Quick answer: when a VPN won't connect on an iPhone, the cause is usually one of three things — a stale VPN configuration profile, a missing VPN permission, or a network that blocks VPN protocols. Deleting the VPN profile in Settings, reinstalling the app, and reconnecting fixes the majority of cases.
Below are all nine fixes, ordered by how often each one turns out to be the answer.
1. Toggle Airplane Mode
The classic reset. Airplane Mode on, count to five, off. This forces the radio to re-register and clears a surprising number of stuck states. Try connecting again.
2. Delete the VPN profile and reinstall the app
iOS stores a VPN configuration profile separately from the app. When the two get out of sync — often after an app update or an iOS update — connections fail silently.
- Go to Settings → General → VPN & Device Management → VPN.
- Tap the ⓘ next to your VPN and choose Delete VPN.
- Delete and reinstall the app.
- Open it — iOS will ask permission to add the VPN configuration again. Tap Allow.
This is the single highest-value fix on the list.
Why does my iPhone say "VPN configuration failed"?
Almost always the permission step. The first time a VPN app runs, iOS shows a system dialog asking to add a VPN configuration — if it was dismissed, denied, or interrupted by a call, the app can never build its tunnel. The fix is the profile reset above: after reinstalling, watch for the Allow dialog and confirm it with Face ID or your passcode.
3. Check for a second VPN fighting for the slot
iOS allows several VPN profiles but only one active personal VPN. If you've installed other VPN apps (or a work profile), they can hold the slot. In Settings → General → VPN & Device Management, make sure only the VPN you're trying to use is selected.
4. Check Screen Time restrictions
If Screen Time content restrictions are on (yours, or a family manager's), profile changes can be blocked: Settings → Screen Time → Content & Privacy Restrictions. A managed school or work device may enforce this without you knowing — in that case, the device administrator has the say.
5. Try a different server and protocol
If the app connects to nothing at all, the problem is local (fixes 1–4). If it fails on one server but works on another, it's the server — switch and move on. On flaky mobile networks, WireGuard reconnects far better than TCP-based protocols, as we covered in the battery guide.
Why does my VPN keep disconnecting on cellular?
Usually the network handoff. Moving between Wi-Fi and cellular renegotiates the tunnel, and old protocols do it slowly enough to look like a failure. Prefer WireGuard or automatic protocol selection, and keep the VPN on rather than toggling it — reconnection is the expensive, fragile part.
6. Update iOS and the app
VPN frameworks change with iOS versions. An old app on a new iOS (or the reverse) is a known source of silent failures. Update both, then retry.
7. Check date and time
Certificate-based tunnels fail if the clock is wrong. Settings → General → Date & Time → Set Automatically should be on. A clock minutes off is enough.
8. Assume the network blocks VPNs
School, office, hotel, and some public networks block VPN protocols outright. Two tells: the VPN works on cellular but not on that Wi-Fi, and connections hang at "connecting" rather than failing fast. Obfuscation (FREE VPN FAST Premium) disguises tunnel traffic as ordinary HTTPS and gets through most of these — the honest caveat is that no method beats every corporate firewall.
9. Reset network settings
The last resort: Settings → General → Transfer or Reset iPhone → Reset → Reset Network Settings. This wipes saved Wi-Fi passwords and network preferences, so do it only after everything above. It clears corrupted network state that nothing else touches.
After it connects
Confirm the tunnel is actually protecting you — an icon isn't proof. Our 5-test guide takes two minutes and checks IP, DNS, WebRTC, and IPv6. And if it connects but crawls, that's a different article: why is my VPN slow.
Still stuck? Write to [email protected] with your iOS version and what step fails — we answer every email.