If you want your VPN to stop ordinary internet traffic when its connection drops, turn on the app’s kill switch or network lock. The setting may protect the whole device, selected apps, or only traffic routed through the VPN, depending on the provider and device.
Start by identifying the VPN app and device. Open the app’s VPN or connection settings, enable Kill Switch, Network Lock, Internet Kill Switch, or the equivalent option, then check Android’s own VPN settings if you use an Android device.
Key takeaways
- A kill switch blocks internet traffic when the VPN tunnel unexpectedly disconnects.
- System-wide protection fits privacy-sensitive use, while app-level protection keeps other apps online.
- Strict or advanced modes can block internet access even after you intentionally disconnect the VPN.
- Android has both VPN app controls and operating-system controls.
- A kill switch does not make you anonymous or prevent every app, DNS request, account, or website from identifying you.
- Before paying, record the upfront charge and renewal price shown at checkout.
What a VPN Kill Switch Does When the VPN Disconnects
A VPN normally encrypts the connection between your device and the VPN server. Websites then see the VPN server’s IP address instead of the device’s ordinary public IP address. If the VPN tunnel drops, the device could otherwise continue using its regular internet connection.
A kill switch interrupts that fallback. It blocks internet traffic while the VPN is disconnected, reconnecting, or unable to establish its route. The visible result is often a device that appears offline until the VPN reconnects.
The exact protection depends on the implementation. A system-wide kill switch blocks traffic for the entire device. An app-level kill switch affects selected applications. NordVPN, for example, documents an Internet Kill Switch for Windows and an App Kill Switch that can close selected programs such as Steam. Its Windows and Android implementations use system-wide blocking, while its iOS and macOS App Store versions use VPN bypass prevention.
Some providers use a stricter mode. ExpressVPN calls its feature Internet Kill Switch and provides an “Enable at all times” setting on supported Windows and macOS apps. Proton VPN describes a standard kill switch for accidental drops and an advanced mode that permits internet access only while connected to Proton VPN. An advanced mode can remain active after you intentionally disconnect.
A kill switch is interruption protection, not anonymity. Accounts, cookies, pixels, GPS data, and browser fingerprints can still connect activity to you. EFF explains that a commercial VPN shifts trust from your internet service provider to the VPN provider, but it does not remove the need for account security, software updates, HTTPS, strong passwords, or two-factor authentication.
Should You Turn It On For Your Device And Use?
Turn it on when preventing ordinary internet access during a VPN interruption matters more than keeping the internet available during that interruption. It fits work on public networks, privacy-sensitive browsing, or any activity where a short outage is preferable to an accidental switch to the normal connection.
Leave it off, or use a less strict app-level option, when you need local devices, casting, printers, games, calls, banking apps, or streaming services to keep working during a VPN problem. A system-wide setting can interrupt all of them. An app-level setting may protect one application while other applications continue through the ordinary connection.
The right choice also depends on the device. Android lets you combine the provider’s setting with Always-on VPN and, where available, Block connections without VPN. iPhone behavior depends more heavily on the provider app. NordVPN documents system-level blocking on iOS, Surfshark provides an iOS Kill Switch setting, ExpressVPN says its iOS Internet Kill Switch is always on, and Proton VPN places the setting under Security Options.
Before paying, confirm that the provider supports the operating system you actually use. Check whether the feature is system-wide or limited to selected apps, and whether Apple or Google billing applies to a phone purchase. Refund handling can differ by payment channel.
How To Turn On a Kill Switch on Windows, Mac, iPhone and Android
The names and locations can change with the installed app, so use the provider’s current platform-specific support page for the exact version on your device.
On Windows, open the VPN app’s settings and look for Kill Switch, Internet Kill Switch, Network Lock, or VPN settings. NordVPN lets you choose Internet Kill Switch for system-wide blocking or App Kill Switch for selected programs. ExpressVPN places the control under Profile, Settings, and Internet Kill Switch. Its standard mode works when the VPN is connected, while “Enable at all times” blocks traffic whenever the VPN is inactive. Proton VPN places Kill switch in the sidebar or Settings and offers Standard and Advanced modes. Surfshark lists the setting under Settings, VPN settings, and Kill Switch.
On macOS, the app version matters. NordVPN’s website version provides App Kill Switch for selected apps, while its Mac App Store version uses VPN bypass prevention under VPN connection settings. ExpressVPN uses Profile, Settings, and Internet Kill Switch, including the stricter “Enable at all times” option. Proton VPN places Kill switch in the Countries tab. Surfshark uses Settings, VPN Settings, and Kill Switch. Check the provider’s support page if your menu does not match these paths.
On iPhone, open the installed provider app and use its own instructions. Surfshark places Kill Switch under Settings, VPN settings, and Kill Switch. Proton VPN uses Settings, Security Options, and Kill switch. ExpressVPN describes its Internet Kill Switch as always on, with standard and advanced protection levels. NordVPN documents system-wide blocking under iOS protection and says it is enabled by default rather than exposed as a separate toggle. Proton also documents that some Apple service DNS requests can bypass its iOS kill switch, and that local-network devices may become inaccessible while it is enabled.
On Android, begin in the VPN app. NordVPN, ExpressVPN, and Surfshark provide app settings for the feature, while Proton VPN directs users to Android’s built-in VPN controls. Then open Android’s Settings, Network & internet, VPN, select the VPN profile, and open its settings. Turn on Always-on VPN where available. For a stricter block, turn on Block connections without VPN where available. Google notes that some VPN apps do not expose the Always-on option through the system interface.
Android’s menus vary by manufacturer and software version. Confirm the Android version and follow the installed provider’s instructions. If you use a Chromebook, Proton VPN documents that Android kill-switch and Always-on settings do not remain enabled after a restart, so check the settings again after rebooting.
Why Your Internet Stops and How To Restore It
When the internet stops after you enable a kill switch, the feature is usually blocking ordinary traffic because the VPN is disconnected, reconnecting, or unable to establish a secure route. An advanced or always-on mode can also block traffic after you intentionally disconnect the VPN.
Reconnect to the VPN first, then try another server if the connection does not return. If you recently changed from Wi-Fi to mobile data, or the reverse, reconnect after the network change. Weak Wi-Fi, a server timeout, firewall or antivirus interference, parental controls, router security, and DNS settings can also interrupt the tunnel.
Restart the VPN app and device if reconnecting fails. Update or reinstall the app where the provider recommends it. ExpressVPN documents restarting its service and relaunching the app on Windows. Apple recommends updating software, restarting the device, and checking whether VPN or security software is blocking connections.
After confirming whether strict or advanced protection is enabled, follow the installed provider’s current troubleshooting page. Turn off “Enable at all times” if you need ordinary internet access while intentionally disconnected, then turn it back on when the VPN is stable.
How NordVPN, Surfshark, ExpressVPN and Proton VPN Differ
The main difference is how much traffic each provider documents blocking and how much control you get over exceptions.
NordVPN fits a reader who wants several protection styles across common platforms. Windows offers system-wide and selected-app controls. Android 8.0 and later uses system-wide blocking, while iOS and the macOS App Store version use VPN bypass prevention. The tradeoff is platform variation, including no documented kill switch support on Amazon Fire TV Stick.
Surfshark fits a reader who wants a clearly documented Kill Switch setting in its Windows, macOS, Android, and iOS apps. Its Surfshark front page is the starting point for its current platform list and plans. The tradeoff is that the result still depends on the app version, operating system, and whether the setting blocks the whole device or selected traffic.
ExpressVPN fits a reader who wants a standard desktop option and a stricter “Enable at all times” mode. Its iOS Internet Kill Switch is described as always on, while Windows and macOS provide standard and advanced protection levels. Its tradeoff is that an always-on setting can make the device appear offline whenever the VPN cannot connect.
Proton VPN fits a reader who wants a free tier or a clear difference between standard and advanced kill-switch behavior. Proton documents an advanced mode that permits internet access only through Proton VPN. Its tradeoffs include local-network restrictions on iOS and macOS, some Apple DNS exceptions, and Android settings that do not persist after a Chromebook restart.
For a broader plan and device comparison, read the NordVPN vs Surfshark comparison or the ExpressVPN vs NordVPN comparison. The best conditional pick is the provider that supports your required device and offers the protection style you can live with during a connection outage.
What the VPN Plans Cost and Renew At
Prices below were checked October 28, 2026, for United States readers. Taxes may apply at checkout. Bonus months are separate from paid time, and a money-back guarantee is not a free trial because you pay first and request a refund within the applicable period.
NordVPN Basic on the two-year US plan is $94.23 for the first 27 months ($3.49 per month, including 3 bonus months) and renews at $139.08 a year, checked October 28, 2026. Its introductory price applies to the first subscription period, and the service renews automatically at the then-applicable renewal price. Read and save the final NordVPN checkout totals before paying, including the first-term charge and renewal charge.
Surfshark and NordVPN provide 30-day money-back guarantees for new subscriptions, while Proton provides a 30-day money-back guarantee for subscriptions. Surfshark excludes Apple App Store and Google Play purchases from its provider guarantee. Proton says refunds cannot currently be issued for bank-transfer or cash payments. Record the renewal amount shown at checkout before confirming payment.
How To Test the Kill Switch and Understand Its Limits
Connect the VPN, then briefly interrupt the VPN or network connection. You can change networks, disconnect the VPN, or use another controlled interruption. Ordinary internet access should stop until the VPN reconnects when system-wide or strict protection is working.
Restore the connection afterward. Check that websites load normally once the VPN reconnects, then test any activity that matters to you, such as a local printer, casting device, game, banking app, or streaming service. A successful interruption test tells you how the installed feature behaves in that situation. It does not prove that every possible app, DNS request, or network path is blocked.
App-level protection has a narrower result. If only selected apps are protected, other apps may remain connected normally during a VPN drop. Strict modes can block local-network devices, and Proton documents local-network restrictions on iOS and macOS. Streaming platforms may show their own VPN or proxy message, and a VPN does not guarantee access to a particular service.
Treat the feature as interruption protection and read the provider’s documented platform limitations. A kill switch does not repair a failed internet connection, make an unavailable VPN server connect, stop account-based tracking, or replace updates, HTTPS, strong passwords, two-factor authentication, and phishing protection.
Legal, Terms and the Best Next Guide
Use a VPN and its kill switch in line with the law where the device is used, the network owner’s rules, and the terms of the VPN, website, or app. A VPN does not grant permission to bypass workplace or school policies, access copyrighted material improperly, attack systems, or evade account restrictions.
ExpressVPN’s terms require compliance with applicable laws and prohibit misuse such as unlawful content, privacy invasion, intellectual-property infringement, spam, and harmful behavior. Streaming and other services can apply their own geographic, account, and anti-circumvention terms. Check those rules before relying on a VPN for a specific activity.
If the kill switch leaves your device offline, the next useful step is VPN Not Connecting? Fixes for Phone, PC and Wi-Fi. On an iPhone, follow the iPhone VPN setup steps. On Android, follow the provider’s current Android support page and check Always-on VPN and Block connections without VPN.
Frequently asked questions
What does a VPN kill switch mean?
It means the VPN blocks internet traffic when its connection is lost. The device may appear offline until the VPN reconnects.
Should I leave my VPN kill switch on?
Leave it on when preventing ordinary traffic during a VPN interruption matters more than uninterrupted access. Use a less strict or app-level setting if local devices, games, calls, or banking apps need to remain connected.
Does every VPN have the same kill switch?
No. Some providers block the whole device, some close selected apps, and some offer a strict mode that blocks traffic whenever the VPN is inactive. The exact behavior also varies between Windows, macOS, iPhone, Android, and app versions.
Does iPhone have a VPN kill switch?
It depends on the VPN app. Surfshark and Proton VPN provide app settings, ExpressVPN describes its iOS protection as always on, and NordVPN documents system-level blocking rather than a separate toggle.
Where is the kill switch on Android?
Open Settings, Network & internet, VPN, select the VPN profile, and inspect Always-on VPN and Block connections without VPN where available. Also check the VPN app because some providers manage the feature through their own settings.
Why does my Wi-Fi stop when the VPN is on?
The kill switch is likely blocking traffic because the VPN is disconnected, reconnecting, or unable to connect. Reconnect, try another server or network, and check whether an advanced or always-on mode is enabled.
Does a kill switch make me anonymous?
No. It blocks ordinary traffic during a VPN interruption, but accounts, cookies, pixels, GPS, and browser fingerprints can still identify you. The VPN provider can also become a party you trust with connection information.
Is a VPN money-back guarantee the same as a free trial?
No. A free tier costs nothing, while a money-back guarantee requires an upfront payment followed by a refund request within the applicable period. The listed providers’ 30-day offers are money-back guarantees, not free trials.
What should I record before buying a VPN?
Record the introductory price, amount charged upfront, paid term, bonus time, and renewal charge shown at checkout. Save the final checkout summary, and check whether Apple or Google billing changes the refund process.
Glossary
Find more VPN guides on Tunnel Verdict. Have a question about your own setup? Contact us and include your device and the VPN you use.
