One-click VPN apps work fine for most people. But if you need a specific protocol like WireGuard, or you're trying to get past censorship with V2Ray, the built-in apps usually aren't enough. This guide covers vpn configuration for iphone the manual way: picking a protocol, importing configs, and actually verifying that your connection works.
Why manually configure a VPN on your iPhone
Most VPN provider apps only give you one or two protocol options, and they're usually not the best ones. A manual configuration lets you pick exactly which protocol to use and which client app to run it in. That matters more than it sounds.
More control over your connection
With a manual setup, you pick the protocol. WireGuard is fast and lightweight, which is noticeable when gaming or streaming. You also get to use third-party clients like Shadowrocket that show more connection detail than a provider's own app.
You're also not locked into one provider's ecosystem. You can configure connections from different services on the same phone. If you care about preventing IP address tracking, that flexibility matters.
Getting past network blocks
In places with heavy internet censorship, standard VPN apps are often the first thing to get blocked. A manual setup with V2Ray/XRay can disguise your VPN traffic as regular web browsing. For people in China, Iran, or the UAE, this is sometimes the only way to keep a working connection.
That adaptability is the whole point. A manual VPN setup lets your iPhone route around blocks that would stop a standard app cold.
More than half of VPN users are on iOS devices, which says something about the demand for proper iPhone VPN configuration. The one-tap apps are fine for casual use, but people dealing with actual censorship need more.
What you need before starting
Gather everything before you start so you’re not switching between apps mid-setup.
You’ll need an active Tegant VPN subscription. Your login gives you access to the configuration files, so have your credentials ready.
You also need the right app from the App Store. Which one depends on your protocol.
- WireGuard: the official WireGuard app. Free, lightweight, does exactly what it needs to.
- V2Ray/XRay: a proxy client like Shadowrocket or Stash. These handle the more complex protocols.
Here's the full list:
Setup checklist
| Item | Where to Get It | Purpose |
|---|---|---|
| Tegant Subscription | The Tegant website | Provides access to your VPN account and configuration files. |
| WireGuard App | Apple App Store | Required client for connecting via the WireGuard protocol. |
| Shadowrocket or Stash | Apple App Store | Required client for connecting via V2Ray/XRay protocols. |
| Configuration Details | Your Tegant Dashboard | The unique QR code or subscription link for your account. |
| Stable Internet | Wi-Fi or Cellular | To download apps and import settings without any hitches. |
Once you've got the apps installed and your internet is stable, the final and most important piece is your unique configuration file. Log into your Tegant dashboard to find it. For WireGuard, this will be a QR code or a downloadable file. For V2Ray, it’s a subscription link you’ll just need to copy.
Have your configuration link or QR code ready before you start. Without it, there's nothing to import.
If you're wondering why there are so many protocols, our IPSec vs SSL VPN comparison covers the differences.
How to set up WireGuard on your iPhone
WireGuard is noticeably faster than older protocols like OpenVPN and IKEv2. The setup takes about two minutes.
Download the official WireGuard app from the App Store. It’s free and built by the WireGuard project itself. The interface is minimal: just an empty tunnel list waiting for you to add a configuration.
Importing your Tegant configuration
Log into your Tegant VPN account on another device (laptop, tablet, whatever). Find the WireGuard configuration section. You'll see a QR code that contains your server address, encryption keys, and endpoint info.
Now open the WireGuard app on your iPhone.
- Tap the “+” icon or “Add a Tunnel.”
- Choose “Create from QR code.”
- Point your iPhone’s camera at the QR code on your other screen.
The app imports everything from the QR code automatically. No typing server addresses or pasting keys. Name the tunnel something recognizable (like "Tegant VPN") and hit Save.
Connecting and managing the tunnel
Your tunnel now appears on the app's main screen. Flip the switch to connect.
The first time, iOS will ask permission to add a VPN configuration. Tap “Allow” and enter your passcode if prompted. This is normal.
The connection should kick in almost instantly. You’ll know it’s working when you see the small "VPN" icon in your iPhone’s status bar. After that, you can toggle the VPN on or off from the WireGuard app or from Control Center.
Native iPhone VPN setup with IKEv2
If you don't want to install any third-party apps, iOS has a built-in VPN client that supports IKEv2. It's not as fast as WireGuard, but IKEv2 handles network switching well, so your connection doesn't drop when you move between Wi-Fi and cellular.
You'll need your VPN provider's server address, remote ID, and your username/password. Go to Settings > General > VPN & Device Management > VPN, tap Add VPN Configuration, choose IKEv2, enter your details, and save. You can connect directly from that menu without any app.
Setting up V2Ray for censorship bypass
WireGuard is fast but it doesn't try to hide itself. If you're in a country that actively blocks VPN traffic, you need something that disguises the connection. V2Ray (and its XRay fork) does this by making VPN traffic look like regular HTTPS browsing.
iOS doesn't support V2Ray natively, so you need a third-party client. For this kind of vpn configuration for iphone, Shadowrocket and Stash are the two that most people use. Both handle V2Ray, VLESS, Trojan, and other proxy protocols.
Importing your Tegant subscription link
V2Ray uses subscription links instead of QR codes. One link contains all your server configurations, and the app can refresh them automatically.
Log into your Tegant VPN account on any device.
- Head over to the V2Ray/XRay configuration section in your dashboard.
- Find the "Copy subscription link" button. Tap it to copy the URL.
- If you did this on a computer, just send the link to yourself on your iPhone through a secure messenger or email.
Open Shadowrocket (or whichever V2Ray client you chose). Instead of adding servers manually, you'll add a subscription URL.
The nice thing about subscription links is that your app auto-fetches updated server lists from Tegant. When servers change or new ones come online, you get them automatically.
Activating the V2Ray connection
In Shadowrocket, tap the “+” icon and select “Subscribe” or “Add by URL.” Paste your Tegant subscription link and save.
The app pulls in all available server locations from your Tegant plan. Pick a server from the list and toggle the connection on.
Same as WireGuard, iOS will ask permission to add a VPN profile the first time. Tap “Allow.” The VPN icon appears in your status bar when you're connected.
Fixing common iPhone VPN connection problems
Setup done but can't connect? The fix is usually something simple.
Start with the config file. If you're using WireGuard, a glitch during import can silently break things. Go back to your Tegant dashboard, generate a new QR code, delete the old tunnel, and scan again.
Common connection problems
If a new config doesn't fix it, the problem might be your network, not the VPN. Toggle Airplane Mode on for 10 seconds, then off. This forces iOS to re-establish its Wi-Fi or cellular connection, which clears a surprising number of issues.
Other things to try:
- Switch from Wi-Fi to cellular (or the other way around). If it works on one but not the other, the problem is network-specific, probably a firewall.
- Restart your iPhone. Boring advice, but a full reboot clears software glitches that can interfere with VPN profiles.
- Check your subscription. Log into your Tegant account and make sure the plan hasn't expired.
If none of that works, the issue is probably network-level rather than VPN-related.
For persistent issues, check whether DNS might be the culprit. Network-level DNS problems look identical to VPN failures. Our guide on how to fix DNS issues covers the overlap.
Checking for DNS leaks
The VPN icon in your status bar doesn't guarantee all traffic is going through the tunnel. Run a DNS leak test (there are free ones online) to confirm. A clean result shows only DNS servers matching your VPN server's location. If you see your ISP's DNS servers, something is leaking.
Fixing iOS permission errors
After an iOS update or an interrupted setup, you might see VPN configuration errors. Fix it by deleting the old profile: go to Settings > General > VPN & Device Management > VPN, tap the info icon next to your profile, and delete it. Restart, then re-add the configuration.
FAQ
Common questions about VPN configuration for iPhone.
Is it better to set it up manually or just use an app?
Depends on your situation. A provider’s app is tap-and-connect, which is fine for basic use. But if you need WireGuard for speed, or V2Ray to get past censorship, you’ll want the manual route. Third-party clients like Shadowrocket also give you per-app routing and detailed connection stats that provider apps don’t offer.
Will running a VPN all the time kill my iPhone's battery?
Short answer: no. WireGuard was designed with mobile devices in mind. It sits idle when you're not sending data and wakes up instantly when you are.
Any background process uses some power, but with WireGuard, I've never noticed a meaningful difference in battery life. It's not like running a game in the background.
Can I use this same setup on my iPad?
Yes. iOS and iPadOS use the same VPN stack, so the setup is identical. Same Tegant subscription, same WireGuard or Shadowrocket app, same steps. Your configuration isn't tied to one device.
Tegant VPN supports WireGuard and V2Ray on iPhone, iPad, Android, Mac, and Windows.