Home / FIX / Windows 11 / Network and Internet
Windows 11 network diagnosis

VPN Is Not Connecting in Windows 11

A VPN can fail because the base internet connection is down, the account or certificate is invalid, the server is unavailable, the selected protocol is wrong or another network filter conflicts. Preserve the exact error message—it is more useful than a generic reset.

Reviewed September 13, 2026 · Safety-first troubleshooting · About 8–12 minutes

Read the symptom before changing settings

What you observeWhere to focus
VPN fails on every networkFocus on the VPN profile, client, credentials, certificate or provider service.
VPN works on phone hotspot onlyThe router or current network may block the required protocol.
Error began after password changeUpdate saved credentials and check multifactor authentication.
Connects but no sites openCheck routes, DNS, kill-switch and split-tunnel settings from the provider.
ROHITH · DIAGNOSIS PATH

Keep the base internet connection separate from the VPN tunnel.

A VPN can fail because the PC is offline, the server is unreachable, credentials or certificates are wrong, the profile is incomplete, or local filtering blocks the tunnel. First prove normal internet access without the VPN and record the exact VPN error.

VPN fails on every networkProfile, account, certificate, client or server-side configuration becomes more likely.
VPN works on phone hotspot onlyThe home/office router, ISP path or local network policy deserves attention.
VPN connects but internet breaksCheck routes, DNS, split-tunnel policy and the provider’s expected configuration.

Decision rule: Do not weaken authentication or firewall protection to “make the VPN work.” Recreate settings only from a trusted provider or administrator source.

IT connection · understand the networking layer

This FIX page uses a reusable Windows concept rather than treating the symptom in isolation. Open the matching IT explanation →

Prove the base connection and capture the error

Disconnect the VPN and confirm ordinary websites work. Check the VPN provider or organisation’s service status and verify the server address. Record the complete Windows or client error code before deleting the profile.

Open Settings > Time & language > Date & time and enable the correct automatic time and time zone where appropriate. Incorrect time can invalidate certificates and authentication tokens.

1Test a second trusted network

  1. Try the connection through a phone hotspot or another trusted network.
  2. If the VPN works there, the original router, guest network or ISP path may block the protocol.
  3. Do not test sensitive work access through an untrusted public network unless your organisation permits it.

2Verify account and authentication

  1. Re-enter the username, password and any one-time code.
  2. If the password recently changed, remove obsolete saved credentials through the provider’s documented method.
  3. For a certificate VPN, confirm that the required certificate is present and not expired; do not install certificates from unknown sources.

Repair the profile or client without weakening it

For Windows built-in VPN, open Settings > Network & internet > VPN, select the profile and review the server name, VPN type and sign-in method against the administrator or provider instructions. Automatic type is not a guarantee that every server will negotiate correctly.

For a third-party client, use its update or repair option and obtain the installer only from the provider or employer. Security clients can include drivers and filters that should not be replaced by generic download sites.

1Recreate the profile only with complete settings

  1. Save the server address, VPN type, authentication method and any required certificate details.
  2. Remove the broken profile, restart Windows and recreate it exactly.
  3. Do not guess protocol or encryption settings on a business VPN.

2Check firewall and competing VPN software

  1. Temporarily exit another personal VPN client and retest.
  2. Keep Windows Firewall enabled; allow or repair the official VPN application instead of disabling protection.
  3. If an endpoint-security policy blocks the connection, contact the administrator.

Reset the network stack only as a final local step

If ordinary internet works and the verified VPN profile still fails, update the network adapter driver and restart. A Winsock reset may repair damaged filters, but it can also require security or VPN software to be repaired afterward.

Network reset is more disruptive: it removes adapters and resets their configuration. Reinstall or reconfigure the VPN client after the restart using the official package.

Important: Never disable certificate validation, firewall protection or corporate security controls to force a VPN connection. Those changes can expose credentials and traffic while hiding the real configuration error.

Verification gate — prove the fix before moving on

A troubleshooting step is useful only when it changes the original symptom. Use this checkpoint before trying another fix:

  • Connect and confirm Windows shows the VPN as connected.
  • Test the specific internal resource or public IP behavior the VPN is supposed to provide.
  • Disconnect and reconnect once to confirm the session is repeatable.
Stop and escalate when: Stop if the VPN belongs to an employer/school and you do not control its certificates, MFA, server address or policy. Preserve the exact error and time, then contact the administrator rather than guessing security settings.

Frequently asked questions

Why does my VPN work on a hotspot but not home Wi-Fi?

The home router, guest-network policy or ISP path may block or mishandle the VPN protocol. Router firmware, passthrough settings and the provider’s supported protocol should be checked.

Why does VPN connect but internet stop working?

The VPN may install a default route, DNS service or kill switch that is not functioning. Review the provider’s split-tunnel, DNS and kill-switch guidance rather than disabling security globally.

Should I use Network reset for a VPN error?

Only after verifying internet access, service status, credentials, time, server, protocol and client repair. Network reset is disruptive and requires adapters and VPN components to be configured again.

Related Windows 11 network fixes

Wi-Fi connected but no internetEthernet not workingMobile hotspot not workingWindows 11 troubleshooting hub

Official references

These references were reviewed for the Windows behavior and recovery steps used in this guide.