Skip to main content

OpenVPN basics

How to use an OpenVPN .ovpn config file

An .ovpn file is a portable OpenVPN connection profile. It tells your VPN client which server to contact, which protocol and port to use, which certificates or keys are required, and which connection options should be applied after the tunnel starts.

Use this page when you downloaded an OpenVPN profile from PublicVPNList or another provider and need a safe, practical workflow for importing, testing and removing it later.

Laptop displaying configuration code for importing and using an OVPN file

Article snapshot

10 min readEstimated reading time
2026-10-07Last reviewed
10 minLive server refresh interval
Technical check, not a privacy guarantee. PublicVPNList checks reachability, speed, latency and config availability. It does not verify the VPN operator, logging policy, jurisdiction or long-term privacy guarantees.

Quick answer

1 Pick a live server

Choose a recently checked OpenVPN endpoint with measured speed, latency and a working download action.

2 Download the profile

Use the server row or details page to download the short-lived .ovpn file.

3 Import into a client

Open the profile in OpenVPN Connect, Tunnelblick, NetworkManager, OpenVPN GUI or another compatible client.

4 Connect and verify

Start the VPN tunnel, check your visible IP, then run DNS and WebRTC leak checks before using the route.

Advertisement

On this page

An import-to-test workflow with clear stopping points

Before importing, open the file as text and use the config validator to check its structure. An HTML error page saved with an .ovpn extension is not a profile. Keep the original file unchanged so you can distinguish an import failure from a later connection failure.

Use the file-import option in your client. On iPhone and iPad, follow the iOS import steps; on a computer, use the Windows or Linux instructions. The OpenVPN Connect import documentation describes its supported import flows.

Treat each stage separately: an accepted file proves only that the client parsed it; a connected status proves a tunnel was established; a changed public IP and a successful HTTPS request test traffic through that tunnel. Record the result at each stage. If import fails, use the import troubleshooting guide; if connection succeeds but browsing fails, use the DNS and route checklist.

After disconnecting, verify that ordinary internet access has returned. Delete the test profile from the client when finished. Do not share an unredacted profile or client log: it may contain private keys, credentials and network details.

Before you import the file

Start with the live status of the endpoint. A public OpenVPN profile can become stale quickly because the server is operated by a third party, not by PublicVPNList. Prefer rows that show a recent check, non-zero measured speed, acceptable latency and a protocol/port that your network allows.

If your network blocks UDP or unknown ports, start with TCP 443 because it often passes through restrictive firewalls more reliably. If you only need throughput on an open network, UDP can be faster because it has less transport overhead.

Keep the downloaded file in a temporary folder. Public VPN profiles should not become permanent trusted profiles unless you know the operator and understand the configuration.

How the import process works

Most OpenVPN clients have an import or profile screen. You choose the .ovpn file, confirm the profile name, then the client reads the remote, proto, port, certificate and route options. Some profiles embed certificates directly in the file; others reference external certificate files.

PublicVPNList downloads are designed as single profile files where possible. If a client says that a certificate is missing, the profile may be incomplete or the source server may require files that were not included by the original publisher.

After import, the profile may ask for a username or password. Many public OpenVPN configs are anonymous, but some source feeds include credentials in the profile or require credentials that are no longer valid. Do not enter personal account passwords into an unknown public VPN profile.

Advertisement

What to check after connecting

A successful OpenVPN connection is not the same as a privacy guarantee. First confirm that the client status says connected. Then open an IP check page and verify that the visible public IP changed. After that, run a DNS leak check and a WebRTC leak check in the browser you plan to use.

If your IP changes but DNS still points to your ISP, the tunnel may not be handling DNS correctly. If WebRTC exposes local information, adjust browser settings or use a browser profile with WebRTC restrictions.

For public endpoints, repeat these checks whenever you switch servers. Two profiles from the same country can behave differently because they may be operated by different networks.

How to disconnect and clean up

Disconnect from the OpenVPN client before deleting the profile. Then remove the imported profile from the client list so you do not accidentally reconnect later. On Windows and macOS, also check whether the client left an adapter or DNS setting active after disconnect.

If internet access stops after disconnecting, restart the OpenVPN client, disable and enable the network adapter, or reboot. Stuck routes are uncommon but can happen when a profile terminates abruptly.

Quick .ovpn usage checklist

  • Choose a fresh, measured server rather than an old profile.
  • Import the file only into a trusted OpenVPN client.
  • Check the visible IP immediately after connecting.
  • Run DNS and WebRTC checks before logging into important sites.
  • Delete public profiles you no longer use.

More OpenVPN and VPN testing pages

Advertisement

Frequently asked questions

Can I double-click an .ovpn file?
Sometimes. If an OpenVPN client is registered for the file type, double-clicking can open the import flow. If not, use the client import button.
Does an .ovpn file include the VPN app?
No. It is only a connection profile. You still need OpenVPN Connect or another compatible client.
Should I keep public .ovpn files permanently?
Usually no. Public endpoints change often, so keep only profiles you actively test and remove stale ones.