Proton VPN Kill Switch How to Turn It On and Test It

The Proton VPN kill switch is a Proton VPN privacy setting that stops your device from sending traffic outside the encrypted VPN tunnel if the VPN connection drops. To turn it on, open the Proton VPN app and enable Kill Switch in the app settings or quick settings. On Android, use Android Always-on VPN and Block connections without VPN for Proton VPN. On iPhone and iPad, Proton VPN handles kill switch protection automatically, so there is usually no separate switch to enable.

The exact menu names can vary a little by app version and operating system, but the goal is the same: make sure your traffic is blocked whenever Proton VPN is not protecting it. The steps below follow Proton VPN support guidance for the official apps, not manual OpenVPN or WireGuard configuration files.

What the Proton VPN Kill Switch Does

A VPN kill switch is a leak-prevention feature. If your VPN tunnel fails because your Wi-Fi drops, your laptop wakes from sleep, you switch networks, or the VPN server becomes unreachable, the kill switch blocks internet traffic instead of letting your real IP address or DNS requests go out through your normal connection.

It does not make the VPN faster, and it does not replace good account security. Its job is narrower and very practical: prevent accidental exposure during the seconds or minutes when your VPN is not connected.

• It helps prevent your real IP address from appearing after an unexpected VPN disconnect.
• It reduces the chance of DNS leaks while the VPN app reconnects.
• It is useful on public Wi-Fi, mobile hotspots, hotel networks, and unstable connections.
• It can temporarily stop internet access, which is expected behavior when the VPN is down.

If privacy matters more than uninterrupted connectivity, leave the kill switch on. If you often need to sign in to captive portals or access local devices, learn how to disable it temporarily before you travel.

Before You Enable It

Use the latest official Proton VPN app for your platform. Kill switch behavior depends on the app and operating system, so outdated clients can have different menus or fewer options. Also make sure you know how to turn the setting off, especially before enabling a permanent kill switch mode.

• Update Proton VPN before changing privacy settings.
• Save any active uploads, calls, remote sessions, or cloud sync work before testing.
• Check whether you need local network access for printers, file sharing, smart TVs, or Chromecast-style devices.
• Disable Permanent Kill Switch before uninstalling Proton VPN or changing major network settings.

How to Turn On the Kill Switch in Proton VPN

Windows

1. Open the Proton VPN app for Windows and sign in.
2. Open Settings or the quick settings area in the main app window.
3. Find Kill Switch.
4. Enable the regular Kill Switch for everyday protection.
5. If you want all internet access blocked unless Proton VPN is connected, enable Permanent Kill Switch instead.
6. Connect to a Proton VPN server and confirm that the app shows an active VPN connection.

Use regular Kill Switch if you simply want protection from unexpected drops. Use Permanent Kill Switch only if you are comfortable having no internet until Proton VPN reconnects or you disable the setting.

macOS

1. Open Proton VPN on your Mac.
2. Go to the app settings or preferences.
3. Look for the connection or privacy area.
4. Turn on Kill Switch.
5. Connect to a VPN server and leave the app running while you browse.

On macOS, Proton VPN focuses on the regular kill switch behavior. If your app version does not show a permanent mode, that is normal. Use the regular kill switch together with auto-connect if you want the VPN to recover quickly after network changes.

Linux

1. Open the official Proton VPN Linux app.
2. Go to Settings.
3. Find Kill Switch.
4. Choose regular Kill Switch for drop protection, or Permanent Kill Switch if your app offers it and you want stricter blocking.
5. Connect to a Proton VPN server.

Linux users should be especially careful with permanent mode. If you change firewall rules, uninstall the app, or switch network managers while a permanent kill switch is active, you may need to disable the setting or reconnect Proton VPN before normal internet access returns.

Android

On Android, Proton VPN uses Android's built-in VPN controls for the strongest kill switch behavior. This is handled through system settings rather than only a Proton VPN toggle.

1. Open Proton VPN and sign in.
2. Open Proton VPN settings and look for Always-on VPN or Kill Switch instructions.
3. Open Android Settings.
4. Go to Network and internet, then VPN. On some phones this appears under Connections or More connection settings.
5. Tap the settings icon next to Proton VPN.
6. Turn on Always-on VPN.
7. Turn on Block connections without VPN.
8. Reconnect Proton VPN.

When Block connections without VPN is enabled, Android should stop apps from using the internet unless the Proton VPN tunnel is active. This is close to a permanent kill switch at the operating system level.

iPhone and iPad

On iOS and iPadOS, Proton VPN does not usually require you to switch on a separate kill switch. The app uses Apple's VPN framework to maintain the VPN connection and protect traffic during interruptions. Install the Proton VPN profile when prompted, keep the app updated, and connect normally.

If your iPhone or iPad shows no internet after a network change, open Proton VPN and reconnect. If you have removed the VPN profile, reinstall it through the Proton VPN app.

Regular Kill Switch vs Permanent Kill Switch

The regular and permanent modes are easy to confuse because both are designed to prevent leaks. The difference is how strict they are when Proton VPN is not connected.

How to Test the Kill Switch Safely

Test the kill switch when you are not doing anything important. Do not test during a video call, online payment, remote desktop session, file upload, or anything that could be disrupted by a short loss of internet.

1. Close sensitive apps and pause large downloads or sync tasks.
2. Open Proton VPN and connect to a server.
3. Check your public IP address in a browser and confirm it shows the VPN location, not your normal ISP location.
4. Enable the kill switch mode you want to test.
5. For regular Kill Switch, briefly disconnect Wi-Fi, switch networks, or put the device to sleep and wake it again. The browser should stop loading pages until Proton VPN reconnects.
6. For Permanent Kill Switch, intentionally disconnect Proton VPN. Your browser should fail to load pages until you reconnect Proton VPN or disable permanent mode.
7. After reconnecting, check your public IP address again. It should still show the VPN address, not your real network address.

A safe test does not require torrenting, forcing the app to crash, or exposing personal accounts. You only need to confirm that traffic stops when the VPN is unavailable and resumes after the VPN is active again.

Common Problems and Fixes

No internet after turning it on

This usually means the kill switch is doing its job. Open Proton VPN and connect to a server. If you enabled Permanent Kill Switch and do not want strict blocking, turn it off in the app settings.

Hotel or cafe Wi-Fi login page will not open

Captive portals often require a direct connection before the VPN can connect. Temporarily disable Permanent Kill Switch, sign in to the Wi-Fi portal, connect Proton VPN, then turn the kill switch back on.

Printers, smart TVs, or local devices stop working

Some kill switch and VPN settings can block local network discovery. Check Proton VPN for a local network or LAN access option if available on your platform. If you only need the printer for a moment, disconnect from the VPN or disable the kill switch temporarily, then re-enable it afterward.

The setting is missing

Update Proton VPN first. If the option still is not visible, your platform may use a different method. Android uses system Always-on VPN settings, while iOS and iPadOS generally handle kill switch protection automatically.

The VPN reconnects but websites still fail

Try switching to another Proton VPN server, changing networks, or restarting the Proton VPN app. If you use custom DNS, firewall tools, or another security app, temporarily disable those extras to check whether they are interfering.

Recommended Setup for Most Users

For most people, the best setup is regular Kill Switch plus auto-connect. This gives practical leak protection without making your device feel broken every time you intentionally disconnect the VPN.

• Use regular Kill Switch for daily browsing and public Wi-Fi.
• Use Permanent Kill Switch only when you need strict no-VPN, no-internet protection.
• On Android, enable Always-on VPN and Block connections without VPN if privacy is the priority.
• Keep Proton VPN updated so you get the latest platform behavior and fixes.
• Before travel, learn how to disable the kill switch briefly for captive portal sign-ins.

The main point is simple: turn the Proton VPN kill switch on before you need it. A dropped VPN connection is usually brief, but it only takes a moment for an app or browser tab to reconnect outside the tunnel.

FAQ

Where is the kill switch in Proton VPN?

In the desktop apps, look in Proton VPN Settings or the quick settings area for Kill Switch. On Android, use the system VPN settings for Always-on VPN and Block connections without VPN. On iPhone and iPad, there is usually no separate switch because Proton VPN handles it automatically.

What is the difference between Proton VPN Kill Switch and Permanent Kill Switch?

Regular Kill Switch protects you when the VPN connection drops unexpectedly. Permanent Kill Switch is stricter and blocks internet whenever Proton VPN is not connected, including when you disconnect on purpose.

Does the Proton VPN kill switch work if I close the app?

Regular kill switch behavior depends on the app staying active and managing the VPN connection. Permanent Kill Switch, where supported, is designed to keep blocking traffic unless Proton VPN is connected or the setting is disabled.

Can I use Proton VPN without a kill switch?

Yes, but it is less private. Without a VPN kill switch, your device may reconnect through your normal internet connection if the VPN drops, which can expose your real IP address or DNS traffic.

How do I know the kill switch is working?

Connect Proton VPN, enable the kill switch, then safely interrupt the VPN by switching networks or disconnecting the VPN. Your internet should stop until Proton VPN reconnects or until you disable the strict blocking mode.