How to Install a VPN on Steam Deck (Desktop Mode) Without Losing It on Update
Three ways to run a VPN on Steam Deck: the Flatpak app from Discover, a WireGuard import into NetworkManager, or a router. Includes the update gotcha.
The short answer
- 1.SteamOS updates wipe system packages, so install VPN apps as Flatpaks from Discover or use NetworkManager's built-in WireGuard support.
- 2.Importing a WireGuard .conf into the network settings is the most update-proof method and shows up in Game Mode too.
- 3.If your provider has no Linux app, a travel router covers the Deck with zero setup on the device.
Method 1: Import a WireGuard config (most reliable)
SteamOS desktop mode uses KDE Plasma with NetworkManager, which understands WireGuard natively.
- 01Hold the power button and choose Switch to Desktop.
- 02Download a WireGuard .conf from your VPN provider's manual setup page.
- 03Open System Settings → Connections → + → Import VPN connection, and pick the file.
- 04Toggle the connection on from the network icon in the taskbar.
If the import button complains, you can do the same from the Konsole terminal:
nmcli connection import type wireguard file ~/Downloads/deck.conf
nmcli connection up deckMethod 2: The provider's Linux app as a Flatpak
Open the Discover store and search your provider. Flatpak apps live in your home folder, so updates leave them alone. Avoid instructions that tell you to run 'sudo steamos-readonly disable' and install with pacman — that works until the next update removes it.
Method 3: Put the VPN on a router
A GL.iNet or OpenWrt router running WireGuard covers the Deck, a Switch and a TV at once and needs nothing on the Deck itself.
Questions people also ask
+Will a VPN lower my ping on Steam Deck?
Rarely. A VPN adds a hop. It only helps if your ISP sends traffic to the game server on a bad route.
+Do I need a password for sudo?
Only for the pacman method, which we don't recommend. The two methods above don't need root.
Provider features, prices and streaming compatibility change often. We don't run lab benchmarks; confirm details on the provider's own site before buying. Read our responsible-use stance.
Keep reading
Best VPN for a GL.iNet Travel Router (WireGuard): What Actually Matters
How to choose a VPN for a GL.iNet travel router: WireGuard config export, server choice, key rotation and the features that matter more than brand.
Fix Packet Loss in Apex Legends: When a VPN Helps and When It Doesn't
Diagnose packet loss in Apex Legends step by step: in-game netgraph, wired connection, router checks and an honest VPN test.