Windows Has a VPN Client Built In, and It Is Empty

You are about to install a VPN app, or your work has sent you server details and no software, and you are wondering where any of it goes.

Windows already has the client. It has had one for years, it needs nothing installed, and on most machines it has never been opened.

I checked what this laptop has set up before writing, and the answer was nothing at all, which is what almost every Windows machine looks like.

What the built-in client is, and what it is not

Get this straight first, because it is where the confusion starts.

⭐ It is a client, not a service. It connects to a VPN server that somebody else runs.

⚡ Microsoft says so plainly on its connect to a VPN page: for work, "look for VPN settings or a VPN app on your company's intranet site while you're at work, or contact your company's support person."

⚠️ For personal use Microsoft points you outward too: "visit the Microsoft Store to see if there's an app for that service, or go to the VPN service's website."

⛔ So it hides nothing and provides nothing. What a VPN actually does is worth reading first.

Adding one, in Microsoft's own steps

Seven fields, and three of them come from somewhere else.

⭐ Microsoft's route: Settings, then Network and internet, then VPN, then Add VPN.

⚡ Choose Windows (built-in) as the VPN provider, which is the whole point of this page.

⚠️ Then a name, and Microsoft's wording is worth keeping: "a name you'll recognize". You will see it in a list on the taskbar.

⛔ You cannot invent "the address for the VPN server", the connection type or the sign-in type. All three come from whoever runs the server.

The sign-in type, which trips people up

Four options, and picking the wrong one fails silently.

⚡ Microsoft lists them: "username and password, one-time password, certificate, or a smart card".

⭐ Most home and small business setups are username and password. Most corporate ones are a certificate.

⚠️ A certificate has to be installed on the machine first, and the VPN screen will not tell you it is missing.

⛔ Guessing here wastes an evening. Ask which one rather than trying all four.

Connecting once it is saved

Two routes, and the taskbar one is quicker.

⭐ Select the Network icon on the taskbar, then VPN, and pick the connection.

⚡ Or Settings, Network and internet, VPN, then Connect, which is the same thing with more clicks.

⚠️ It stays in the list once saved. You are setting this up once, not each time.

⛔ And it is not everywhere: Microsoft states the feature "is not available in Windows 11 SE".

What this machine actually reports

Measured here, and every number came back zero.

⚡ Zero VPN connections saved, for this user and for all users. The client is present and unused.

⭐ The Remote Access Connection Manager service is running, on a manual start type. That is the normal state, not a sign that something is configured.

⚠️ The IKEv2 keying service is stopped, also on manual. ⛔ Windows starts it when a connection needs it.

⛔ A stopped service here is not a fault. Reading a state is only useful if you know what normal looks like.

The question Microsoft does not answer

Nobody prints this, so we will.

⭐ We could not find the supported protocols listed on that page at all. It tells you to know which kind your provider uses and stops there.

⚡ The type dropdown itself is the real answer. Open it and read what your Windows offers.

⚠️ Automatic is in that list and is usually the right first try. It walks the types until one answers.

⛔ If none of them connects, the type is not your problem. The server, the credentials or a firewall is.

When the built-in client is the wrong tool

Three cases, and the first is most people.

⚡ A paid VPN service with its own app. Use the app, because it handles servers, switching and the kill switch that Windows does not.

⭐ Anything needing WireGuard, which Windows does not offer here, and which is what its own app is for.

⚠️ And a work VPN with single sign-on usually needs the company's client rather than a manual profile.

⛔ The built-in client is for a plain server and a plain login. For that, it beats installing anything.

Status: VPN configuration read here 29 August 2026, on a laptop running Windows 11 Home 25H2, checked against Microsoft's own connect to a VPN page. ⛔ No VPN was created, connected or removed, no server address or credential appears anywhere here, and no setting was written.

How do I add a VPN in Windows 11 without an app?

Settings, Network and internet, VPN, Add VPN, and choose Windows (built-in) as the provider. You need a name you will recognize, the address for the VPN server, the connection type, and the sign-in type. The last three come from whoever runs the server.

Does Windows come with a free VPN?

No. Windows includes a VPN client, not a VPN service. It connects to a server somebody else runs, and Microsoft's own page sends you to your company or to a VPN provider for that part.

Which VPN types does Windows support?

Microsoft's page does not list them. The type dropdown in the Add VPN screen is the real answer, and Automatic is usually the right first attempt because it works through the types until one answers.

Why will my VPN not connect after I set it up?

Most often the sign-in type is wrong, or a certificate the connection needs was never installed. Microsoft lists four sign-in types and the screen will not tell you which one your server expects. Ask rather than guessing.

The Short Version

• Windows has a VPN client built in. It has no VPN service behind it.
• Microsoft's route: Settings, Network and internet, VPN, Add VPN, Windows (built-in).
• The server address and the connection type come from whoever runs the server.
• Sign-in is username and password, one-time password, certificate, or smart card.
• A certificate has to be installed first and the screen will not say it is missing.
• Zero VPN connections are saved on this laptop, for this user and for all users.
• Microsoft says the feature is not available in Windows 11 SE.
• Microsoft's page never lists the supported protocols. The dropdown is the answer.

Where to Next

Open Settings, Network and internet, VPN and see whether anything is there. On most machines it is empty.

If work sent you server details, use the built-in client rather than hunting for software.

Ask which sign-in type the server expects before you fill anything in.

If you are buying a VPN service instead, use its own app, because the extras are the point.

And if you got the built-in client working with a provider that only publishes app instructions, tell me which one in the comments. That list would be useful.