VPN basics · Plain-English answer
To use a VPN on an iPhone, install a VPN app from the App Store, sign in, and tap connect. iOS will ask permission to add a VPN configuration the first time. Once approved, a small VPN badge appears in the status area whenever the tunnel is active.
The app route is the easiest. Download your provider's app, log in, and tap the connect button. iOS shows a one-time prompt asking to allow the VPN configuration, and after you approve it the app can connect and disconnect on its own. You can see and manage installed configurations under Settings, General, VPN and Device Management.
Manual setup without an app is possible for some protocols, but for WireGuard-based services the app is the practical option and handles keys for you.
iOS supports on-demand and always-on style behaviour through the VPN app, so the tunnel can reconnect automatically after reboots or network changes. Battery impact with a modern protocol like WireGuard is modest.
One honest caveat is that some Apple system services can send limited traffic outside VPNs in edge cases, which is an iOS design decision rather than a fault of any app. For browsing and apps in general, the tunnel covers your traffic. ROOT VPN's iPhone app uses WireGuard and includes a kill switch, and the free tier works without entering a card.
ROOT VPN is free to start with unlimited data, no card needed, and no activity logs.
Get ROOT VPN, free