What does a VPN kill switch do?

It is designed to block other internet traffic on the device if the VPN tunnel drops, so apps are less likely to fall back to your real IP or DNS while BetterVPN reconnects or until you turn the setting off.

How do I enable the BetterVPN kill switch?

Install BetterVPN, sign in, connect to a server, then turn on the kill switch in the app settings. Setup pages cover iPhone, Android, Windows, and Mac. If connect fails, fix that first. A kill switch cannot protect a session that never came up.

Does the kill switch replace a firewall or antivirus?

No. It is one control in the VPN app. It is not a firewall product, antivirus, or malware protection, and it is not a promise that every operating-system leak path is impossible.

VPN Kill Switch: What It Does and How to Enable It

Download the apps View plans

What it does

A few seconds of "VPN off, Wi-Fi still on" can expose your real IP and DNS lookups to the network you are on. The kill switch is meant to close that gap while you are using BetterVPN.

While the VPN is connected, traffic goes through the encrypted tunnel (AES-256 between your device and BetterVPN).
If the tunnel drops, the kill switch is designed to stop other apps from using your normal connection until BetterVPN reconnects or you turn the setting off.
That reduces the chance of an accidental IP or DNS leak on café Wi-Fi, hotel networks, cellular, or a brief disconnect.

What it does not do

The kill switch is one control in the VPN app. It is not a complete security product on its own.

It is not a firewall product, antivirus, or malware protection.
It is not a promise that every operating-system leak path is impossible. Platform details differ (for example iOS Network Extension, Android VPN service, Windows tunnel helper).
If the app cannot start the VPN at all, fix connect first. A kill switch cannot protect a session that never came up.
If the tunnel is down and the kill switch is on, some apps will look offline until you reconnect. That is expected.

When people turn it on

Turn it on in the app if you want that protection by default. Common reasons: public Wi-Fi, remote work, or any session where you would rather go offline than fall back to your real IP.

How to enable it

Install BetterVPN for your device, sign in, connect, then enable the kill switch in the app. Setup pages cover iPhone, Android, Windows, and Mac. Other platforms are on the download page.

Download the app for your platform and sign in with the same BetterVPN account you use elsewhere.
Connect to a server, then turn on the kill switch if you want traffic blocked whenever the tunnel drops.
If connect fails, the Help center has FAQs and a way to contact support. Do not assume the kill switch is active until the VPN session is up.

Kill switch vs split tunneling

Split tunneling is a separate control: it lets some traffic use the VPN and other traffic use your normal connection (per-country, per-app, or per-site / per-IP rules). It does not replace the kill switch. Use both if you want leak protection when the tunnel drops and still need local apps or sites on your usual IP.

Help FAQ

Short answers from the BetterVPN help center. Open the full FAQ if you need billing, downloads, or troubleshooting.

Does BetterVPN have a kill switch?: Yes. The kill switch blocks all internet traffic on your device the moment the VPN tunnel drops, so your real IP and DNS never leak. Enable it in the app if you want that protection on by default (for example during remote work or when you cannot afford an IP leak).
How does the BetterVPN kill switch work?: While the VPN is connected, your traffic goes through the encrypted tunnel. If that tunnel drops, the kill switch stops other apps from using your normal connection until BetterVPN reconnects or you turn the kill switch off. It does not replace a firewall, antivirus, or physical-device security.

Common questions

What does a VPN kill switch do?: It is designed to block other internet traffic on the device if the VPN tunnel drops, so apps are less likely to fall back to your real IP or DNS while BetterVPN reconnects or until you turn the setting off.
How do I enable the BetterVPN kill switch?: Install BetterVPN, sign in, connect to a server, then turn on the kill switch in the app settings. Setup pages cover iPhone, Android, Windows, and Mac. If connect fails, fix that first. A kill switch cannot protect a session that never came up.
Does the kill switch replace a firewall or antivirus?: No. It is one control in the VPN app. It is not a firewall product, antivirus, or malware protection, and it is not a promise that every operating-system leak path is impossible.