VPN Kill Switch Explained

What a kill switch is, why it's the most underrated VPN feature for travellers, and how to enable it on every platform.

The problem 1

What happens when your VPN disconnects?

VPN connections drop. It happens when you move between Wi-Fi networks, when your phone wakes from sleep, when a server reboots, or when your internet briefly hiccups. The disconnect itself often lasts less than a second. But in that second, your device reverts to sending traffic directly — unencrypted, via your real IP address.

Without a kill switch, you'd never know it happened. Consider these scenarios:

You're in China
Your VPN drops for two seconds. Your Google search request — which is illegal to access — is briefly visible to your ISP and potentially the government.
You're on hotel Wi-Fi
VPN disconnects while you're checking work email. Your login credentials cross the unencrypted hotel network, visible to anyone running a packet sniffer.
You're banking abroad
A brief VPN drop mid-session exposes your banking session token on public Wi-Fi — enough for a session hijacking attack.
The silent threat

Most VPN disconnects are invisible. Your browser continues loading. Your apps keep running. You have no idea your real IP address just appeared on an unsecured network — until it's too late.

VPN kill switch illustration
VPN kill switch safety valve concept
The solution 2

Kill switch cuts internet the moment VPN drops

A VPN kill switch is a network-level circuit breaker. It monitors your VPN connection in real time. The moment the VPN tunnel fails — for any reason — the kill switch immediately blocks all internet traffic. Your browser stops loading. Your apps stop syncing. Your real IP address is never exposed.

When the VPN reconnects — usually within a few seconds — the kill switch releases the block and internet traffic resumes normally. The whole cycle often happens without you noticing anything except a brief pause.

💡 The safety valve analogy

A kill switch is like a safety valve on a gas line. You don't notice it 99% of the time — it's just sitting there, monitoring pressure. But when something fails, it shuts everything down instantly and prevents a disaster. You'd never run a gas line without one.

Kill switch: the simple version
VPN connected ✅ — Internet works normally — all traffic goes through the VPN tunnel
VPN disconnected ❌ — Internet is cut entirely — no traffic leaks until VPN reconnects
How to enable 3

Enable kill switch on every platform

The exact steps vary by VPN app and platform. Here's how to enable it on the most common setups.

iPhone / iOS
Open your VPN app (e.g. NordVPN)
Go to Settings within the app
Find "Kill Switch" and toggle it ON
Note: iOS does not have a system-level kill switch — you must rely on the VPN app's built-in implementation.
Android
Go to Settings > Network & internet > VPN
Tap the gear icon next to your VPN
Enable "Always-on VPN"
Enable "Block connections without VPN"
Desktop (Windows / macOS)
Open your VPN application
Go to Settings or Preferences
Look for "Kill Switch" or "Network Lock"
Toggle it ON — the exact label varies by app
Enable VPN kill switch on iPhone, Android, desktop
Provider support 4

Which VPNs include a kill switch?

Every reputable paid VPN includes a kill switch. Free VPNs almost never do — which is another reason not to trust them with sensitive activity.

VPN provider Kill switch Name in app App-level kill switch
NordVPN Kill Switch
ExpressVPN Network Lock
Mullvad Kill Switch
Surfshark Kill Switch
ProtonVPN Kill Switch
Free VPNs N/A — not available
VPN kill switch protection

Get a VPN with kill switch

Every provider we recommend includes a kill switch as a standard feature. Enable it once and you'll never have to think about it again.