Installing a VPN on Linux? Here are the Easiest Methods

One of my favorite Canadian television shows, Murdoch Mysteries, recently finished airing its 18th season. To watch it, I pulled out my Kubuntu Focus Linux gaming laptop, connected it to my LG C2 OLED and went to fire up my VPN (virtual private network), only to realize I still needed to install it.

Perhaps, like me, you need to watch Netflix, Disney Plus or another streaming service while traveling abroad. Possibly you’d like to save money on streaming service subscriptions using a VPN. Maybe you want to bolster your online privacy. Whatever the reason, it’s worth using a VPN. A VPN lets you hide your location from your internet service provider as well as services such as apps and websites. For instance, I can comfortably be seated on the sofa in my living room in North Carolina, but using a VPN, apps and websites think I’m in Toronto, Canada (or another location based on the server you select).

On most platforms like Windows, MacOS, iOS and Android, setting up a VPN is simple: Download an app and install it. However, on Linux, the configuration process isn’t necessarily as straightforward. While some VPN providers offer standalone apps, you may have to resort to changing your network manager settings or relying on a browser plugin. Here’s how to install a VPN on Linux so you can boost your online privacy.

Installing a VPN on Linux using your VPN provider’s app is the easiest method

If your VPN provider offers a Linux app, that’s the best way to run a virtual private network on your PC. You’ll enjoy the most features, such as switching servers quickly and picking which VPN protocol to use, like OpenVPN or WireGuard. 

Thankfully, most of the major companies include helpful guides for getting started:

• ExpressVPN
• Surfshark
• NordVPN
• Proton VPN
• Mullvad
• PIA
• IPVanish

Some VPN providers, like Private Internet Access (PIA), offer downloadable files for installing Linux apps. Often, these will be a .run file, a shell script or a .deb file, a software package installer for Debian-based operating systems like Ubuntu, Linux Mint, or Pop!_OS. 

Here’s how to set up a VPN on Linux with a downloadable file:

1. Head to your VPN provider’s website, navigate to the Downloads page, and download the installer that’s compatible with your Linux operating system (OS) and computer hardware.
2. Open your terminal (CTRL + ALT + T on most Debian-based Linux distributions).
3. Navigate into the folder where your file is saved (usually your Downloads directory): cd /home/[username]/Downloads
4. Make the installer executable (note: If your file is a deb file, you can skip this step, and proceed to step 5, but this is required for scripts like .run or .sh files): chmod +x [filename]
5. Run the installer: sudo ./[file name] for a script like a .sh or .run file, or sudo apt install [package name] for a .deb file.
6. Launch your VPN, sign in with your account credentials, then start using your virtual private network.

Note that these steps might differ slightly based on your specific VPN provider; however, the process should be similar. Here’s what it looked like when I loaded up Private Internet Access on my Linux machine:

1. Download the most recent version of the PIA.run file.
2. Open a terminal (CTRL + ALT + T).
3. Navigate into my Downloads directory: cd /home/techuplife/Downloads.
4. Make the installer executable: chmod +x pia-linux-3.5.1-07760.run (Note: The numbers here will differ based on the version of PIA you’re installing).
5. Start the installer: ./pia-linux-3.5.1-07760.run.
6. Follow the prompts in the terminal window to finish installing Private Internet Access.
7. Fire up the PIA Linux app, sign in, and select a server location. 

While select VPN providers offer downloadable files like a .run or .deb, others, including ExpressVPN, NordVPN and Surfshark, rely entirely on the command line. Let’s look at downloading a VPN on Linux with the command line:

1. Open a terminal window (CTRL + ALT + T).
2. Find the installation command on your VPN provider’s website, copy that (CTRL + C), and paste it into the terminal (CTRL + SHIFT + V).
3. Hit Enter or Return to run the installer and follow the prompts.

Once installation finishes, run your VPN to log in and get connected. The specific steps for a Linux app command line download differ but should generally be similar.

How to install Surfshark on Linux

When I installed Surfshark on my laptop, it looked like this:

1. Launch a terminal window (CTRL + ALT + T).
2. Copy the installation script and paste it into my terminal: curl -f https://downloads.surfshark.com/linux/debian-install.sh –output surfshark-install.sh
3. Run the installation script: sudo sh surfshark-install.sh then follow the on-screen prompts.
4. Open the freshly downloaded Surfshark Linux client app, log in, select a server location, and enable the VPN. 

How to install ExpressVPN on Linux

ExpressVPN debuted a GUI Linux app in March 2025. Here’s how to download the ExpressVPN app for Linux:

1. Download the ExpressVPN installer from the setup page. You may be prompted to enter your login credentials. You should receive a verification code via email.
2. Open the terminal (CTRL + ALT + T on most Debian-based Linux distros).
3. Navigate to the folder where the downloaded file installer is via the command line. If that’s the downloads folder, you’ll likely use cd /home/[username]/Downloads — where [username] is your machine’s username.
4. Initiate the installer script: sh [installer filename] where [installer filename] is the name of the file you downloaded. You may be prompted to enter your PC’s password.
5. Once installation completes, the app should automatically start, and you can log in with your username and password, a sign-in link or an activation code.

How to install NordVPN on Linux

In May 2025, NordVPN released its first-ever Linux GUI app. To install the NordVPN on Linux:

1. Open a command prompt (CTRL + ALT + T).
2. Install the NordVPN Linux app with a GUI: sh or the CLI-only version using: sh
3. Log in to the NordVPN app. With the GUI version, open the app and enter your username and password. With the CLI version, enter nordvpn login in the command line.

If you use the command line to log in, you’ll need to either use the –token or –callback flags. For the token, log into your NordVPN account using a web browser, head to the Services menu > Access token > generate new token and choose either a 30-day token, or one that doesn’t expire. In the command line, enter nordvpn login –token [your token] (where [your token] is the token you generated earlier).

With the callback flag:

1. Run nordvpn login in the command line.
2. Copy the URL that returns in the command prompt into a web browser.
3. Log in using that URL.
4. Right-click the Continue button to copy the link address.
5. In a command prompt, run nordvpn login –call back [URL] (where [URL] is replaced with the link you copied).

How to install Proton VPN on Linux

With its streamlined GUI app, Proton VPN works great on Linux:

1. Download the Proton VPN app package: wget https://repo.protonvpn.com/debian/dists/stable/main/binary-all/protonvpn-stable-release_1.0.8_all.deb
2. Install the Proton VPN repository: sudo dpkg -i ./protonvpn-stable-release_1.0.8_all.deb && sudo apt update
3. Install the VPN app: sudo apt install proton-vpn-gnome-desktop

How to install Mullvad VPN on Linux

Mullvad is one of the best VPNs for folks with serious privacy concerns, and its Linux GUI app is easy to use:

1. Install curl: sudo apt install curl
2. Download the signing key: sudo curl -fsSLo /usr/share/keyrings/mullvad-keyring.asc https://repository.mullvad.net/deb/mullvad-keyring.asc
3. Add either the stable repository: echo “deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg –print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main” | sudo tee /etc/apt/sources.list.d/mullvad.list
   or the beta repository: echo “deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg –print-architecture )] https://repository.mullvad.net/deb/beta $(lsb_release -cs) main” | sudo tee /etc/apt/sources.list.d/mullvad.list
4. Install the Mullvad VPN app: sudo apt update sudo apt install mullvad-vpn

You can also install a VPN on Linux using your system’s network manager

While I recommend using the official Linux app from your VPN provider, assuming there’s one available, you can configure a virtual private network on your computer using a specific protocol, like OpenVPN or WireGuard. You’ll use a specific VPN protocol client like WireGuard and OpenVPN, or Network Manager. While using Network Manager or OpenVPN works, it’s more cumbersome and doesn’t give you the full slate of features you’d get from a standalone VPN client app from your provider. 

For example, by installing Surfshark’s VPN app, I could switch between WireGuard and OpenVPN. Different VPN protocols offer various benefits. Generally, OpenVPN sports better security at the expense of connection speeds, while WireGuard is more balanced with excellent protection and minor speed loss compared to not using a VPN. But not all companies allow you to use their client app — IPVanish’s Linux instructions all hinge on OpenVPN.

To configure a VPN on Linux using your network manager:

1. Open Connections.
2. Click the plus (+) sign.
3. Select your preferred VPN protocol, typically OpenVPN or WireGuard.
4. Enter the correct information based on your VPN provider.

From there, you can change several fields:

1. Connection name: You can use anything, but I recommend setting this as your VPN provider, i.e., NordVPN, IPVanish, etc.
2. Gateway
3. Connection type: TLS, Static Key, Password, Password with Certificate (TLS)
4. User name
5. Password

Depending on which connection type you select, you may have even more fields. You’ll need to check your VPN provider’s website to see the correct information to input in the various boxes and obtain certificates. 

VPN apps with a GUI on Linux are great for beginners

Many VPN providers only offer Linux command line interface, aka CLI, apps. Although the command line isn’t necessarily tricky, a visual interface is easier to navigate for Linux beginners. Additionally, a graphical user interface, or GUI, provides features like the ability to pick your favorite servers, quickly turn your VPN connection on or off and easily navigate into your settings. ExpressVPN, NordVPN, Surfshark, Proton VPN and Mullvad are some of our favorite VPN providers with Linux GUI applications.

That’s not to say a CLI VPN app is challenging to use, but it’s not as intuitive — especially for folks new to Linux — since you’ll need to enter the proper commands to perform essential functions like changing servers and turning your VPN on or off. With a command-line-only app, you’ll need to remember the proper Linux app commands to enter to connect, disconnect, change servers, enable kill switches and perform other functions. Or, if you’re me, you’ll need to look up commands each time because you don’t recall them off the top of your head. 

Luckily, they’re mostly pretty simple; for instance, nordvpn login lets you log in, nordvpn connect or nordvpn c connects you to VPN servers, and nordvpn set killswitch on enables its kill switch. Similarly, with ExpressVPN, you’ll connect using the command expressvpn connect. Using expressvpn list in a terminal window shows a list of recommended server locations, and you can pick a specific location using expressvpn connect “[country – city]”. Thankfully, both NordVPN and ExpressVPN offer GUI Linux apps, which are significantly easier to use for beginners than CLI apps. But as you can see, most terminal commands aren’t too tricky, although you might have to consult help documents for the VPN you’re using for the full library of options. 

You can also run a VPN on Linux using a browser extension

Using your VPN provider’s Linux app — either with a GUI or CLI — gives you a great experience. However, you can also use a browser extension. A standalone VPN app provides comprehensive protection for all applications on your computer — from your Chrome web browser and Steam game client to Spotify. If your VPN has split tunneling, you can even choose which apps use a VPN while it’s enabled and which don’t. So you could use your VPN to access Netflix libraries from the UK while installing a game from Steam outside of your VPN to avoid that pesky two-factor authentication email from Valve and faster download speeds.

On the other hand, a browser extension only protects web traffic through your browser. So if you’re watching Netflix, streaming Spotify, and reading articles on your favorite websites (it’s CNET, right?), in a browser, that’s routed through your VPN. But downloadable apps for Spotify, Netflix, and other services aren’t. In this way, a browser extension is similar to split tunneling in that only some traffic is protected. But where split tunneling allows you to use your VPN for various apps, extensions only work with whatever’s in that specific web browser. 

Ultimately, if you’ve got the option to use a VPN client app, you’ll get the most functionality. A browser extension is pretty easy but less comprehensive than a standalone VPN application. And using the network manager on your Linux OS works well enough but makes switching VPN protocols more cumbersome.