What Is a VPN Kill Switch? Do You Need One?
A VPN kill switch is a feature that automatically cuts your internet connection if your VPN drops unexpectedly. Without a kill switch, a VPN disconnect briefly exposes your real IP address — which can reveal your identity in the middle of a sensitive browsing session or torrent download.
Why your VPN drops in the first place
VPN connections drop more often than people expect:
- Switching between WiFi and cellular data
- Your device going to sleep and waking up
- Network interruptions — ISP issues, router reboots
- Server load — the VPN server becomes overloaded and disconnects you
- Protocol timeouts on unstable connections
What happens without a kill switch
When a VPN drops without a kill switch, your device immediately falls back to your regular internet connection. If you're mid-session on a torrent, your real IP becomes visible to the entire peer swarm. If you're accessing sensitive sites, your real location is suddenly exposed. The window might only be a few seconds — but it's enough.
For torrenting specifically, a single VPN drop without a kill switch can expose your IP to thousands of peers in a swarm.
System-level vs application-level kill switch
There are two types of kill switch:
- System-level kill switch: Cuts all internet traffic on the device when VPN drops. Nothing gets through — no browser, no apps, nothing. Maximum protection.
- Application-level kill switch: Only blocks specific applications (e.g., your BitTorrent client) when VPN drops. Browser traffic continues on your real IP. More convenient, less secure.
Which VPNs have the best kill switch?
- NordVPN: System and app-level kill switch on all platforms. Works reliably in testing.
- ExpressVPN: Network Lock (their kill switch) is system-level and very robust.
- Mullvad: Lockdown Mode — system-level, also blocks traffic at boot before VPN connects.
- ProtonVPN: System-level kill switch, available on all platforms including Linux.
- PIA: Both system and app-level options. PIA MACE (ad blocker) works alongside kill switch.
Do you need a kill switch?
- Yes, if you torrent: Your IP must not be exposed even briefly to the swarm.
- Yes, if privacy from surveillance is critical: Journalists, activists, high-risk users.
- Yes, on mobile: Frequent network switches mean frequent brief disconnects.
- Probably not needed: Casual streaming or general browsing where brief IP exposure is low-risk.
If the internet dies after you turn the VPN off
A kill switch that stays on after the app quits looks like a broken connection. People on r/nordvpn hit this after a Windows update: Wi-Fi shows connected, and nothing loads, on or off the VPN. Turn the kill switch off, quit the app, and if the adapter is still holding the connection, uninstall the VPN including its network adapter and reboot. Then reinstall. Do that before you assume the ISP is down.
Frequently asked questions
Does a kill switch slow down my VPN?
No. A kill switch is a passive feature — it only activates when the VPN drops. It has no impact on speed during normal operation.
What's the difference between a kill switch and always-on VPN?
Always-on VPN (on Android) prevents any traffic from reaching the internet without a VPN connection — even at boot. A kill switch responds to unexpected drops. Always-on is more comprehensive but requires the VPN to connect before any app can access the internet.
Do all VPNs have a kill switch?
No. Most quality paid VPNs do. Free VPNs typically don't. Check the VPN's features page — not all platforms may have it even if the VPN does (e.g., some VPNs have a kill switch on desktop but not mobile).