Windows 11 network diagnosis

VPN Is Not Connecting in Windows 11

A VPN can fail because the base internet connection is down, the account or certificate is invalid, the server is unavailable, the selected protocol is wrong or another network filter conflicts. Preserve the exact error message—it is more useful than a generic reset.

Updated July 26, 2026 · Safety-first troubleshooting · About 8–12 minutes

Read the symptom before changing settings

What you observeWhere to focus
VPN fails on every networkFocus on the VPN profile, client, credentials, certificate or provider service.
VPN works on phone hotspot onlyThe router or current network may block the required protocol.
Error began after password changeUpdate saved credentials and check multifactor authentication.
Connects but no sites openCheck routes, DNS, kill-switch and split-tunnel settings from the provider.

Prove the base connection and capture the error

Disconnect the VPN and confirm ordinary websites work. Check the VPN provider or organisation’s service status and verify the server address. Record the complete Windows or client error code before deleting the profile.

Open Settings > Time & language > Date & time and enable the correct automatic time and time zone where appropriate. Incorrect time can invalidate certificates and authentication tokens.

1Test a second trusted network

  1. Try the connection through a phone hotspot or another trusted network.
  2. If the VPN works there, the original router, guest network or ISP path may block the protocol.
  3. Do not test sensitive work access through an untrusted public network unless your organisation permits it.

2Verify account and authentication

  1. Re-enter the username, password and any one-time code.
  2. If the password recently changed, remove obsolete saved credentials through the provider’s documented method.
  3. For a certificate VPN, confirm that the required certificate is present and not expired; do not install certificates from unknown sources.

Repair the profile or client without weakening it

For Windows built-in VPN, open Settings > Network & internet > VPN, select the profile and review the server name, VPN type and sign-in method against the administrator or provider instructions. Automatic type is not a guarantee that every server will negotiate correctly.

For a third-party client, use its update or repair option and obtain the installer only from the provider or employer. Security clients can include drivers and filters that should not be replaced by generic download sites.

1Recreate the profile only with complete settings

  1. Save the server address, VPN type, authentication method and any required certificate details.
  2. Remove the broken profile, restart Windows and recreate it exactly.
  3. Do not guess protocol or encryption settings on a business VPN.

2Check firewall and competing VPN software

  1. Temporarily exit another personal VPN client and retest.
  2. Keep Windows Firewall enabled; allow or repair the official VPN application instead of disabling protection.
  3. If an endpoint-security policy blocks the connection, contact the administrator.

Reset the network stack only as a final local step

If ordinary internet works and the verified VPN profile still fails, update the network adapter driver and restart. A Winsock reset may repair damaged filters, but it can also require security or VPN software to be repaired afterward.

Network reset is more disruptive: it removes adapters and resets their configuration. Reinstall or reconfigure the VPN client after the restart using the official package.

Important: Never disable certificate validation, firewall protection or corporate security controls to force a VPN connection. Those changes can expose credentials and traffic while hiding the real configuration error.

Frequently asked questions

Why does my VPN work on a hotspot but not home Wi-Fi?

The home router, guest-network policy or ISP path may block or mishandle the VPN protocol. Router firmware, passthrough settings and the provider’s supported protocol should be checked.

Why does VPN connect but internet stop working?

The VPN may install a default route, DNS service or kill switch that is not functioning. Review the provider’s split-tunnel, DNS and kill-switch guidance rather than disabling security globally.

Should I use Network reset for a VPN error?

Only after verifying internet access, service status, credentials, time, server, protocol and client repair. Network reset is disruptive and requires adapters and VPN components to be configured again.

Related Windows 11 network fixes

Official references

For platform-specific behavior and recovery options, compare this guide with the current documentation from the relevant official source.