---
title: Settings
canonical: https://openvpn.net/connect-docs/app-settings-windows/
product: OpenVPN Connect Docs
---

# Settings

You can customize your OpenVPN Connect app using the attributes below.

To edit these settings:

1. Launch the app.
2. Select the **menu icon**.
3. Select **Settings**.

## Application Settings

| Attribute Name | Format/Values | Description |
| --- | --- | --- |
| **Device ID** |  | Displays the unique identifier of your device where the app is installed with the option to copy it to your clipboard. Also called the client UUID and can be used as part of a device enforcement policy. It's generated at installation and can't be changed. |
| **VPN Protocol** | Adaptive TCP UDP | Force a particular transport protocol (UDP or TCP) or set to adaptive, which individually chooses the protocol from the remote lines in the profile. |
| **Connection Timeout** | 10 sec 30 sec 1 min 2 min Continuous Retry | How long the app tries to connect to a VPN server before giving up. If set to **Continuous Retry**, the app retries indefinitely. |
| **Launch Options** | Start app Connect latest Restore connection None | App behavior configuration after the device reboots: **Start app:** Launches the app after a reboot without connecting. **Connect latest:** Launches the app after a reboot and tries to connect to the latest connected profile in the list. **Restore connection:** Launches the app after a reboot and tries to reconnect to the profile that was connected before the app shut down. **None:** No actions taken after a reboot. |
| **Seamless Tunnel** | On/Off | Block the internet while the VPN is paused or reconnecting. |
| **Minimize on launch** | On/Off | When the application is launched from a shortcut or after an OS reboot, the window is minimized afterward. |
| **Captive Portal Detection** | On/Off | The app tries to detect a network with a captive portal during either a network change or the app launch. |
| **Software Update** | Daily Weekly Monthly Never | Set how often the app should check for a new version. |
| **Theme** | System Light Dark | Set the application's color theme. |
| **Show Confirmation Dialog on Disconnect** | On/Off | Enable/disable the appearance of confirmation dialogs on disconnect. |

## Advanced Settings

| Attribute Name | Format/Values | Description |
| --- | --- | --- |
| **Security Level** | Preferred (Recommended) Legacy Insecure (Not Recommended) | Set the security settings for the VPN connection: **Preferred:** Uses modern, recommended security settings for today's systems and servers. This level disables compression and only supports secure AEAD ciphers (such as AES-GCM and ChaCha20-Poly1305). **Legacy:** (Default) Use the currently acceptable cryptographic algorithms that adhere to current security standards. This setting allows some older, yet still secure algorithms in widespread use, ensuring compatibility with a wide range of servers. This setting allows downlink compression, utilizes the AES-CBC algorithm, and requires a minimum TLS version 1.2. **Insecure:** Use algorithms and other features no longer considered secure. This should only be used as a last resort; we recommend upgrading the OpenVPN server to use more secure algorithms. This setting enables legacy ciphers and algorithms (DES, 3DES, MD5, BF-CBC, and RC4), weak certificate signatures, TLS 1.0, 1024-bit RSA certificates, and full compression. > **Important** > > To enable DCO, you must select the preferred security level. |
| **Enforce TLS 1.3** | On/Off | Force the VPN connection to use TLS 1.3 as the minimum version for communicating with the server. |
| **Enable DCO** | On/Off | Enable using the data channel offload (DCO) driver to increase connection speeds. Refer to [OpenVPN Data Channel Offload (DCO)](https://openvpn.net/connect-docs/openvpn-dco.md) for more details. > **Note** > > This requires DCO enabled on the server as well. |
| **Block IPv6** | Yes No | Whether to block IPv6 traffic. |
| **DNS Fallback** | On/Off | If enabled, use Google DNS servers (8.8.8.8 and 8.8.4.4) as a fallback for connections that route all internet traffic through the VPN tunnel but don't define any VPN DNS servers. |
| **Allow using local DNS resolvers** | On/Off | Enable sending DNS requests to local DNS resolvers, 127.0.0.1 and ::1. |

---

Prev: [How to Install OpenVPN Connect on Windows](https://openvpn.net/connect-docs/installation-guide-windows.md)
Next: [OpenVPN DCO](https://openvpn.net/connect-docs/openvpn-dco.md)
Index: https://openvpn.net/connect-docs/llms.txt