Normally, when you buy a VPN subscription, you will use the app provided by the service. These VPN apps are designed for simplicity, and employ a login-and-use method. While that is the easiest way to get a VPN working on your device, it isn't the only way.
Depending on the app in question, it may also not be the best way if you experience stability or performance issues when you use an application to connect to a VPN server.
Say, if you want to use a VPN connection in a specific protocol (IKEv2, IPSec, L2TP) or to connect to your workplace's VPN, you will need to configure the settings manually on your iPhone or iPad.
It can enhance your security greatly but at a cost, you will only be able to connect to a particular server that you select. To change the server, you'll need to edit the VPN configuration again, as opposed to merely tapping a button in the app to select a different server location.
Note: Username is the easier option of the two, but some VPNs may not support it. In that case, you will be asked to install a security certificate on your device, to communicate with the VPN's servers.
6. Hit Done in the top right corner of the screen.
7. Enable the VPN from the toggle on the side bar, or from the VPN settings page.
You will need to visit the support portal of your VPN service to get the manual configuration details (also called native protocols) which you need to enter in the VPN set up screen.
This method is common across all recent versions of iOS. I tested this on iOS 13 beta and it works flawlessly on both IPSec and IKEv2. In case the VPN connection failed, you don't have to start from scratch. Just go back to the VPN section in iOS' settings, and use the "Edit" option to modify the fields.
Please be aware that some VPN services use a different authentication method for manual settings. Using your regular account username and password will not authenticate the connection. You may be required to use your account's dashboard to create a new configuration. This will generate a random username and password to authenticate your account for the specific protocol.
Just FYI, there is a new protocol called WireGuard, which promises faster encryption and better speeds. It isn't available for use yet, but is expected to be supported by all major services and operating systems.Advertisement
Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.
We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats or subscription fees.
If you like our content, and would like to help, please consider making a contribution:
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.