How to set up a VPN kill switch

A VPN only protects you while its tunnel is up. If the connection drops — a flaky network, a server restart, your laptop waking from sleep — your device silently falls back to your real IP, often without you noticing. A kill switch closes that gap by blocking all traffic the moment the tunnel fails.

What a kill switch actually does#

It's a simple rule: no tunnel, no traffic. The instant your VPN app loses its encrypted connection, the kill switch severs your device's internet until the tunnel is back. Nothing leaks in the seconds before the VPN reconnects.

Turn it on#

Nearly every reputable VPN ships one; it's just off by default. In your VPN app, open Settings → Connection (some call it Advanced), find Kill Switch or Network Lock, and enable it. If you're offered a choice between an app-level and a system-level switch, pick system-level — it covers traffic outside the VPN app too.

Confirm it works#

1. Connect to the VPN and load a site that shows your IP address.
2. With that tab open, quit the VPN server connection abruptly (disconnect the server, not the app).
3. Refresh the page. If the kill switch is working, the page fails to load rather than revealing your real IP.

If the page loads and shows your home IP, the switch isn't active — recheck the setting and prefer the system-level option.

Is it worth the friction?#

For anyone using a VPN for privacy rather than convenience, a kill switch is non-negotiable — leave it on.