Read the symptom before changing settings
| What you observe | Where to focus |
|---|---|
| VPN fails on every network | Focus on the VPN profile, client, credentials, certificate or provider service. |
| VPN works on phone hotspot only | The router or current network may block the required protocol. |
| Error began after password change | Update saved credentials and check multifactor authentication. |
| Connects but no sites open | Check routes, DNS, kill-switch and split-tunnel settings from the provider. |
Prove the base connection and capture the error
Disconnect the VPN and confirm ordinary websites work. Check the VPN provider or organisation’s service status and verify the server address. Record the complete Windows or client error code before deleting the profile.
Open Settings > Time & language > Date & time and enable the correct automatic time and time zone where appropriate. Incorrect time can invalidate certificates and authentication tokens.
1Test a second trusted network
- Try the connection through a phone hotspot or another trusted network.
- If the VPN works there, the original router, guest network or ISP path may block the protocol.
- Do not test sensitive work access through an untrusted public network unless your organisation permits it.
2Verify account and authentication
- Re-enter the username, password and any one-time code.
- If the password recently changed, remove obsolete saved credentials through the provider’s documented method.
- For a certificate VPN, confirm that the required certificate is present and not expired; do not install certificates from unknown sources.
Repair the profile or client without weakening it
For Windows built-in VPN, open Settings > Network & internet > VPN, select the profile and review the server name, VPN type and sign-in method against the administrator or provider instructions. Automatic type is not a guarantee that every server will negotiate correctly.
For a third-party client, use its update or repair option and obtain the installer only from the provider or employer. Security clients can include drivers and filters that should not be replaced by generic download sites.
1Recreate the profile only with complete settings
- Save the server address, VPN type, authentication method and any required certificate details.
- Remove the broken profile, restart Windows and recreate it exactly.
- Do not guess protocol or encryption settings on a business VPN.
2Check firewall and competing VPN software
- Temporarily exit another personal VPN client and retest.
- Keep Windows Firewall enabled; allow or repair the official VPN application instead of disabling protection.
- If an endpoint-security policy blocks the connection, contact the administrator.
Reset the network stack only as a final local step
If ordinary internet works and the verified VPN profile still fails, update the network adapter driver and restart. A Winsock reset may repair damaged filters, but it can also require security or VPN software to be repaired afterward.
Network reset is more disruptive: it removes adapters and resets their configuration. Reinstall or reconfigure the VPN client after the restart using the official package.
Frequently asked questions
Why does my VPN work on a hotspot but not home Wi-Fi?
The home router, guest-network policy or ISP path may block or mishandle the VPN protocol. Router firmware, passthrough settings and the provider’s supported protocol should be checked.
Why does VPN connect but internet stop working?
The VPN may install a default route, DNS service or kill switch that is not functioning. Review the provider’s split-tunnel, DNS and kill-switch guidance rather than disabling security globally.
Should I use Network reset for a VPN error?
Only after verifying internet access, service status, credentials, time, server, protocol and client repair. Network reset is disruptive and requires adapters and VPN components to be configured again.
Related Windows 11 network fixes
Official references
For platform-specific behavior and recovery options, compare this guide with the current documentation from the relevant official source.