Free tools Windows power users keep installed
One-click scans. No signup required.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
ExpressVPN has a native Windows app for Windows 10 and Windows 11, plus a separate app for Windows 11 ARM64 PCs. Download it from ExpressVPN’s official setup page, sign in, and connect to a location. Its main controls include an Internet Kill Switch, split tunneling, automatic connection rules, and Lightway protocols; some features cannot be combined, and performance varies by network and server.
What the Windows app does—and which PCs it supports
ExpressVPN for Windows is a desktop VPN client that routes supported device traffic through a VPN connection. It is different from ExpressVPN’s browser extension, which is intended to cover browser traffic, and from manual VPN configuration, the router app, and MediaStreamer Smart DNS. The current setup guide covers Windows 10 and Windows 11. Windows 11 devices with ARM64 processors, including many Snapdragon laptops, need the dedicated ARM64 app rather than an assumed x64 installer.
ExpressVPN’s current Windows installation guidance does not establish current support for Windows 7, 8, or 8.1. Its release notes document the end of Version 10 support and changes affecting older Windows versions. Check the Windows app release notes if you are on an older system; do not assume it receives the same app features or support as Windows 10 and 11. See the Windows setup guide and ARM64 setup guide for current compatibility details.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchGet the installer from ExpressVPN
Use the official Windows download page or sign in at the ExpressVPN account portal. Avoid third-party download repositories, search ads with unfamiliar domains, modified installers, and purported cracked or free copies. ExpressVPN is a subscription service; the vendor advertises a 30-day money-back guarantee for new subscribers, subject to its current terms.
#1 Best Overall
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
How to download, install, and activate ExpressVPN
- Open the official Windows setup page and sign in if prompted.
- Under Applications or Show other devices, select Windows, then choose Download Now. On an ARM64 PC, follow the separate ARM64 instructions.
- Keep the setup page open in case you need the activation code. Run the downloaded installer and approve the Windows permission prompt.
- Open ExpressVPN and choose Sign In. Complete activation with the option offered for your account, such as email sign-in or an activation code. Sign-in choices can vary by account and app release.
- Choose a VPN location and connect. Wait for the app to show that the connection is active before using the VPN.
How to connect and choose a location
Open the app, select a recommended location or open the location selector to choose a country or region, then press the main connection button. To change locations, disconnect or select another location in the app and reconnect. A nearby server is a sensible starting point for lower latency; choose a farther region when you have a specific location-related need.
A displayed location is not necessarily a guarantee about the physical location of every server. Nor does selecting a country guarantee access to a particular streaming service: services can identify and block VPN addresses, and access depends on the service, country, account, and content at the time.
Public Wi-Fi and captive portals
Some public Wi-Fi networks require a browser-based sign-in or terms acceptance before internet access works. Connect to the Wi-Fi, temporarily leave the VPN disconnected if necessary, complete the network’s portal login, then reconnect ExpressVPN. Do not leave security protections disabled as a permanent workaround.
Recommended Windows settings
- Protocol: Keep Automatic initially. ExpressVPN recommends it as the default.
- Internet Kill Switch: Leave the standard setting enabled to block traffic if the VPN unexpectedly drops.
- Advanced Internet Kill Switch: Enable Enable at all times only if you want internet blocked whenever the VPN is inactive, including after intentional disconnection.
- Auto-connect: Consider rules for unsecured Wi-Fi if you use a laptop on public networks. Review local-network and work-app needs before applying broad rules.
- Lightway Turbo: If trying it, begin with Single tunnel. Turn it off if a site, game, or work app stops working.
- Split tunneling: Configure it only when you have a clear reason to route selected apps or IP addresses differently. It is unavailable with Lightway Turbo.
- Advanced Protection: Treat it as an optional blocking layer, not antivirus or a guarantee against malicious content.
Protocols and Lightway Turbo
To view protocol settings, disconnect first, then open Profile → VPN Protocol. The choices and labels can vary by app version; the current guide discusses Automatic, Lightway – UDP, Lightway TCP, and other options. Automatic is the best starting point. If you need to choose manually, Lightway – UDP is a reasonable first option for responsiveness; try Lightway TCP if UDP is blocked or unreliable. No protocol is always fastest: the result depends on the network, server distance, congestion, firewall, and workload. Advanced Protection may limit protocol choices to Automatic or Lightway.
Rank #2
- Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
- Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
- Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
- Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks
What Turbo changes
Lightway Turbo is an enhanced Lightway mode available with Automatic or Lightway – UDP. Single tunnel uses one path and is intended to be broadly compatible. Dual tunnel uses two paths simultaneously in pursuit of greater bandwidth, but it is experimental and can disrupt some websites, apps, and games. A gain is not guaranteed. Turbo cannot be used with split tunneling or Lightway TCP. If something stops working, switch from Dual to Single, disable Turbo, or return to ordinary Lightway.
Split tunneling: route selected apps or IP addresses
On supported current Windows configurations, open Profile → Split Tunneling and enable the feature. The app documents rules for applications and IPv4 or IPv6 addresses and CIDR subnets. Depending on the rule, you can set an app to Bypass VPN or Only VPN, and configure how All Other Apps behave. This is not a universal per-website switch.
For example, you might route a work app through the VPN while letting a local printer utility bypass it, or exclude a particular app from the VPN. Check the rule direction carefully: Only VPN and Bypass VPN mean different things. Apps can use helper processes that need their own rules, and DNS behavior may not match what a simple app-level rule appears to promise. The release notes record a temporary removal during investigation of a DNS issue and restoration in Windows Version 12.74.0; older Windows versions, including 7, 8, and 8.1, have had feature restrictions. See the release notes for version history.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Kill switch and automatic connection
Internet Kill Switch
Open Profile → Settings → Internet Kill Switch. The standard Internet Kill Switch blocks internet traffic if the VPN connection unexpectedly drops and is enabled by default according to ExpressVPN’s guide. The stricter Enable at all times option blocks all internet traffic unless the VPN is active. That can leave the PC offline after startup, sleep, an app failure, an expired account, or a deliberate VPN disconnection. If internet disappears, check this setting before resetting Windows network settings or reinstalling the app.
Rank #3
- NIGHTHAWK WIFI 6 ROUTER FOR YOUR WHOLE HOME: Delivers fast, reliable WiFi across every room of your apartment or small home for streaming, gaming, video calls, and smart home devices, all running at the same time without slowing each other down.
- WORKS WITH YOUR EXISTING INTERNET SERVICE: Pairs with your existing modem or gateway via ethernet. Compatible with most cable, fiber, DSL, and satellite providers. Some gateways and modem router combos may require bridge mode. No coax needed.
- SET UP AND MANAGE YOUR NETWORK WITH THE NIGHTHAWK APP: Download the free Nighthawk app on iOS or Android for guided setup. Manage WiFi, run speed tests, pause devices, and set up guest networks from anywhere. Active internet required.
- READY FOR THE DEVICES YOU ALREADY OWN: Your phones, laptops, and TVs work right out of the box. WiFi 6 delivers speeds up to 1.8 Gbps across 2.4 GHz and 5 GHz bands. Backward compatible with WiFi 5 and earlier.
- COVERAGE IN EVERY ROOM: Covers up to 1,500 sq. ft. for up to 20 connected devices. Walls, floors, and interference can reduce range. Larger or multi-story homes may benefit from a NETGEAR Orbi mesh WiFi system.
Auto-connect
Open Profile → Settings → Auto-connect to create rules for secure or unsecured Wi-Fi, Ethernet, or a specific Wi-Fi network. Rules can connect or disconnect the VPN under the selected conditions; the app can also launch at startup and connect on launch. Auto-connect is useful for public Wi-Fi, but may interfere with corporate VPNs, local printers or file shares, and services that reject VPN addresses. Follow workplace or school network policies.
Other Windows app features
Advanced Protection
Go to Add-ons → Advanced Protection to access controls that use blocklists against certain ads, trackers, malicious sites, and adult content. The feature is off by default and requires a VPN connection. It is not a full antivirus, a replacement for browser protections or endpoint security, or a promise that every ad, tracker, or harmful domain will be blocked. See ExpressVPN’s features page for the vendor’s description.
Speed Test
Open Speed Test → Play to compare a selected VPN location with your ISP connection. Use it to compare locations on the same connection, not as a prediction of every real-world task. Video calls, games, large downloads, streaming stability, and work applications can behave differently from a speed test.
Dedicated IP
ExpressVPN’s release notes say dedicated IP setup can be completed in the Windows app without a mobile device. A fixed address may help with IP allowlists or repeated login challenges, but it does not make you untraceable: it is less anonymous than sharing rotating VPN addresses, can still be blocked or reputation-scored, and may depend on plan or additional cost. Check current eligibility and price in your account before subscribing.
Rank #4
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
- 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
- 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
- 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.
CLI and MCP integration
ExpressVPN lists command-line control in its Windows support hub and documents the Windows CLI in its release notes. Consult the live CLI documentation linked there for commands and compatibility rather than relying on syntax from another app version.
The Windows app also documents an MCP server for compatible AI developer tools. The guide says it is available at no additional cost with active one-year or two-year ExpressVPN or ExpressVPN for Teams subscriptions, not monthly subscriptions; it requires the latest Windows app and an MCP-compatible client. Enable it via Add-ons → Enable MCP Server. Because an integrated AI tool can change regions, protocols, or connection state, grant access only to a client you trust and account for accidental changes or disconnections.
Compact mode and language
The app offers compact mode from the VPN tab; the guide says it is unavailable while viewing Speed Test. The current guide lists 17 app languages. Labels and availability can change with releases.
Performance, privacy, and what a VPN cannot do
Measure performance on your own connection: compare a nearby location with the region you actually need, then test the real apps you care about. If experimenting with Turbo, compare ordinary Lightway, Single tunnel, and Dual tunnel separately; change one setting at a time so it is clear what caused a difference. ExpressVPN advertises a network spanning 113 countries and 10Gbps/40Gbps server capacity, but those are vendor claims, not a guarantee of speed or a result measured on your PC. Its Windows product page also states its encryption, bandwidth, support, and refund claims; treat those as the company’s representations.
Best Value
- Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
- Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
- Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
- MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
- Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
A VPN changes the route and apparent public IP address for traffic it carries; it does not make a person anonymous or protect against every threat. It cannot by itself stop malware, phishing, compromised accounts, browser fingerprinting, or disclosure of information you submit. Split-tunneling rules and kill-switch behavior also affect what traffic is routed or blocked, so verify settings after changing them. For the provider’s published privacy and infrastructure material, consult the Trust Center and features page; vendor claims should not be mistaken for independent testing.
Troubleshooting common Windows problems
The installer will not download or run
- Confirm you chose the correct architecture, especially on Windows 11 ARM64.
- Download a fresh installer from the official setup page rather than a third-party repository.
- Check whether Windows security software blocked the download, and whether the installer needs permission to run.
- A previous VPN driver or another VPN client can conflict. Use ExpressVPN’s Windows support hub for current installer recovery steps.
You cannot connect or have no internet
- Check whether ExpressVPN actually shows Connected.
- Try a different location to determine whether the problem is limited to one server.
- Check whether Enable at all times is blocking traffic while the VPN is inactive.
- If using Turbo, switch Dual tunnel to Single tunnel or turn Turbo off.
- Disconnect before changing protocol; try Automatic if another protocol fails.
- Check for a captive portal, proxy, firewall, conflicting VPN, or security product managing the network adapter.
- If all access remains blocked, use the official internet restoration support instructions rather than repeatedly reinstalling.
A website, game, or streaming service fails
The service may block VPN IP addresses, depend on local network access, or be affected by Turbo or a split-tunneling rule. Try Single tunnel or disable Turbo, use Automatic, review app and IP rules, and test another location. Disconnect and reconnect after changing settings. No VPN location guarantees access to every service.
Split tunneling routes the wrong traffic
Verify that the intended app is set to Bypass VPN or Only VPN, as appropriate. Check whether the app launches a separate helper process, whether an IP/subnet rule overlaps with an app rule, and whether another VPN is installed. Restart the affected app after changing a rule and consider whether DNS requests are being resolved as expected.
Recommended Free Tools
Internet stays blocked after disconnecting or uninstalling
If the app is accessible, turn off Enable at all times and disconnect normally. If connectivity remains blocked, use ExpressVPN’s official restoration guidance in its Windows support hub and check for leftover or competing VPN adapters before repeating installation attempts. Verify the VPN status after waking a laptop from sleep, particularly when using a kill switch or auto-connect; release notes describe reconnection improvements, but behavior can vary by setup.
Who should choose ExpressVPN for Windows?
It is a plausible choice if you want a mainstream paid VPN with a native Windows interface, Windows 10/11 and ARM64 guidance, a kill switch, app-based split tunneling on supported systems, and automatic connection rules. It is less suitable if you need a free service, the lowest renewal price, support for a legacy Windows release, maximum open-source configurability, or simultaneous Lightway Turbo and split tunneling. Dedicated IP and MCP eligibility also depend on current plan terms.
Before buying, compare the current subscription and renewal price, device limits, refund terms, and feature eligibility on ExpressVPN’s live order page. ExpressVPN advertises a 30-day money-back guarantee for new subscribers, but check the terms that apply to your purchase. If your priority is a lower price, a free tier, or different advanced networking features, compare providers against that specific requirement rather than assuming one VPN is best for every Windows user.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors
