1. Flip the VPN switch in Settings
Open Settings, then General, then VPN & Device Management (on older iOS versions, Settings, then VPN). If the VPN switch is off, turn it on; if it is on but stuck, turn it off, wait five seconds and turn it back on. This restarts the tunnel without touching the app.
2. Allow the VPN configuration
The first time any VPN app connects, iOS asks whether the app may add a VPN configuration. If that prompt was dismissed, the app has no tunnel to use and every connection fails. Open the app and connect again; when the prompt appears, tap Allow and confirm with Face ID, Touch ID or your passcode. In GhostShield VPN this is the only permission the app needs.
3. Switch between Wi-Fi and mobile data
Turn Wi-Fi off and connect over mobile data. If the VPN connects at once, the Wi-Fi network is the problem: hotel, school, airport and office networks often block or throttle UDP, which WireGuard and IKEv2 both need. On that network, nothing in the phone will fix it; a VPN that offers a TCP fallback is the only way through. On your own Wi-Fi, restart the router before anything else.
4. Pick another server location
A single busy or unreachable server looks exactly like a broken VPN. Choose a different location in the app, ideally one nearby, and connect. If one location fails and another works, the VPN is fine.
5. Update the app and iOS
VPN apps depend on the system's network extension, and an old app on a new iOS, or the reverse, is a common cause of a tunnel that never comes up. Update the app in the App Store, then check Settings, General, Software Update. Restart the phone afterwards.
6. Rule out iCloud Private Relay
If you pay for iCloud+, Private Relay hides your address in Safari. It is designed to step aside when a VPN is active, but if Safari behaves oddly while the VPN is on, turn Private Relay off for a test: Settings, your name, iCloud, Private Relay. Turn it back on afterwards if you prefer.
7. Check the date and time
VPN connections rely on certificates and timestamps, and a phone whose clock is wrong can fail the handshake. Settings, General, Date & Time, and make sure Set Automatically is on.
8. Turn off Low Data Mode for a test
Low Data Mode on Wi-Fi or mobile data pauses background work and can keep a VPN from reconnecting after the screen locks. Settings, Wi-Fi, the i next to your network, Low Data Mode off; for mobile data, Settings, Mobile Data (or Cellular), Mobile Data Options.
9. Reinstall the app, then reset network settings
Delete the VPN app, which removes its configuration with it, restart the phone, install the app again and sign in. Allow the configuration when asked. If it still fails, Settings, General, Transfer or Reset iPhone, Reset, Reset Network Settings. This forgets saved Wi-Fi passwords and VPN configurations, so it is the last step, not the first.
10. A managed iPhone can block VPNs
A phone or iPad issued by a school or an employer is managed by a profile that can forbid VPN configurations. The app will install and then fail to connect, every time, on every network. That is a policy set by whoever manages the device, and no setting on the phone changes it. On your own phone, the same Wi-Fi may still block the VPN's port (fix 3), but the phone itself can connect elsewhere.
If it is GhostShield VPN
GhostShield VPN on iPhone and iPad runs WireGuard, which reconnects by itself when you move between Wi-Fi and mobile data. If the app will not connect after fixes 1 to 5, write to info@ghostshield.ai with the iOS version, the network you are on (home Wi-Fi, mobile data, work or school) and the location you tried, and we will look at it with you. New to GhostShield VPN? The iPhone and iPad app page has the setup steps, and every plan starts with a 7-day free trial.
Questions people ask
Why is my VPN not connecting on my iPhone?
The usual causes, in order: the VPN configuration was never allowed when the app asked; the network you are on blocks the VPN’s port (most VPN protocols use UDP, which some hotel, school and office networks drop); the app is out of date; or the device is managed by a school or employer that blocks VPN profiles. Work through the ten fixes above from the top: the first three solve most cases.
Why does my VPN say connected but nothing loads?
The tunnel is up but something inside it is not. Switch to another server location first (one busy server is the usual cause), then toggle Wi-Fi off and on. If pages time out on every location, a firewall on the network may be letting the handshake through but dropping the traffic; try mobile data to confirm.
Does the iPhone have a built-in VPN?
iOS has a built-in VPN client for IKEv2, IPsec and L2TP, for connecting to a server you already have access to, such as one at work. It is not a VPN service: there are no servers behind it. A VPN service such as GhostShield VPN comes with servers and an app.
Why does my VPN keep disconnecting on my iPhone?
Most often because the phone moves between Wi-Fi and mobile data and the protocol has to reconnect, or because the Wi-Fi network drops idle connections. A protocol that roams, such as WireGuard or IKEv2, handles the switch on its own. The guide on why a VPN keeps disconnecting covers the other causes.
Should I delete and reinstall my VPN app?
Yes, as the second-to-last step: it removes a damaged VPN configuration along with the app. Sign in again afterwards and allow the configuration when iOS asks. Keep Reset Network Settings as the last step, because it also forgets your saved Wi-Fi passwords.
Can a school or work iPhone block VPNs?
Yes. A managed iPhone or iPad can have VPN configurations blocked by its profile, and nothing in the app can change that. It is a device policy, not a fault. Your own phone on the same Wi-Fi is not affected by the policy, only by the network’s own blocks.
Sources
- Apple Platform Deployment: VPN overview (the protocols iOS supports natively)
- WireGuard known limitations: UDP only (why some networks stop a WireGuard tunnel)
- RFC 4555, MOBIKE: how IKEv2 keeps a session when the address changes