid congestion and geo-blocks. This often fixes cases where your VPN connects but is not working properly.
2) Update or clean-reinstall the VPN app
1) In the VPN app, open Settings → Check for updates and install updates.
2) If problems continue: open Settings → Apps → Installed apps, find your VPN, click Uninstall.
3) Reboot your PC.
4) Download the latest installer from your VPN’s website. Install and sign in.
Why this helps: Windows updates can break older VPN drivers. A fresh install rebuilds the services and adapters your VPN needs.
3) Switch the VPN protocol (the “language” your VPN uses)
1) Open VPN app → Settings → Protocol.
2) Try WireGuard first. If it fails, try OpenVPN (UDP), then OpenVPN (TCP), then IKEv2.
3) Test after each change.
Why this helps: some networks block certain ports or protocols. Switching protocols changes ports and packet types and often slips past blocks.
4) Turn off Windows’ proxy (unless your company requires it)
1) Press Win + I → Network & Internet → Proxy.
2) Turn Automatically detect settings On.
3) Turn Use a proxy server Off.
4) Reconnect the VPN.
Why this helps: a system proxy can hijack traffic before it reaches your VPN and break the tunnel. If you later need to disable tunneling entirely, follow this guide on how to turn off a VPN in Windows 11.
5) Fix “Connected but no internet” (DNS + gateway)
A) Set reliable DNS
1) Press Win + I → Network & Internet → Advanced network settings.
2) Click More network adapter options.
3) Right-click your active Wi-Fi or Ethernet → Properties.
4) Double-click Internet Protocol Version 4 (TCP/IPv4).
5) Select Use the following DNS server addresses:
Preferred: 1.1.1.1
Alternate: 1.0.0.1
6) Click OK, then Close. Reconnect the VPN.
Why this helps: bad DNS stops websites from loading even when the VPN connects. Using trusted DNS removes that barrier.
B) Stop full VPN gateway takeover (advanced but safe)
1) In the IPv4 Properties window, click Advanced….
2) Uncheck Use default gateway on remote network → click OK on all windows.
3) Reconnect the VPN and browse.
Why this helps: some VPNs force all traffic through their gateway and break local internet. This setting prevents a full takeover and restores browsing.
6) Reset Windows’ network stack (cleans low-level issues)
1) Click Start, type cmd.
2) Right-click Command Prompt → Run as administrator.
3) Run these commands one at a time:
netsh winsock reset
netsh int ip reset
ipconfig /release
ipconfig /flushdns
ipconfig /renew
4) Restart your PC.
Why this helps: you clear corrupted sockets, TCP/IP rules, and stale DNS that often break VPN handshakes.
7) Disable IPv6 (only if problems persist)
1) Open More network adapter options → right-click your adapter → Properties.
2) Uncheck Internet Protocol Version 6 (TCP/IPv6) → OK.
3) Reconnect the VPN.
Why this helps: many VPNs secure IPv4 only. IPv6 can leak or bypass the tunnel and break routes; turning it off forces traffic through IPv4.
8) Reinstall Windows’ virtual VPN drivers (WAN Miniports)
1) Press Win + X → Device Manager.
2) Expand Network adapters.
3) Right-click each WAN Miniport (IP, IPv6, IKEv2, L2TP, PPTP) → Uninstall device and confirm.
4) Click Action → Scan for hardware changes.
5) Restart your PC and test the VPN.
Why this helps: these miniports create the tunnel. If they corrupt, no tunnel forms. Reinstalling resets them.
9) Update or roll back your network (Wi-Fi/Ethernet) driver
1) Open Device Manager → Network adapters.
2) Right-click your Wi-Fi or Ethernet adapter → Update driver → Search automatically.
3) If the issue started after a recent update: open Properties → Driver → Roll Back Driver.
4) Reboot and retest the VPN.
Why this helps: your NIC driver controls how packets leave your PC. A stable driver reduces drops and routing glitches.
10) Allow the VPN through Windows Firewall
1) Open Windows Security.
2) Click Firewall & network protection → Allow an app through firewall.
3) Click Change settings → Allow another app…
4) Add your VPN’s main .exe (and any service .exe).
5) Check both Private and Public, then click OK.
Why this helps: the firewall can silently block encrypted traffic. Allow-listing the VPN lets it form outbound tunnels.
11) Pause third-party security apps (just for testing)
1) Open your antivirus or internet security suite.
2) Pause real-time protection and any firewall/web shield modules.
3) Connect your VPN and test.
4) If it now works, add the VPN app and its drivers to your security app’s exceptions/allow list, then re-enable protection.
Why this helps: some suites intercept traffic with deep inspection and block encrypted handshakes.
12) Create a manual Windows VPN connection (bypasses buggy apps)
1) Open Settings → Network & Internet → VPN → Add VPN.
2) Choose VPN provider: Windows (built-in).
3) Enter a Connection name, Server name or address, and select a VPN type your provider supports (IKEv2, L2TP/IPsec, or PPTP).
4) Add your username and password → click Save → click Connect.
Why this helps: the native Windows stack avoids buggy third-party apps and ensures the connection appears in your system’s list. If it doesn’t, see VPN not showing up in Network Connections.
12B) Set up the built-in Windows 11 VPN (step-by-step)
1) Press Win + I → open Network & Internet → VPN.
2) Click Add VPN and select Windows (built-in).
3) Enter a Connection name, the Server address, choose the correct VPN type, and add your credentials.
4) Click Save, then click Connect.
Why this helps: Windows’ built-in client uses Microsoft’s networking stack, which avoids many app-specific errors and gives you reliable control over the tunnel.
13) Fix IKEv2 / L2TP specifics (only if you use these)
1) Double-check the server address, username, password, and any pre-shared key.
2) Match the encryption settings your provider requires (for example, AES-256).
Why this helps: these protocols validate every field strictly. One typo or wrong cipher blocks the handshake.
14) Lower the MTU size (fixes stalls or timeouts)
1) Open Command Prompt (Admin).
2) Run:
ping 1.1.1.1 -f -l 1472
If you see “Packet needs to be fragmented,” reduce the -l number (1464, then 1452, etc.) until it succeeds.
3) Enter that MTU in your VPN settings if possible, or share it with support.
Why this helps: oversized packets get dropped inside encrypted tunnels and cause timeouts. A proper MTU prevents fragmentation.
15) Check your router for VPN-blocking settings
1) Log into your router (usually 192.168.0.1 or 192.168.1.1).
2) Enable VPN passthrough for IPsec and PPTP if available.
3) Disable SIP ALG under advanced or NAT settings.
4) Save, reboot, and test your VPN.
Why this helps: many routers block VPN protocols by default. Passthrough and disabling ALG restore connectivity. If you suspect the router blocks tunnels, see VPN blocked by router.
16) Use split tunneling when one app misbehaves
1) Open your VPN app → Settings → Split tunneling or App exceptions.
2) Select the problematic app.
3) Choose to include it in VPN traffic or exclude it, then test.
Why this helps: you isolate the problem app and keep the VPN on for everything else.
17) Clear captive portals (hotels, schools, airports)
1) Disconnect the VPN.
2) Open a browser; try any site.
3) If a login/terms page appears, complete it.
4) Reconnect the VPN and test.
Why this helps: captive portals block traffic until you authenticate. The VPN hides that page until you log in.
18) Remove old VPN profiles and extra adapters
1) Open Settings → Network & Internet → VPN and delete profiles you don’t use.
2) Open More network adapter options and remove unused TAP or WireGuard adapters.
3) Reboot, then keep only your current VPN configuration.
Why this helps: extra adapters confuse Windows’ routing and can steal traffic from the active VPN.
19) Grab logs and error codes (fast-track support)
1) In the VPN app, open Logs or Diagnostics.
2) Copy any error codes and note the exact time they occurred.
3) Note the server location, protocol, and whether you used Wi-Fi or Ethernet.
4) Send these details to your VPN’s support team.
Why this helps: precise clues reveal whether authentication, routing, DNS, firewall, or server issues cause the failure.
20) Try a different VPN app (only as a last check)
1) Uninstall your current VPN and reboot.
2) Install a reputable alternative client such as ExpressVPN. In our experience, it works seamlessly on Windows 11.
3) Connect using WireGuard first, then OpenVPN if needed.
4) If the new client works immediately, the original app or its servers likely caused the issue, especially when your VPN is not changing location even after you pick another server.
Why this helps: you isolate whether the fault sits with your PC or that provider’s software/network.
FAQs
Yes, slightly. A VPN adds an encrypted hop. You reduce the impact by picking a nearby server and the WireGuard protocol.
No. Keep it on if everything works. If you see routing issues or leaks, disable IPv6 and retest.
Use UDP for speed and TCP for reliability on restrictive networks.
Usually not. Enabling VPN passthrough and disabling SIP ALG solve most router-level VPN issues.
Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more
User forum
0 messages