VPN Protocols: WireGuard, OpenVPN, IKEv2, and App Defaults
Choose a connection method your app actually supports, and understand why protocol names alone cannot predict speed or privacy.
A protocol is the method used to establish and carry the VPN connection. Available choices depend on the provider, app, operating system, and sometimes the package you installed.
Start with the supported default
For ordinary use, start with the app’s recommended or automatic option. It can choose a method the provider supports on that network. “Automatic” is a selection setting, not an additional cryptographic protocol.
Understand the main labels
WireGuard is a VPN tunnel protocol used across several operating systems. Providers may add their own account or routing systems around it. OpenVPN can use UDP or TCP transport; the selected mode must be supported by the service. IKEv2 establishes IPsec connections and appears in some apps and built-in system configurations.
A provider-branded protocol should be checked in its documentation. Do not assume that a familiar name means every device has the same implementation or features.
Change one setting when troubleshooting
If a connection fails, record the current setting and try another officially supported choice. A TCP-based option may help on a network that blocks another transport, but can add overhead. No protocol guarantees access through every restriction.
Compare the same server and task before drawing a speed conclusion. App versions, network conditions, server load, and routing also matter.
Recheck old setup instructions
Mullvad retired OpenVPN support in 2026. An old configuration tutorial can therefore look reasonable while no longer working. Use the current platform entry on the product page rather than assuming a protocol remains available.