How to install VPN on Steam Deck: Step-by-step guide

The Steam Deck is a fantastic piece of portable gaming hardware, but like any internet-connected device, it benefits from the security and flexibility of a VPN. Installing a VPN is key whether you want to protect your data on public Wi-Fi, access geo-restricted game servers, or bypass ISP throttling. 

However, the Steam Deck’s Linux-based SteamOS doesn’t support native VPN apps like Windows or mobile devices. But don’t worry—it’s possible! This guide will walk you through the best methods for installing a VPN on a Steam Deck.

Why use a VPN on your Steam Deck?

Before diving into the setup, let’s quickly cover why you’d want a VPN on your Steam Deck:

The challenge: SteamOS and VPN apps

SteamOS is based on Arch Linux, a powerful but less mainstream operating system than Windows. Most major VPN providers don’t offer dedicated, easy-to-install apps for Arch Linux. Instead, we need to manually configure the VPN, primarily through the Steam Deck’s Desktop Mode.

Method 1: Desktop Mode setup (Recommended)

This is the most common and flexible method. It involves configuring the VPN connection by switching to Steam Deck’s Linux desktop environment.

Step 1: Switch to Desktop Mode

1. Press the STEAM button.
2. Go to Power.
3. Select Switch to Desktop.

Step 2: Set a Sudo Password (If you haven’t already) 

You’ll need administrator privileges to install the software.

1. Open the Application Menu (bottom-left icon).
2. Go to System > Konsole (this opens a terminal window).
3. Type passwd and press Enter.
4. You’ll be prompted to enter a new password and then confirm it. Choose something secure you’ll remember. Note: You won’t see characters appear as you type the password.

Step 3: Install VPN Network Manager Packages 

SteamOS uses NetworkManager to handle connections. We need to add support for VPN protocols like OpenVPN or WireGuard.

1. Open Konsole again if you closed it.
2. Temporarily disable the read-only filesystem: Type sudo steamos-readonly disable and press Enter. Enter the password you just set when prompted. Warning: Be careful when the filesystem is writable.
3. Initialize pacman keys (package manager):
   • Type sudo pacman-key –init and press Enter.
   • Type sudo pacman-key –populate and press Enter.
4. Update package lists and install OpenVPN support: Type sudo pacman -Syu networkmanager-openvpn and press Enter. Confirm any prompts by typing ‘Y’ and pressing Enter. (If you prefer WireGuard and your provider supports it, you might install wireguard-tools instead or additionally).
5. Re-enable the read-only filesystem: Type sudo steamos-readonly enable and press Enter.
6. You may need to restart your Steam Deck to apply the changes fully.

Step 4: Import VPN Configuration File

Most VPN providers offer downloadable configuration files (usually .ovpn for OpenVPN or .conf for WireGuard).

1. Use the Desktop Mode browser to download the configuration file(s) for your desired server location(s) from your VPN provider’s website. Save them somewhere accessible, like the Downloads folder.
2. Click the Wi-Fi icon in the bottom-right system tray.
3. Click the Settings cog icon (Configure network connections).
4. Click the + button (Add new connection).
5. Scroll down and select Import VPN connection…
6. Click Create.
7. Navigate to where you saved the .ovpn or .conf file and select it. Click Open.
8. The VPN configuration details should load. You’ll likely need to enter your VPN service username and password. For convenience, click the icon next to the password field and select “Store password for this user only” or “Store password for all users.”
9. Click Apply or Save.

Step 5: Connect to the VPN

1. Click the Wi-Fi icon in the system tray again.
2. You should now see your imported VPN connection listed under the “VPN Connections” section.
3. Click the toggle switch next to the VPN connection name to connect. When connected, a lock icon or similar indicator should appear on the network icon.

You can now switch back to Gaming Mode, and the VPN connection established in Desktop Mode should remain active.

Method 2: Using TunnelDeck (Decky Loader Plugin)

TunnelDeck is a great option for easier VPN management, especially switching connections without going to Desktop Mode [5, 10]. It requires installing Decky Loader first.

1. Install Decky Loader: Follow the instructions on the official Decky Loader GitHub page. This usually involves running a command in the Desktop Mode Konsole.
2. Install TunnelDeck: Once Decky Loader is installed, switch back to Gaming Mode. Press the Quick Access Menu button (…) > navigate to the plug icon (Decky) > go to the store icon > search for and install TunnelDeck.
3. Configure TunnelDeck:
   • You’ll likely still need the networkmanager-openvpn package installed via Method 1, Step 3.
   • TunnelDeck allows you to import .ovpn files directly from its gaming mode interface. Follow the plugin’s prompts to add your VPN configurations and credentials.
   • Toggle VPN connections on/off directly from the Decky menu.

Method 3: VPN on Your Router (Alternative)

If configuring the Deck seems too complex, or you want to protect multiple devices, setting up a VPN on your home router is an option [7].

1. Check if your router supports VPN client functionality.
2. Follow your VPN provider’s and router manufacturer’s instructions to configure the VPN on the router.
3. Connect your Steam Deck to your router’s Wi-Fi network. All traffic from the Deck (and other connected devices) will automatically go through the VPN.

It’s not the perfect solution, though. Here are some pros and cons:

• Pros: It protects all devices, and no Steam Deck setup is needed. 
• Cons: It requires a VPN-compatible router, can be complex, and affects all devices on the network.

Recommended VPNs for Steam Deck

While many VPNs can be used using the manual methods above, some perform better or offer easier access to the configuration files needed for Steam Deck.

1. NordVPN: A top choice known for excellent speeds (great for gaming) and strong security. While it doesn’t have a native Linux app suitable for Steam Deck [1, 4], it provides easy access to .ovpn and WireGuard (.conf) files needed for manual setup via Network Manager or TunnelDeck. Its extensive server network is a plus.
2. Surfshark: Offers great value with unlimited simultaneous connections, perfect if you have many devices. It provides .ovpn and WireGuard configuration files, making setup on the Steam Deck straightforward using the methods described above.
3. ExpressVPN: Known for its user-friendliness and reliable performance. ExpressVPN provides .ovpn files for manual configuration. It also offers excellent router support [7], making Method 3 easier if you have a compatible router.

For a full list of providers, check out our post on the Best VPNs for Steam Deck.

Key consideration: Always check if your chosen VPN provider offers easily downloadable OpenVPN (.ovpn) or WireGuard (.conf) configuration files, as these are essential for Steam Deck setup.

Troubleshooting common issues

• Connection Fails: Double-check your username/password in the Network Manager settings. Ensure the .ovpn file isn’t corrupted. Try a different server configuration file.
• Slow Speeds: Try connecting to a server geographically closer to you. Switch between OpenVPN UDP and TCP protocols if available in your config file (UDP is usually faster). Try WireGuard if available.
• TunnelDeck Issues: Ensure Decky Loader and TunnelDeck are up to date. Verify networkmanager-openvpn is installed correctly.
• Read-Only Errors: Make sure you correctly disabled (sudo steamos-readonly disable) and re-enabled (sudo steamos-readonly enable) the filesystem when installing packages.

Getting a VPN running on your Steam Deck requires a few extra steps compared to other platforms, primarily involving Desktop Mode configuration. By installing the necessary Network Manager packages and importing your provider’s configuration files or using the convenient TunnelDeck plugin, you can secure your connection and unlock the full potential of your portable powerhouse.

While it takes some initial effort, the added security and flexibility are well worth it for gaming on the go. Choosing a provider like NordVPN, Surfshark, or ExpressVPN, which readily supplies the needed configuration files, will make the process smoother. Happy (and secure) gaming!