Yesterday, the first wave of Copilot Plus PCs started rolling out to consumers. We got our hands on the 7th-gen Surface Laptop, one of the star machines of the new Copilot Plus PC program. We’ve been testing it out over the past 24 hours, and we have…some thoughts. Those will come soon enough, but one thing we found was a pretty big deal, and we don’t see it being talked about enough.
The big deal is that most VPN apps won’t work on Copilot Plus PCs (or any Windows on Arm machine). If the VPN app is designed for x86/x64 machines, the installation simply fails. There is no way to install the VPN app and then use Windows’ Prism emulator to run it.
To be clear, this has been a problem with Windows on Arm machines for years. However, we really thought it would have been addressed with this new rollout, given how much weight Microsoft, Qualcomm, and partner OEMs are throwing behind it. But nope, any VPN app, no matter how popular, will not work at all unless it has a native Arm build.
And, to prove we don’t have a faulty machine, here’s a successful install of the Surfshark VPN, which does offer an Arm version:
C. Scott Brown / Android Authority
Workarounds for this Copilot Plus PC VPN problem
Until Microsoft figures out how to allow x86/x64 VPN apps to operate in the Prism emulator, you’re going to need to work around this problem. One workaround is fairly straightforward, which is to use browser extensions. If your VPN provider offers one of these, it will work just fine on Windows on Arm. Of course, the downside here is that it will only protect your browsing. Once you exit the browser to run a program or do something at the system level, your internet traffic will not be protected.
Another workaround is to use Windows’ built-in VPN system. This requires you to get credentials from your VPN provider, enter them into Windows, and then use Windows’ system instead of the VPN app. The issue here is that not all VPNs will make it easy to find this info, and it is not as user-friendly, especially for folks who are used to the “set it and forget it” system of simply launching an app from their desktop.
Finally, the most cumbersome (but wide-reaching) workaround is to use a VPN on your entire network. There are plenty of tutorials online for this, but it will probably be tricky for the average person to execute and, once again, not as simple as just launching an app.
Hopefully, we’ll see two things happen over the coming months: Microsoft will actually address this problem within Windows on Arm, and VPN providers will put the work into building Arm versions of their apps.
Update from Private Internet Access (PIA)
We received a statement from Private Internet Access (PIA) regarding its plans to launch an Arm version of its app. Here’s what Himmat Bains, PIA’s Head of Product, had to say:
“PIA has an Arm-native build ready and waiting. We’ve tested the app on our test machines and they are good to go — we’re just waiting on Microsoft to provide the driver signing certificate. We’ve been waiting for Microsoft’s certificate for a few weeks. Once we have it, we can move to a Beta version.”
Update from ExpressVPN
We also reached out to ExpressVPN for a statement. Here is a portion of what Sam Bultez, ExpressVPN’s Head of Product, had to say:
“We have a build for Windows Arm PCs in the pipeline. We’re really excited about the new Arm chips’ phenomenal performance and battery life, and in fact, we worked with Microsoft to get test devices so we could kick off our build and associated testing. This functionality will be ready for our users later this year when we are satisfied it meets our exacting standards.”
We also reached out to Nord but haven’t heard back yet.