Setting up a free VPN takes five minutes. Setting it up safely takes the same five minutes - you just download from the right place and switch on three settings most people never open.
The setup itself is deliberately easy - the honest providers made it one-click because friction is the enemy. The danger is not in the setup screens; it is in where the installer came from and in the three settings left at their defaults. This walkthrough uses the pattern of the verified free plans in this guide (Proton VPN Free, Windscribe Free) - the exact screens differ slightly by app, but the order and the checks are the same everywhere.
On Windows, go to the provider's own website and use its download button - for Proton that is protonvpn.com, for Windscribe windscribe.com. On Android, use the Play Store listing under the provider's real name. Never install from APK sites, file-sharing links, video-description shortcuts to unknown mirrors, or pop-up ads - repackaged VPN copies are a known malware channel, and a VPN's deep network access makes a fake copy the worst app on your phone to get wrong. If a so-called free VPN is not distributed by its own maker, close the tab.
Create the free account with an email you actually control. A trustworthy free plan never asks for a credit card - the moment a free trial demands card details, you are in a subscription funnel, so read before you tap. Then press Connect once: honest free plans pick a server for you (Proton assigns one automatically from its free countries; Windscribe lets you choose from its free list). The first connection is your baseline - note roughly how pages load, because peak-hour slowdowns later are normal free-tier behaviour, not a fault.
Open Settings before you rely on the app. Kill switch: ON - if the tunnel drops, traffic stops instead of leaking onto the open network; on Android, also enable Always-on VPN and Block connections without VPN in the system VPN settings for the same effect. Auto-connect on untrusted Wi-Fi: ON where the app offers it, so the cafe scenario protects itself. Protocol: leave on automatic - the app will choose WireGuard or OpenVPN sensibly; manual protocol tweaking is for troubleshooting, not day one. These three settings convert an installed app into an actual safety habit.
Do not trust the green button; verify. Note your IP address on any what is my IP page with the VPN off, connect, and check again - the address and country should now be the VPN server's. Then disconnect suddenly (or toggle Wi-Fi off and on) and confirm the kill switch behaviour: pages should fail to load rather than load unprotected while the tunnel is down. Two minutes of testing now is worth more than a month of assumed protection.
Update the app when it asks - VPN updates are security updates. Keep the free account's password unique, like every password. Re-check the plan limits on the provider's page every few months, because free terms change and the printed page is the only truth. And know when to switch it off: banking apps occasionally object to VPN addresses, and big downloads at home do not need the tunnel - turning it off there saves your data cap for the networks that actually threaten you.
The free VPNs from this guide are shown and set up live in the video - watch it before you install anything.
▶️ Watch Full VideoYes - that system dialog is Android asking you to approve the tunnel itself, and every genuine VPN app triggers it. It is the unrelated permissions (contacts, SMS, location) that should make you suspicious, not this one.
Occasional drops happen on crowded free servers. What matters is the kill switch: with it on, a drop pauses your traffic safely until reconnection. If drops are constant, try a different free server or time of day before blaming the app.
It depends on the plan's device rule. Proton Free allows one device connected at a time, so you sign in on both but use one at once. Always check the current plan page - device rules are exactly the kind of term that changes.