How to use a VPN on school WiFi
Most guides on this topic are written by people who've never sat on a school network. This one is practical: what to look for, how to actually set it up, how to confirm it's working, and what to do when it breaks.
Choosing one that'll actually work
The single biggest mistake is picking a VPN by brand recognition. On a home network, any reputable VPN is fine. On a filtered school network, fame is a liability — the better known a provider is, the more certain it is to already be on the blocklist your school subscribes to. We covered exactly how that detection works here.
What to look for instead:
- Obfuscated or camouflaged traffic. Look for Reality, VLESS, V2Ray, Shadowsocks, or a provider's "stealth mode". These make traffic resemble ordinary HTTPS instead of announcing itself as a VPN.
- Connects to an IP, not a famous domain. Domain blocklists are the cheapest thing a filter does. A connection to a raw address sidesteps that entire layer.
- A nearby server. Distance is latency. If you're in Australia and your traffic detours through Los Angeles, video will stutter and pages will feel sluggish.
- Someone who'll rotate you. Servers do eventually get blocked. What matters is whether you can get a fresh one the same day or have to wait for a support ticket.
- No app-store dependency. Some school-managed devices block installs. A config link you paste into an existing app is more flexible than a proprietary app.
Rule of thumb: if you've seen it advertised on YouTube, the filter vendor has seen it too.
Your own phone vs a school device
This distinction matters more than which VPN you pick, and most guides skip it entirely.
Your own phone or laptop, on the school's WiFi
This is the straightforward case and what most people actually want. You control the device. Nothing is monitoring it locally. A VPN encrypts your traffic before it hits the school network, so the filter sees an encrypted connection and not much else. Everything below applies cleanly.
A school-issued laptop or Chromebook
Different situation, and worth being blunt about. Managed devices frequently have monitoring software installed at the operating-system level. That software can see activity on the device, before it's ever encrypted and sent anywhere. A VPN cannot hide something that's being observed before the VPN is involved.
Many managed Chromebooks also block installing anything at all, which means no VPN can run regardless. Full detail on Chromebooks here. The practical answer for most people is to use their own phone on the school WiFi.
Setting it up
Modern VPNs of this type don't use a proprietary app. You get a configuration link and paste it into a free, open-source client. The process is nearly identical everywhere.
iPhone and iPad
- Install Hiddify from the App Store. Free, no account.
- Copy your configuration link — it starts with
vless://. - Open Hiddify, tap + in the corner, choose Add from clipboard.
- Tap the power button and accept the one-time iOS VPN permission prompt.
Android
- Install Hiddify from the Play Store.
- Copy your
vless://link. - Open Hiddify → + → Add from clipboard.
- Tap connect, accept the VPN permission prompt.
Windows
- Download Hiddify for Windows and run the installer.
- Open it, choose New profile → Add from clipboard.
- Click connect, and allow the tunnel adapter if Windows asks.
One catch worth knowing: on ARM-based Windows laptops — Snapdragon machines, most new Copilot+ PCs — Hiddify has no native build yet. Use v2rayN (arm64 release) instead, import the link via Servers → Import bulk URL from clipboard, set your server active, and enable system proxy.
Mac
- Install Hiddify from the Mac App Store or the official site.
- Open it → + → Add from clipboard.
- Connect and approve the one-time VPN permission.
A link that does all of this for you
HyperTunnel is one link you paste into Hiddify. Reality protocol, Sydney servers, works on every device above. Built by people who were dealing with school filters themselves.
Checking it's really working
Don't assume a green "connected" icon means your traffic is going where you think. Verify it:
- Check your IP. Search "what is my IP". It should show your VPN server's location, not your school or home. If it still shows your real location, the tunnel isn't carrying your traffic.
- Check for DNS leaks. Run a DNS leak test. If your school's or ISP's DNS servers appear, your lookups are escaping the tunnel — the network can still see which sites you're requesting even if it can't read the contents.
- Load something normally blocked. The real-world test.
- Test on the actual school network. Working at home proves very little. Home networks don't filter.
If you're a HyperTunnel customer, our connection checker does the first and third of these automatically.
When it stops working
Things that fix the overwhelming majority of problems, in the order worth trying:
- Disconnect and reconnect. Genuinely fixes it a lot of the time.
- Check your device clock. Set it to automatic. TLS-based protocols fail if the clock is meaningfully wrong, and the error messages are unhelpful.
- Turn off HTTPS scanning in your antivirus. Bitdefender, Kaspersky, ESET and Avast intercept encrypted connections to inspect them, which breaks Reality specifically — the giveaway error is something like "received real certificate". Add an exception for the VPN client.
- Try proxy mode instead of tunnel mode. On desktop clients this sometimes gets through where full-tunnel doesn't.
- Ask for a fresh server. If it worked for weeks and then stopped abruptly, your server address was probably blocked. This is normal and a decent provider will rotate you quickly.
Common questions
Will a VPN work on school WiFi?
It depends entirely on which one. Well-known consumer VPNs are usually blocked, because their domains and server IPs sit on commercial blocklists that filter vendors update continuously. A VPN whose traffic looks like ordinary HTTPS is far harder to identify and block.
Can my school see what I'm doing on a VPN?
On your own phone, a working VPN means the network sees encrypted traffic rather than the sites you visit. On a school-managed device, monitoring software on the device itself can see activity before encryption, and a VPN doesn't change that.
Is using a VPN at school illegal?
Using a VPN is legal in Australia, the US, the UK and most countries. But it commonly breaches your school's acceptable-use policy, which can carry consequences from the school even though it isn't against the law. Worth reading your own policy rather than guessing.
Why did my VPN suddenly stop working?
Usually the administrator blocked the address you were connecting to. A provider who'll rotate you to a fresh server address can normally restore access the same day.
Will it slow down my connection?
Some, always — your traffic is taking a detour and being encrypted. With a nearby server the difference is usually small enough not to notice. With a server on another continent it's very noticeable.