VPN on Windows 11: How to Set It Up and What to Check If You're Connected but Have No Internet

A VPN on Windows 11 rarely breaks "as a whole" — it usually fails in one specific layer: the connection profile, DNS, firewall, proxy, IPv6, an app, or the router. Below is a practical 2026 checklist: how to set up a VPN carefully, where to look for the cause of failures, and how to avoid turning diagnostics into a chaotic flip-the-switches-all-at-once session.
This guide is aimed at the average Windows 11 user: no risky workaround scenarios, no advice on breaking service rules, and no promises of "magical speed boosts." If you need a stable VPN for everyday tasks, start with FoliVPN and use this guide as a verification map.
When This Guide Is Especially Useful
The query "VPN on Windows 11" usually comes up not at first install but when everything looks almost working: the status shows "connected," the network icon doesn't complain, but websites won't open, Telegram or Discord freezes, YouTube loads in spurts, and the corporate portal still sees the old network. In 2026 such cases have become more common due to the mix of system VPN profiles, apps with their own DNS, browser DoH, home routers with separate rules, and built-in Windows protection features.
It's important not to start with drastic actions. Reinstalling the system, disabling protection, or mass-removing drivers is rarely needed as a first step. Proper diagnostics go from simple to complex: internet without VPN, then the VPN profile, then DNS, firewall, proxy, IPv6, specific apps, and only after that the router or the ISP's network.
Quick Diagnostic Map
| Symptom | Likely area | What to check first |
|---|---|---|
| VPN is connected but sites don't open | DNS or default route | Do sites open without VPN, does DNS change after connecting |
| Browser works but Telegram/Discord doesn't | App, firewall, split tunneling | Rules for the app, system proxy, split tunnel mode |
| YouTube lags only through VPN | Server, protocol, route | Different server, WireGuard/OpenVPN, channel load |
| Printer/NAS not visible after VPN | Local network | Is LAN access allowed in the VPN client, Windows network profile |
| VPN works on Wi‑Fi but not via phone hotspot | Mobile network, MTU, IPv6 | Different network, TCP/UDP protocol, mobile channel stability |
This table doesn't replace support, but it helps you avoid mixing different causes. For example, slow YouTube and an unreachable printer are usually different problems, even if both appeared after enabling the VPN.
Step 1. Check Your Basic Internet Before the VPN
First, disconnect the VPN and make sure Windows 11 opens several different sites normally. If you already have delays, packet loss, or Wi‑Fi issues without the VPN, the VPN will only expose the existing instability. Microsoft separately documents Windows network settings, including Wi‑Fi, proxy, mobile hotspot, and connection diagnostics; that's a useful starting point because a VPN depends on the underlying network.
Check three things:
- whether the internet works without the VPN in a browser and in one native app;
- whether airplane mode, a metered connection, or unstable mobile tethering is accidentally enabled;
- whether a system proxy is active that was left behind by another app.
If the problem exists before the VPN, fix the regular network first. Otherwise, you'll be changing VPN protocols while the actual cause is in Wi‑Fi, router DNS, or proxy settings.
Step 2. Make Sure the VPN Profile Is Set Up Correctly
In Windows 11 you can connect a VPN through a system profile or through a dedicated provider app. Microsoft describes the standard flow: create a VPN connection profile, choose the type, specify the server, and then connect from network settings. In practice, users often keep several profiles at once: an old L2TP, a new WireGuard, an OpenVPN client, and a corporate profile. That increases the chance of conflicts.
A safe check:
- Keep only one VPN client active.
- Disable auto-start for old VPN apps.
- Only delete a profile if you know how to restore it.
- After changing settings, restart the VPN client, not the entire system.
- Test the result on the same site or app every time.
If you use FoliVPN, don't mix its profile with profiles from other VPN services in the same test. Otherwise it's impossible to tell which driver, DNS, or route is affecting the result.
Step 3. Sort Out DNS: a Common Cause of "Connected but Not Loading"
DNS turns domain names into IP addresses. With a VPN, some users expect DNS to automatically become "correct," but Windows, the browser, the router, and individual apps can each have different DNS settings. So the typical symptom looks like this: the VPN connected, the IP seemingly changed, but some sites won't open while others work fine.
What to do carefully:
- disable any third-party system proxy if it's not needed;
- check whether DNS is manually set in the adapter properties;
- if the browser uses DNS-over-HTTPS, compare behavior in another browser;
- after changing DNS, restart the browser and the VPN client;
- don't change DNS, protocol, and server at the same time — otherwise the conclusion will be murky.
If DNS is a new topic for you, it's helpful to read the related article on Private DNS and VPN. Although it focuses on mobile devices, the conflict logic is similar: when different layers of the system argue over who should resolve domains, apps start behaving unpredictably.
Step 4. Check Windows Firewall Without Disabling Security
Windows Firewall isn't an "annoying switch" — it's a system filter for incoming and outgoing traffic. Microsoft's documentation describes it as a feature that filters network traffic by IP addresses, protocols, and ports. So yes, the firewall can genuinely affect a VPN client or individual apps, but that doesn't mean you should blindly turn it off.
It's safer to do this:
- update the VPN client to the current version;
- check whether there's a firewall rule for the VPN app;
- make sure the network isn't marked as public where you need local access;
- keep any temporary test short and turn protection back on;
- don't add broad "allow everything" rules if you don't understand the consequences.
If printers, NAS, Chromecast, or AirPlay disappear after enabling the VPN, the problem may not be with the internet but with the local network. In that case, follow a separate guide: VPN blocks the local network.
Step 5. Pick a Protocol to Match Your Network, Not the "Trendiest" One
On Windows 11 you'll most often see WireGuard and OpenVPN. WireGuard is known for its simple interface and routing model, and OpenVPN remains a widespread option for compatibility and corporate scenarios. OpenVPN's documentation keeps a dedicated troubleshooting section because profile, certificate, authentication, and connection errors each require a different analysis.
A practical approach:
- if the VPN connects but speed is unstable, try a different server;
- if the connection won't establish in one network, try another protocol;
- if the problem only appears on a corporate or public network, take its rules into account;
- if everything breaks after importing a new profile, revert to the previous working one;
- if you use a router-based VPN, don't confuse a Windows issue with a router issue.
There's no protocol that's always best in every network. For home Wi‑Fi, mobile tethering, the office, and hotel internet, the optimal settings can differ.
Step 6. Deal With Apps: Telegram, Discord, YouTube, Browsers
If the browser opens sites but a separate app doesn't work, the VPN tunnel itself may be fine. The problem often lies in the routing of that specific app, its network permissions, cache, built-in proxy, or a conflict with split tunneling. This is especially noticeable in voice apps and video services: they depend on latency, route stability, and correct DNS behavior.
Verification order:
- Update the app from an official source.
- Close it completely, including background processes.
- Check whether a proxy is configured inside the app.
- Disable split tunneling for one test, or conversely, exclude the problem app from the tunnel.
- Compare behavior on a different VPN server.
If you need selective routing, take a look at the article on split tunneling VPN. It helps solve everyday tasks: for example, the browser and messenger go through the VPN, while the banking app or a local printer stay outside the tunnel.
Step 7. When the Router or Home Setup Is to Blame
Sometimes Windows 11 is configured correctly, but your whole home is already connected through a VPN on the router. The laptop then gets double routing: VPN on the router plus VPN on Windows itself. This adds unnecessary latency, breaks local devices, and complicates DNS diagnostics.
Signs of a router conflict:
Use the smallest safe checklist
Open Foli, refresh the subscription and test one network and one route before changing everything.