Connectivity

Use a VPN connection

At a coffee shop and need to get to a site on your company's intranet or use an app from your company? Or do you use a VPN service for some Internet sites you visit on your own? Whether it's for work or personal use, you can use VPN on your Windows Phone. VPN can help give you a more secure connection to your company's network or the Internet using a Wi-Fi or cellular data connection.

To get a VPN profile on your phone

The first step is to get a VPN profile onto your phone. There are two ways to get one:

  • Set up a workplace account to automatically get a VPN profile from your company.
  • Create a VPN profile on your own. (You can learn how later in this topic.)

Note

VPN is only available on Windows Phone 8.1 or later. Check to see which software version you have and find out if an update is available.

To connect to a VPN

After you have a VPN profile on your phone, you're ready to connect.

  1. In the App list, tap Settings Settings icon > VPN.

  2. Tap and hold the VPN profile name, and then tap Edit.

  3. If the User name and Password boxes appear, type your user name and password, and then tap Save.

  4. To connect to the VPN, do one of the following, depending on what type of profile you're using:

    • If the VPN profile has Automatic listed under it, your phone will automatically connect to the VPN when you try to access information on your company's network or visit Internet sites that have an IP address that's listed in a protected IP range. The IP address determines when the VPN will automatically connect. The protected domain names do not.
    • If the VPN profile has Manual listed under it, tap the profile to connect to the VPN, and then use the app that accesses data on your company's network, visit a company intranet site, or visit protected Internet domains or IP addresses.

Notes

  • The icons at the top of your screen will show you when you're connected to the VPN. This icon VPN over Wi-Fi icon appears when you're connected over Wi-Fi, and this one VPN over cellular data icon shows when you're connected over cellular data.
  • Want to see your VPN connection status or turn VPN on or off quickly? Just add VPN as a quick action, swipe down from the top of the screen to see your VPN status, and then tap it to turn it on or off.
  • If the profile has Send all traffic set to On Toggle On icon, all data you send and receive will go over the VPN.

To create a VPN profile

If you don't have a VPN profile on your phone, you'll need to create one on your own. Before you start, contact your company's support person to get the VPN connection settings for your organization. If you're using a VPN service, first visit the Windows Phone Store to download the app for that service. You might want to visit the service's website to see if they have additional instructions or the VPN connection settings listed there.

  1. In the App list, tap Settings Settings icon > VPN.

  2. Set Status to On Toggle On icon, and then tap Add Add icon.

  3. In the Server name or IP address box, type the server name or IP address of your VPN server.

  4. Tap Type, and then choose the type of VPN connection you want to create—IKEv2, L2TP with IPSec, or the name of the VPN service you use.

    If an SSL VPN app is required and you don't have one installed yet, tap the link to download one from the Store.

  5. If Connect using appears, tap the box and then choose one of the following, depending on what type of VPN connection you chose in the previous step:

    • For a connection that uses a user name and password, tap User name+password, and then enter your user name and password in the User name and Password boxes.
    • For a connection that uses a certificate, tap Certificate, and then choose a certificate to use to connect to the VPN.
    • For an L2TP with IPSec type of VPN connection, tap User name+password+preshared key or Preshared key, and then select or enter that information. (This is only available if you have Windows Phone 8.1 Update installed on your phone. Which version of Windows Phone do I have?)
  6. If you chose to use a certificate for Connect using and you want to validate that the server is authentic by comparing a certificate that's on it to one on your phone, set Server certificate validation to On Toggle On icon.

  7. To automatically connect to the VPN when a company app or site requires it, set Connect automatically to On Toggle On icon.

    If Connect automatically is turned off, the profile will be a manual one that you'll have to tap when you want to connect to the VPN.

  8. For Send all traffic, do one of the following:

    • To have all data you send and receive go over the VPN, set Send all traffic to On Toggle On icon.
    • To only have data that requires access to your company's network, intranet, or certain Internet sites go over the VPN connection, set Send all traffic to Off Toggle Off icon, tap Domains and IP ranges, and then enter the domain names and IP ranges that are protected. Only data that's sent and received from those domains or IP addresses will go over the VPN connection. Other data that's sent or received won't go over the VPN.
  9. In the Profile name box, type a unique name for your profile.

  10. Tap Advanced, and then enter any additional settings you need to for your organization's VPN or for the VPN service you use.

    You might need to contact your company's support person or visit the VPN service's website to get additional information, such as the Proxy settings and DNS suffix.

  11. Press the Back Back button icon button on your phone to go back to the Add profile screen, and then tap Save.

Related topics

Tell us what you think