Back to Blog
Guide
15 min readOct 01, 2026

Best VPN for iPad in 2026: What Reddit Gets Wrong

iPadOS cannot do split tunneling and will not close connections you opened before connecting. Those two facts decide most of what a VPN can and cannot do on an iPad, and most roundups skip both.

What Is the Best VPN for an iPad?

Proton VPN for most people, NordVPN if streaming unblocking matters more than device count, PureVPN on a budget. But two iPadOS facts matter more than the ranking. First, split tunneling does not exist on iPadOS for any provider, so an app that dislikes the VPN can only be fixed by disconnecting. Second, iPadOS does not close connections opened before you connect, so Apple services can keep talking outside the tunnel; Proton disclosed this in 2020 and Michael Horowitz reproduced it on an iPad in 2022. Turn Airplane Mode on and off after connecting, or use a router.

Four iPadOS limits that decide your options

These apply to Proton, NordVPN, PureVPN and anything else on the App Store. If a roundup tells you a VPN will solve one of them on an iPad, that claim is wrong. The last column is the part that actually helps.

No split tunneling on iPadOS

Every app on the device routes through the VPN while it is connected. There is no way to exempt one app.

No provider can change this

What to do: Disconnect briefly for the app that objects, or put the tunnel on a router and only route selected traffic through it.

Pre-existing connections stay outside the tunnel

Connections opened before you connect are not closed when the tunnel starts. Proton disclosed this in 2020; Michael Horowitz reproduced it on an iPad in 2022.

Platform behaviour, not a VPN bug

What to do: Toggle Airplane Mode after connecting. Proton documented this workaround and warned it is not 100 percent effective, so verify.

Always-on VPN from MDM cannot be opted out of per app

A work or school profile can force a VPN on the whole device with no per-app escape hatch.

Managed-device policy

What to do: None from the device. Ask IT, because working around a corporate profile is a different decision.

No port forwarding, no P2P server selection on iPad

The P2P and port-forwarding features that exist on desktop plans have no equivalent in an iPad app.

Same for every provider

What to do: Use the desktop plan on a machine that supports it. An iPad is not the device for seeding.

The best VPN for iPad, and who it is not for

Since the platform ceiling is identical for everyone, the real differentiators are hardware coverage and paid-plan limits. Each card names where the other provider is the better choice, so you can self-select.

Best overall
Audited, open-source

Proton VPN

The pick for most iPad owners: open-source audited apps, the only genuinely trustworthy free plan with no data cap, and a documented WireGuard route for devices too old for the app.
  • The only free tier with no data cap, no ads and no tracking
  • Documented WireGuard profile route for iPads below iPadOS 17
  • Stealth for restrictive networks, plus audited open-source apps
  • Requires iPadOS 17+, so older iPads are out of the app route
Best for streaming

NordVPN

The pick if streaming unblocking is the priority and you want SmartDNS for an older iPad. App works down to iPadOS 16, so it covers more hardware than Proton.
  • Works from iPadOS 16, so it covers more iPad hardware
  • Strongest streaming unblocking of the three, and SmartDNS for older devices
  • 10 simultaneous connections on every plan
  • Renewal pricing rises sharply after the first term
Best on a budget

PureVPN

The budget pick, and the one to look at if the iPad is a shared family device. Cheapest of the three, with the same iPadOS feature ceiling as everyone else.
  • Cheapest of the three, with 10 multi-logins for the household
  • Obfuscated servers for networks that block VPN protocols
  • No permanent free tier to test with
  • No iPad-specific minimum version or protocol documentation found

This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.

Which one is right for how you actually use the iPad

Since the platform limits are shared, the honest differentiator is your use case. Five profiles, with the reasoning rather than a generic feature grid.

How you use itPriorityPickWhy
iPad is your only computer, used on café and hotel Wi-FiPrivacy and a genuine free tierProton VPN Free to start, Proton paid if you need streamingNo data cap free tier, audited open-source app, and 10 countries is enough for general privacy work
Streaming abroad from an iPadStreaming unblocking and server choiceNordVPNStrongest streaming record of the three, works from iPadOS 16 so more hardware qualifies, and SmartDNS covers older devices
Shared family iPads, tight budgetPrice and enough device slotsPureVPNCheapest of the three, 10 multi-logins, and the platform limits are identical for everyone so you are not paying for features iPadOS cannot deliver
iPad on a work or school networkProtocol camouflageProton VPN with Stealth, subject to IT policyStealth disguises VPN traffic as ordinary HTTPS; but on a managed device the Always-on profile may override your choice
Old iPad that cannot install the current appA route that exists at allProton WireGuard profile, or a routerProton documents the manual profile route; a router tunnel does not care about iPadOS version at all

Capability comparison for iPad

Cells say what is written down. Several PureVPN cells say “not published”: no iPad-specific documentation exists that we could find, and guessing would be worse than saying so.

CapabilityProton VPNPureVPNNordVPN
Minimum iPadOS versioniPadOS 17.0 or laterNot published for iPad specificallyiPadOS 16.0 or later
Protocols available in the appWireGuard and Stealth; IKEv2 and OpenVPN removed from Apple appsNot published for iPad specificallyNordLynx preferred, other protocols switchable in-app
Split tunnelingNot available on iPadOSNot available on iPadOSNot available on iPadOS; split tunneling documented for Windows, macOS, Android
Free planNo data cap, no ads, 10 countries, one simultaneous connectionFree trial rather than a permanent free tierNo permanent free tier; trials and a separate Meshnet free tier
Streaming on a free planNot guaranteed; paid plan recommended for geo-blocked contentNot applicable, no free tierNot applicable, no free tier
Simultaneous devices10 on paid, 1 on free10 multi-logins10, and same-server devices must use different protocols
SmartDNS for an older iPadNot documented for iPadNot documented for iPadYes, SmartDNS supported with manual DNS setup on Apple TV and LG TV
Restricted-network protocolStealth, disguises traffic as ordinary HTTPSObfuscated serversObfuscated servers, plus NordWhisper
Manual route for hardware below the app floorYes, WireGuard profile recommendedNot documented for iPadNot documented for iPad
App audit and jurisdictionAudited, open-source, Switzerland, non-profit ownedBritish Virgin Islands, four no-log assessmentsPanama, sixth Deloitte engagement announced February 2026

The row that decides most purchases is the first one. NordVPN working from iPadOS 16 while Proton needs iPadOS 17 means that on an older iPad the choice is not about quality at all, it is about which app will install.

How to set up a VPN on an iPad

Six steps. Step three is the one that closes the leak, and step two is the answer if the app will not install at all.

  1. 1

    1. Check your iPadOS version before anything else

    The current Proton VPN app requires iOS 17.0 or iPadOS 17.0 or later, per its App Store listing and Proton support pages. NordVPN requires iPadOS 16.0 or later, per its listing. If your iPad is below that, the app will not install and step two applies instead.

  2. 2

    2. On an older iPad, install the WireGuard profile instead of the app

    Proton documents a manual route for older iPhones and iPads using a WireGuard profile or OpenVPN configuration, with WireGuard recommended. This is the honest answer to VPN that does not work on old iPads: there is no app, there is a configuration profile.

  3. 3

    3. Connect, then toggle Airplane Mode to close pre-tunnel connections

    iPadOS leaves connections that were already open running outside the tunnel. Proton disclosed this in 2020 and Horowitz measured it on an iPad in 2022. Proton recommends the Airplane Mode workaround and warns it is not 100 percent effective, so verify your address after connecting rather than assuming.

  4. 4

    4. Turn iCloud Private Relay off for that network

    Private Relay and a VPN clash. With both on, the VPN may report itself connected while pages stop loading. Proton documents the per-network switch-off in the iOS Settings app, and the app also exposes it as an action.

  5. 5

    5. Verify the address in Safari, not in the app

    The app showing connected is not evidence. Open Safari on the iPad and check which country it reports, then check your DNS. If the two disagree, the tunnel is only partly in effect, which on iPadOS is more common than users expect.

  6. 6

    6. On a device that cannot run the app, use a router instead

    A router-level tunnel covers the iPad without the iPadOS app limitation, and it closes pre-existing connections at the network level rather than relying on the device. This is the only route that fully solves the leak described in step three.

Fixing an iPad VPN that is not working

Five failure modes, all of them platform-related rather than provider-related. Work down the table in order.

SymptomCauseFix
The app says connected but pages stop loadingiCloud Private Relay and the VPN are both active, and they conflictTurn Private Relay off for that network in iOS Settings, then reconnect
Stuck on connecting foreverThe network blocks the protocol the app negotiatedSwitch to Stealth (Proton) or an obfuscated server (PureVPN, NordVPN)
App will not install at allThe iPad is below the app minimum iPadOS versionUse the manual WireGuard profile route, a router tunnel, or upgrade the device
Some apps still show your real locationPre-tunnel connections were never closedToggle Airplane Mode after connecting, then verify in Safari — Proton warns this is not a complete fix
A banking or corporate app refuses to workiPadOS has no per-app exemption, so the app cannot be routed around the tunnelDisconnect for that action. There is no in-app alternative on iPadOS

The comparisons Reddit actually argues about

Proton versus Nord, privacy versus speed, and whether a second app is worth keeping as a backup. On an iPad, several of these collapse to a single hardware question.

Proton vs Nord

Nord works from iPadOS 16; Proton needs 17. On older hardware this decides it

Proton removed IKEv2 and OpenVPN from Apple apps, leaving WireGuard and Stealth

Neither offers split tunneling on iPadOS

Privacy vs speed

Privacy-first points to audited open-source apps and a jurisdiction you trust

Speed is mostly nearest server plus WireGuard

The speed case is strongest on cellular, where a tunnel has least room to recover

A second app as backup

Genuinely useful when one provider’s servers are blocked for you

Solves nothing platform-level; both hit the same ceiling

Buy the second month only when you need it, rather than keeping it resident

Questions people ask about iPad VPNs

Related guides

Best VPN for privacy

Jurisdiction and audit comparisons beyond the Apple ecosystem.

Best VPN for Apple TV

The other screen in the Apple household, where SmartDNS matters.

Split tunneling VPN

Where the feature exists, and why iPadOS is not one of the places.

Best VPN for router

The one route that bypasses every device-level limitation on this page.

Free VPN vs paid

The four things a paid plan actually buys.

Best VPN for travel

The other common iPad use case: a laptop-free trip on hotel and café Wi-Fi.

Share this article