--- title: "WrapVPN on Windows: the one permission it asks for, and why" description: "Set up WrapVPN on Windows 10 or 11: why it needs one administrator approval, how Windows keeps traffic inside the VPN, and how to buy a plan on your phone." section: "Guides" group: "Doing" source: https://wrapvpn.com/en/guides/how-to-set-up-a-vpn-on-windows last_reviewed: 2026-11-01 --- # WrapVPN on Windows: the one permission it asks for, and why You install WrapVPN, sign in, and before you've connected even once, Windows asks whether you'll let it make changes to your PC. It's fair to wonder why a VPN needs an administrator when your music player never did. TL;DR: Routing a whole PC's traffic is a system job, so WrapVPN installs a small background component that needs one administrator approval after your first sign-in. While you're connected, Windows blocks anything that would go around the VPN. The Windows app doesn't sell plans: buy one on your phone and sign in on the PC with the same account. ## Why a VPN needs more than an ordinary app Most apps live entirely inside their own window. A VPN can't. To protect the whole PC, it has to add a network connection to Windows and have every app's traffic sent through it, and those are system-wide changes that Windows rightly keeps behind an administrator's approval. So WrapVPN splits the job in two. The window you click on is an ordinary app. The part that runs the tunnel is a small background component with the rights to change where traffic goes, and installing that part is what Windows asks you to approve. Think of a block of flats. You can rearrange your own flat however you like, but fitting a new front door to the building needs the building manager's say-so. You ask once, and after that you come and go with your own key. You'll see the request once, after your first sign-in. Connecting, disconnecting and changing location never need it, although Windows may ask again after an app update replaces that background component. On a PC run by an employer or a school, ask whoever manages it, and follow their rules on VPNs. ## Life of a request while you're connected Here's the worked example. It's a Wednesday, you're working from the kitchen table in Berlin, and you've connected to Frankfurt, the nearby location with the lowest speed figure. You open your browser and load a news page. That request leaves the browser, enters the tunnel, travels encrypted to our Frankfurt server, and carries on from there to the website. The site sees the Frankfurt server's address, which everyone using that server shares, rather than your own. Now suppose another program on the PC tries to send something the ordinary way, around the tunnel. While WrapVPN is connected, Windows blocks it. That's not a setting you have to remember to turn on: it's part of how WrapVPN connects on Windows, so nothing slips out unprotected while the tunnel is up. ## The printer problem, and what Pause is for At eleven you need to print a boarding pass. The printer is on your home network, a few metres away, but reaching it would mean going around the VPN, so Windows blocks that too. Printers, network drives and other devices on your Wi-Fi may be unreachable while you're connected. That's the honest cost of keeping everything inside the tunnel. When you need a local device, pause protection: WrapVPN stops for a few minutes, the printer reappears, and protection resumes by itself. Or disconnect, print, and connect again. The same rule explains hotel and café Wi-Fi. A network's sign-in page is also traffic outside the tunnel, so complete the page first and connect afterwards, not the other way round. ## Buying a plan when your computer is a PC The Windows app doesn't sell plans. Subscriptions are bought on another device: through the App Store on an iPhone, iPad or Mac, or through Google Play on Android. The weekly plan is $1.99 and the monthly plan $3.99, both renew until you cancel in that store's subscription settings, and there's no annual plan. Then sign in on the PC with the same Apple or Google account, and the plan applies there as well. No plan has a device limit. Without a plan, the account's three free one-hour sessions a week work on the PC too, shared with your other devices. ## Two settings to check: Clean Web and Auto-Connect Clean Web, our ad and tracker blocker, stops the PC looking up the addresses of known advertising and tracking domains, so those connections never start. Check its switch after installing so you know which way it's set. A browser using its own secure DNS goes around it, and it isn't antivirus. Auto-Connect on Windows connects as soon as the app opens. It's off until you turn it on, and it's handy if you'd rather not start each working day by remembering to connect. ## Install, approve once, connect Check that the PC is a 64-bit Intel or AMD machine running Windows 10 (version 2004 or later) or Windows 11, install WrapVPN from the Microsoft Store, and sign in with the account from your phone. Approve the one Windows request, connect, and keep Pause in mind for the next boarding pass. ## Setup 1. **Check your PC** — WrapVPN for Windows needs a 64-bit Intel or AMD PC with Windows 10 (version 2004 or later) or Windows 11. 2. **Install WrapVPN from the Microsoft Store** — Search the Microsoft Store for WrapVPN and install it like any other Store app. 3. **Sign in with the account from your phone** — Choose Apple or Google, matching your phone, so the PC picks up the plan you bought there. 4. **Approve the administrator request** — After your first sign-in, WrapVPN asks to install its background component. Accept the Windows prompt; on a standard account, an administrator enters their details. 5. **Pick a location and connect** — Choose a place with a low speed figure, usually the one nearest you, and connect. No further Windows prompt appears. 6. **Check Clean Web** — Look at the Clean Web switch and set it the way you want before you start your day. ## Questions ### Why does WrapVPN need administrator permission on Windows? Sending a whole PC's traffic through a VPN is a system-wide change, so WrapVPN installs a small background component to do it, and Windows requires an administrator's approval for that. You approve it once after your first sign-in, and Windows may ask again after an app update. ### Can I buy a plan in the Windows app? No. Buy the weekly or monthly plan on an iPhone, iPad, Mac or Android phone, through the App Store or Google Play. Then sign in on the PC with the same Apple or Google account and the plan applies. ### Why can't I reach my printer while WrapVPN is connected? While you're connected, Windows blocks traffic that would bypass the VPN, and traffic to devices on your local network counts. Pause protection or disconnect while you print, and protection resumes when the pause ends. ### Does WrapVPN run on Windows PCs with ARM processors? No. WrapVPN for Windows runs on 64-bit Intel or AMD PCs with Windows 10 (version 2004 or later) or Windows 11. On an ARM-based PC, use WrapVPN on your phone or another supported device instead. ### Why won't a hotel's Wi-Fi sign-in page load when I'm connected? The sign-in page sits outside the tunnel, and while WrapVPN is connected, Windows blocks traffic that goes around it. Disconnect, complete the sign-in page in your browser, then connect again. --- Source: https://wrapvpn.com/en/guides/how-to-set-up-a-vpn-on-windows Last reviewed: 2026-11-01