Windows 8.1/10 L2TP Setup


PPTP/L2TP/SOCKS Security

The PPTP/L2TP/SOCKS5 protocols are provided for devices lacking compatibility with the Private Internet Access application or OpenVPN protocol. PPTP/L2TP/SOCKS5 should be used for masking one's IP address, censorship circumvention, and geolocation.

If you need encryption, please use the Private Internet Application or OpenVPN protocol with our service.

*** This configuration uses a Generated PPTP/L2TP/Socks5 Username and password, If you have not generated this yet, please follow the steps here: Generating a Password for PPTP/L2TP/SOCKS ***
  1. On your Keyboard, hold down the Windows Key, and press x to open the Quick Links Menu.
  2. Click on Control Panel
  3. From Control Panel, Click on View Network Status and Tasks
    Win8L2TP1
  4. Click Set up a new connection or network
    Win8L2TP2
  5. Click Connect to a Workplace Then click Next
    Win8L2TP3
  6. Click on Use my Internet Connection (VPN)
    Win8L2TP4
  7. For Internet Address, enter us-east.privateinternetaccess.com [*]
    Or if you prefer to use a specific location, You can find the full list of locations here: https://www.privateinternetaccess.com/pages/network
  8. For Destination Name, enter Private Internet Access L2TP
  9. Check the Option "Allow other people to use this connection" if you want other users on the computer to be able to use the VPN connection.
  10. Click Create.
    Win8L2TP5
  11. On the Right Side, Windows will show the new L2TP connection, don't click on it yet.
    Win8L2TP6
  12. Hold the Windown Key, and Press X again to open the Quick Links Menu.
  13. Click on Network Connections
  14. In the network connections screen, locate the L2TP connection we just created, Right-click on it, and choose Properties.
    Win8L2TP7
  15. In the Properties, go to the Security Tab
  16. Under Type of VPN, set Layer 2 Tunneling Protocol with IPsec
  17. Under Data Encryption, set Require Encryption
  18. Select Allow these Protocols, and check Microsoft CHAP Version 2
  19. Click the Advanced Settings Button
    Win8L2TP8
  20. For Preshared key, type:
    mysafety
    Win8L2TP9
  21. Click OK
  22. Click to the Networking Tab. If you are prompted about the security, click Yes to continue
  23. On the Networking Tab, uncheck Everything except Internet Protocol Version 4
  24. Press OK.
    Win8L2TP10
  25. To connect to the VPN, click the Network icon in the System Tray, and then click on Private Internet Access L2TP and Click Connect, then enter your Generated Username and password
    If you have not generated this yet, please follow the steps here: Generating a Password for PPTP/L2TP/SOCKS
    Win8L2TP11
    Win8L2TP12

EASY Setup Guides for Alternate Configurations (Advanced):

PPTP/L2TP/SOCKS Security

The PPTP/L2TP/SOCKS5 protocols are provided for devices lacking compatibility with the Private Internet Access application or OpenVPN protocol. PPTP/L2TP/SOCKS5 should be used for masking one's IP address, censorship circumvention, and geolocation.

If you need encryption, please use the Private Internet Application or OpenVPN protocol with our service.

    Although quite different from a VPN, we provide a SOCKS5 Proxy with all accounts in the event users require this feature.

    SOCKS5 Proxy Usage Guides
    proxy-nl.privateinternetaccess.com port 1080
    Enable port forwarding in the application by entering the Advanced area, enabling port forwarding and selecting one of the following gateways:

    CA Toronto
    Ca Montreal
    Netherlands
    Sweden
    Switzerland
    France
    Germany
    Romania
    Israel

    After enabling port forwarding and re-connecting to one of the above gateways, please hover your mouse over the System Tray or Menu Bar icon to reveal the tooltip which will display the port number. You can then enter this port into your software.

    Port Forwarding reduces privacy. For maximum privacy, please keep port forwarding disabled.
IPv6 leak protection disables IPv6 traffic while on the VPN. This ensures that no IPv6 traffic leaks out over your normal internet connection when you are connected to the VPN. This includes 6to4 and Teredo tunneled IPv6 traffic.
    The dns leak protection feature activates VPN dns leak protection. This ensures that DNS requests are routed through the VPN. This enables the greatest level of privacy and security but may cause connectivity issues in non-standard network configurations.

    This can be enabled and disabled in the Windows application, while it is enabled by default on our macOS application.

    We use our own private DNS servers for your DNS queries while on the VPN. After connecting we set your operating system's DNS servers to 209.222.18.222 and 209.222.18.218. When using a DNS Leak testing site you should expect to see your DNS requests originate from the IP of the VPN gateway you are connected to.

    If you change your DNS servers manually or if for some other reason they are changed this does not necessarily mean your DNS is leaking. Even if you use different DNS servers the queries will still be routed through the VPN connection and will be anonymous.
    The internet kill switch activates VPN disconnect protection. If you disconnect from the VPN, your internet access will stop working. It will reactivate normal internet access when you deactivate the kill switch mode or exit the application.

    Users who may be connected to two connections simultaneously (ex.: wired and wireless) should not use this feature, as it will only stop 1 active connection type.


  • United States (US VPN)
    us-california.privateinternetaccess.com
    us-east.privateinternetaccess.com
    us-midwest.privateinternetaccess.com
    us-chicago.privateinternetaccess.com
    us-texas.privateinternetaccess.com
    us-florida.privateinternetaccess.com
    us-seattle.privateinternetaccess.com
    us-west.privateinternetaccess.com
    us-siliconvalley.privateinternetaccess.com
    us-newyorkcity.privateinternetaccess.com

  • United Kingdom (GB VPN)
    uk-london.privateinternetaccess.com
    uk-southampton.privateinternetaccess.com

  • Canada (CA VPN)
    ca-toronto.privateinternetaccess.com
    ca.privateinternetaccess.com

  • Australia (AU VPN)
    aus.privateinternetaccess.com
    aus-melbourne.privateinternetaccess.com

  • New Zealand (NZ VPN)
    nz.privateinternetaccess.com

  • Netherlands (NL VPN)
    nl.privateinternetaccess.com

  • Sweden (SE VPN)
    sweden.privateinternetaccess.com

  • Norway (NO VPN)
    no.privateinternetaccess.com

  • Denmark (DK VPN)
    denmark.privateinternetaccess.com

  • Finland (FI VPN)
    fi.privateinternetaccess.com

  • Switzerland (CH VPN)
    swiss.privateinternetaccess.com

  • France (FR VPN)
    france.privateinternetaccess.com

  • Germany (DE VPN)
    germany.privateinternetaccess.com

  • Ireland (IE VPN)
    ireland.privateinternetaccess.com

  • Italy (IT VPN)
    italy.privateinternetaccess.com

  • Romania (RO VPN)
    ro.privateinternetaccess.com

  • Turkey (TR VPN)
    turkey.privateinternetaccess.com

  • South Korea (KR VPN)
    kr.privateinternetaccess.com

  • Hong Kong (HK VPN)
    hk.privateinternetaccess.com

  • Singapore (SG VPN)
    sg.privateinternetaccess.com

  • Japan (JP VPN)
    japan.privateinternetaccess.com

  • Israel (IL VPN)
    israel.privateinternetaccess.com

  • Mexico (MX VPN)
    mexico.privateinternetaccess.com

  • Brazil (BR VPN)
    brazil.privateinternetaccess.com

  • India (IN VPN)
    in.privateinternetaccess.com