Install a VPN on a Fire TV Stick in 2026: Fire OS and Vega OS, step by step

As of 7 October 2026, installing a VPN on a Fire TV Stick follows the same pattern for every major provider. You install the app from the Amazon Appstore, sign in, accept the first-connection prompts and connect to a server in the country whose catalog you want. What changes is the system inside your stick, Fire OS or Vega OS, and how each provider signs you in.

This guide covers both systems and the seven major VPN providers. If you have not chosen a VPN yet, ExpressVPN leads our Fire TV ranking with 9.1/10, ahead of Proton VPN with 9.0/10. Both list no missing Vega OS features. The best VPNs for a Fire TV Stick has all five picks.

Check your stick and your account before you start

Have your VPN account ready, then make two checks: which system your stick runs, and whether your VPN has an app for it. Fire TV Sticks run one of two systems, Fire OS or Amazon's newer Vega OS. Amazon lists three sticks on Vega OS: the Fire TV Stick 4K Select (2025), the Fire TV Stick HD (2026) and the Fire TV Stick 4K 3rd Gen (2026).

To check yours, open Settings › My Fire TV › About. If it says "Vega OS", your stick runs Vega OS. Amazon's specifications list Vega OS 1.1 and 2.0 and Fire OS 7 and 8, so a version starting with 1 or 2, such as OS 1.1, is Vega OS. Guides word this screen differently, so go by the first number.

Each provider sets a minimum, and on a Vega OS stick you also need a Vega OS app:

Source: provider Fire TV help pages and Amazon Appstore listings. Checked October 2026.

On a Vega OS stick, also check the "Works With" section on the app's Appstore page, which Amazon says confirms the models an app runs on.

VPNs ranked for Fire TV, best score first

Rank	VPN	Fire TV score	Refund	Profile
1	ExpressVPN	9.1/10Fire TV score	30-day money-back	See profile of ExpressVPN
2	Proton VPN	9.0/10Fire TV score	30-day money-back	See profile of Proton VPN
3	Surfshark	8.2/10Fire TV score	30-day money-back	See profile of Surfshark
4	NordVPN	8.0/10Fire TV score	30-day money-back	See profile of NordVPN
5	IPVanish	7.8/10Fire TV score	30-day money-back	See profile of IPVanish
6	CyberGhost	6.0/10Fire TV score	45-day money-back	See profile of CyberGhost

Not ranked (not enough data): Private Internet Access

Source: whatworks.tech scores, 19 October 2026. The score combines how well each VPN works in practice in our research, device compatibility, features, and price and refunds. How we rank.

Install the VPN app from the Amazon Appstore

Every Fire TV Stick installs VPN apps from the Amazon Appstore, and Amazon's own steps apply to any provider:

1. On the home screen, go to "Find" ("Search" on the New Fire TV Experience, the newer home screen).
2. Type your VPN's name. Proton says typing works better than voice search for its app.
3. Select the official app.
4. Check that its "Works With" section lists your stick.
5. Select "Get" or the shopping-cart icon. If a "Download" button appears next, select it.
6. When the download finishes, select "Open". CyberGhost's app then asks you to choose "Continue" on a data prompt.

You can also hold the Alexa Voice button and say the app's name. Installed apps later appear in "Your Apps and Channels" or under the Apps icon at the end of the navigation bar. NordVPN's guide starts from the Apps menu.

Sign in on the TV and accept the connection request

Each VPN provider signs you in differently on a Fire TV Stick, and most spare you from typing a password with the remote. Private Internet Access has no code sign-in: you type your username and password, on your phone after scanning a QR code if you prefer. IPVanish's QR code does not appear on Vega OS sticks, so you sign in there with your username and password.

1. Open the app and choose how to sign in: a QR code, a code, or your username and password.
2. Scan the QR code with your phone, enter the TV's code on your phone or computer, or type your username and password.
3. When a system prompt appears, after sign-in or when you first connect, select "OK" ("Continue" or "Allow" on Vega OS). NordVPN says some Fire OS prompts show a checkbox to tick first.
4. If a second prompt appears, select "OK" again. ExpressVPN, CyberGhost and Private Internet Access show two.
5. Press the app's connect button, such as Quick Connect (NordVPN), Fastest (Surfshark) or Smart Location (ExpressVPN). To watch a particular country's catalog, pick that country from the app's location list instead.

On Fire OS, the prompt is a system permission or "Connection request" dialog: select "OK". NordVPN and IPVanish say its warning about monitoring your traffic is a standard Fire OS message. NordVPN says it is safe to continue.

Source: each provider's Fire TV and Vega OS setup guides. Checked October 2026.

Pick a server in the country whose catalog you want

To watch another country's catalog, connect to a server in that country: a US server for the US Netflix catalog, a UK server for BBC iPlayer. Surfshark's Fire TV guide gives the same rule: any US location for a US service. Away from home, connect to a server in your home country to keep your usual catalog. For Prime Video, ExpressVPN's Fire TV guide says to pick your Amazon account's country, shown under Your Account › Your Content and Devices › Preferences › Country/Region.

If you travel with the stick, leave your Amazon account's country as it is. Amazon says changing it hides your Prime Video purchases and may break some apps.

The one-press button lets the app choose the server, so it may not be in the country you need. Pick the country yourself:

Source: each provider's Fire TV setup guide. Checked October 2026.

Whether the streaming app then plays depends on the VPN and the service. In our research (October 2026), the VPNs we cover score 67% to 87% with the US Netflix library, so none works every time. These scores do not separate devices, so they are not specific to Fire TV; each VPN's score for every Netflix library is in our Netflix research table.

Turn on auto-connect and a kill switch on Fire OS

Turn on auto-connect where your app offers it, so the VPN comes back on when the stick starts up. The table shows where each Fire OS app keeps the setting.

Source: each provider's Fire TV setup guide and Android TV guide where it applies. Checked October 2026.

These auto-connect settings are documented for the Fire OS apps only. A kill switch blocks internet traffic if the VPN drops. On Fire OS, only Surfshark (in its app's settings, per its Android TV guide) and IPVanish (as a separate app, covered under sideloading) document one. Proton VPN and Surfshark point Fire OS users to their Android TV guides.

Check that the VPN is working on your Fire TV

To check that a VPN is working on a Fire TV Stick, look at its status in the VPN app. You can also open an IP-check page, a site that shows the internet address websites see, such as our VPN check. IPVanish notes that Fire TV shows no VPN icon or other on-screen sign. These are the checks each provider describes:

• ExpressVPN: the app shows "Connected".
• Surfshark: its IP leak test and DNS leak test pages (DNS turns web addresses into server addresses) should show a Surfshark server IP address and one DNS server from the same location.
• CyberGhost: the main screen shows the country, server and IP address, and its Connection Checker (gear › VPN › Run test) tests the connection.
• Private Internet Access: the power button turns green. Its Android TV guide adds PIA's What's My IP Address page.
• IPVanish (Fire OS): open iplocation.com in the browser of the Downloader app (an app that downloads files on Fire TV) and check that the IP address and location match the IPVanish server.
• NordVPN and Proton VPN: their Fire TV guides give no check beyond the app's connected status. On a Fire OS stick, you can open an IP-check page in the Downloader app's browser, as IPVanish describes.

Amazon's Network Status tool under Settings › Network tests the link to the router and the internet, and some models offer "Run Speed Test". Amazon does not say whether it tests through a VPN. The streaming speed calculator shows the speed each service asks for.

Then open your streaming app and play a title. If it shows a VPN error, see the last row of the problems table below.

Setting up a VPN on a Vega OS stick

On a Vega OS stick, the Amazon Appstore is the only way to install a VPN. Go to Find or Search, select the app, check that "Works With" lists your stick, then select "Get" or "Download", and "Open". Sign in and accept the first prompt, which on Vega OS may say "Continue" or "Allow" instead of "OK". ExpressVPN and Proton VPN are the two providers that publish full Vega OS setup steps:

• ExpressVPN (its guide names the Fire TV Stick 4K Select): search for the app, then select "Download" and "Open". Sign in by QR code or "Sign in with Email". Select "Agree and continue" on the privacy notice, "Continue" on the permission request and "OK" on the connection request. Then press the power button.
• Proton VPN: install, select "Sign in", then scan the QR code or use "Trouble signing in?" for an 8-digit code at protonvpn.com/firetv. Select "Allow" on the first permission request, then "Quick connect" or, on a paid plan, a country.

NordVPN has a Vega OS app, which it says is temporarily missing some features, and it does not support Dedicated IP on Vega OS. IPVanish documents its Vega app only by its home screen: a power button, your IP address before and after connecting, and a Locations list. You must disconnect to switch location.

Surfshark has no Vega setup guide. Its Vega troubleshooting pages say to reinstall from the app store or try another server, and note that only WireGuard (the connection method, or protocol, the app uses) is supported.

Sideloading a VPN app on Fire OS

Sideloading means installing an app file from outside the Appstore, and it works only on Fire OS. You rarely need it for a VPN, because all seven major providers have an Appstore app. The main exception is IPVanish's separate Kill Switch app, which is not in any app store and installs from a link or a Downloader code. It does not support second-generation and older Fire devices.

To allow sideloading on Fire OS:

1. Open Settings › My Fire TV › About.
2. Select the device name seven times. A hidden menu, Developer Options, appears.
3. Go back and open Settings › My Fire TV › Developer Options.
4. Select "Install unknown apps" and turn it on for the app you install from, such as Downloader. Older Fire OS builds show "Apps from Unknown Sources" instead.

ExpressVPN publishes an app file for sideloading, and Private Internet Access documents installing through the Downloader app. Proton VPN needs no Downloader code, because it installs from the Amazon Appstore on Fire OS 7 or later and on Vega OS sticks.

When the VPN app will not install or connect

These are the documented reasons a VPN app will not install or connect on a Fire TV Stick, with the fix for each:

Source: provider setup and troubleshooting guides, Amazon help, Netflix help. Checked October 2026.

To force-close an app on Fire OS, open Settings › Applications › Manage Installed Applications, select the app, then choose Force Stop. If no VPN is on and an app still says you use one, see why apps think you are on a VPN.

Where to go next

• Best VPNs for a Fire TV Stick: our picks, research scores and free plans.
• Best VPN for Google TV and Android TV: our ranking of the same providers' TV apps on Android TV.
• Prime Video with a VPN: which VPNs work with it, and Amazon's own rules.
• How much speed streaming needs: the speed each service asks for in HD and 4K, with the VPN on.
• VPN for streaming and TV: what a VPN changes for streaming, and where each topic lives.