Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A VPN can report “connected” while your device still cannot resolve websites or route traffic. The fastest fix is to disconnect the VPN and test the connection: if the internet is still down, repair Wi‑Fi, mobile data, the router, or the ISP first; if browsing works normally, troubleshoot the VPN’s kill switch, protocol, server, firewall, or DNS settings. Work through the checks below in order, changing one variable at a time and restoring every security control after testing.
What does “VPN connected but no internet” actually mean?
“Connected” normally confirms that the VPN app established an encrypted tunnel. It does not prove that DNS lookups, routing, or access through the tunnel are working. A failed DNS resolver, blocked protocol, firewall rule, or dropped tunnel can therefore leave browsers and apps offline even though the VPN status says connected.
There are four possible fault domains: the device, the local Wi‑Fi or router, the ISP or network administrator, and the VPN application or its tunnel. Identifying the domain before changing settings prevents destructive resets and makes support requests much more useful.
How do I identify whether the VPN or the underlying internet connection is broken?
Disconnect the VPN completely, then test a known website and a second app. This single comparison separates a normal connectivity problem from a VPN-layer problem.
#1 Best Overall
- Disconnect the VPN. Use the app’s Disconnect button rather than merely closing its window.
- Test two services. Open a familiar website and try another app such as email or a store. If only one service fails, that service may be having an outage.
- Compare another device. Connect a second phone or computer to the same Wi‑Fi. If both fail, suspect the router, broadband line, or ISP; if only one fails, focus on that device.
- Try a different path. Connect the affected device to a phone hotspot or switch between Wi‑Fi and mobile data. A working hotspot points toward the original network or ISP.
Apple recommends checking other devices, restarting the router and modem, updating router firmware, and trying another frequency such as 5 GHz. Google’s Android guidance likewise starts with a restart and switching between Wi‑Fi and mobile data. If every device fails on the same connection, an ISP outage is plausible.
What should I do when the internet is offline even with the VPN disconnected?
Repair the base connection before changing VPN settings. A VPN cannot provide internet when the device has no usable Wi‑Fi, mobile-data, or wired connection.
Refresh the device and router
- Restart the phone, tablet, or computer.
- Power off the modem and router. Wait about 30 seconds, power the modem back on, wait for it to synchronize, then power on the router.
- Reconnect to Wi‑Fi and re-enter the password if prompted.
- Move closer to the access point, try the 5 GHz band if available, or use wired Ethernet. Proton’s troubleshooting guidance notes that distance and unstable Wi‑Fi can interrupt connectivity.
Check whether the network itself is responsible
- Test another device on the same Wi‑Fi.
- Try the other Wi‑Fi band or a cable.
- Use a mobile hotspot or cellular data.
- Check the ISP’s outage page or contact the network administrator if this is a work, school, hotel, or public network.
Do not reset the VPN app until the connection works reliably with the VPN off. Otherwise, you may mistake an ISP or router failure for a VPN failure.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Could a kill switch or “block connections without VPN” be causing the outage?
Yes. These controls intentionally stop all traffic whenever the VPN tunnel is unavailable, so the device appears completely offline. Proton VPN describes its kill switch this way: “If your VPN connection is lost, it blocks all internet traffic on your device until you’re reconnected.” Android’s Always-on VPN can do the same when Block connections without VPN is enabled.
Test the control safely
- Disconnect the VPN in its app.
- Open the VPN settings and temporarily turn off Kill switch, Network Lock, or similarly named blocking.
- On Android, open Settings → Network & internet → VPN, select the VPN, and turn off Always-on VPN or Block connections without VPN for the test.
- Reconnect to the VPN and test a website.
If internet access returns only after the blocking control is disabled, the tunnel is dropping or failing to route traffic. Re-enable the protection after testing; leaving it off removes the leak-prevention behavior it was designed to provide.
Rank #2
Which VPN server and protocol should I try?
A different server or protocol often fixes a tunnel that is blocked, overloaded, or incompatible with the current network. VPN providers commonly offer WireGuard, OpenVPN, and IKEv2; the exact choices depend on the app and operating system.
Change one path variable at a time
- Disconnect the VPN.
- Select a nearby server in a different city or region. A nearby location usually reduces latency, while a different region can bypass a server-specific fault.
- Reconnect and test both a website and another app.
- If it still fails, switch protocol. Try WireGuard first when available, then OpenVPN or IKEv2. On restrictive networks, a protocol change can bypass filtering that blocks one VPN type.
- Record the server and protocol that work so you can return to them if the problem recurs.
Bitdefender and NordVPN both recommend changing protocol when a network restricts the selected VPN type. If every server and protocol fails only on one Wi‑Fi network, the network administrator or ISP may be filtering VPN traffic.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How do firewall, antivirus, and parental-control software interfere?
Security software can block the VPN app’s tunnel or the virtual network adapter it creates. Content filters and parental-control products may also reject encrypted traffic or the VPN’s DNS requests.
- Open the firewall or security suite and allow the VPN application and its virtual adapter to send and receive traffic.
- Check both private and public network profiles where the firewall distinguishes them.
- Temporarily pause third-party antivirus, firewall, web-filtering, or parental-control features and reconnect the VPN.
- If the VPN works while protection is paused, create a specific allow rule instead of leaving protection disabled.
- Re-enable every security product and confirm that the allow rule still permits browsing through the VPN.
Windows Defender Firewall and the VPN application can each have separate permissions. A recent VPN update may also require approving the app again. Never treat a successful test with protection disabled as a permanent solution.
Can DNS make a connected VPN unusable?
Yes. DNS translates names such as a website address into IP addresses. A tunnel can be established while DNS requests are blocked, pointed at an unreachable resolver, or intercepted by a local filter. In that case, websites fail by name even though the VPN status remains connected.
Repair DNS without changing more than necessary
- In the VPN app, return DNS settings to Automatic, Default, or the provider’s recommended value. Remove a custom DNS address temporarily.
- Disconnect and reconnect the VPN after saving the setting.
- Flush the device’s DNS cache.
- Test a known website by name and, if your troubleshooting method supports it, test a known IP address. A name-only failure points toward DNS.
On Windows, open an elevated Command Prompt and run ipconfig /flushdns. Private Internet Access documents equivalent DNS-refresh methods for macOS, Linux, and mobile systems; the menu names differ by version. If a work or school network mandates its own DNS, ask its administrator before replacing it.
Free tools Windows power users keep installed
One-click scans. No signup required.
What is the Windows fix sequence?
Windows offers a progressively stronger repair path. Start with reversible actions and reserve Network Reset for the end because it removes adapters and saved configuration.
Run the network-stack commands
- Disconnect the VPN and close its app.
- Open Command Prompt as administrator.
- Run each command, pressing Enter after every line:
netsh winsock reset netsh int ip reset ipconfig /release ipconfig /renew ipconfig /flushdns - Restart Windows, reconnect to Wi‑Fi or Ethernet, and test without the VPN.
- Open the VPN, select a different protocol or server, and test again.
Use Windows Network Reset only as a last resort
Open Settings → Network & internet → Advanced network settings → Network reset (the wording can vary by Windows release), choose Reset now, and restart when prompted. Windows removes and reinstalls network adapters. You may need to re-enter Wi‑Fi passwords and reinstall or reconfigure VPN software, virtual adapters, or corporate network tools.
How do I fix the problem on an iPhone or iPad?
First isolate VPN and security profiles, then reset network settings only if the simpler checks fail.
- Disconnect the VPN and test Wi‑Fi and cellular data separately.
- Temporarily disable or uninstall the VPN and any security or filtering app for the test.
- Restart the iPhone or iPad, modem, and router.
- Reconnect to Wi‑Fi and test the internet before reinstalling the VPN.
- If the device remains offline, open Settings → General → Transfer or Reset [device] → Reset → Reset Network Settings.
This reset removes saved Wi‑Fi passwords, VPN settings, and APN settings. Have the Wi‑Fi password and any required cellular or workplace configuration available before using it.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Rank #4
How do I fix the problem on Android?
Android’s network controls can block traffic independently of the VPN app, so check Always-on VPN and Private DNS as well as the connection itself.
- Restart the phone or tablet.
- Turn Wi‑Fi off and test mobile data; then turn mobile data off and test Wi‑Fi.
- Enable airplane mode for about 10 seconds, disable it, and retry.
- Open Settings → Network & internet → VPN, select the VPN, and temporarily disable Always-on VPN and Block connections without VPN.
- Review Settings → Network & internet → Private DNS. Set it to Automatic for diagnosis unless your organization requires a specific provider.
- Reconnect the VPN, try another server and protocol, and test more than one app.
Manufacturers rename menus, so use Settings search for “VPN,” “Always-on VPN,” and “Private DNS” when the path differs.
How can I tell whether the ISP or a particular Wi‑Fi network is blocking the VPN?
Compare networks while keeping the device and VPN settings unchanged. If the VPN works on mobile data or a hotspot but not on one Wi‑Fi connection, the restriction is network-specific rather than a general device failure.
- Works on every network except one: contact that ISP, administrator, hotel, school, or employer. Ask whether VPN protocols or required ports are filtered.
- Fails on Wi‑Fi and mobile data but works after a fresh install: suspect corrupted app or network configuration.
- Fails on every network and every protocol: collect device model, operating-system version, VPN app version, server, protocol, and timestamps before contacting the VPN provider.
- All devices fail without the VPN: investigate the router, modem, or ISP outage instead of the VPN.
Provide support with the exact network type, whether the VPN-off connection works, the selected protocol and server, and any error text. That information distinguishes authentication, routing, DNS, and local-firewall failures.
Which fix should I try first?
The table below orders options by the fault they test, how reversible they are, and their security impact.
| Action | Primary fault domain | Reversibility | Security or data impact |
|---|---|---|---|
| Disconnect VPN and test another app/device | Device, Wi‑Fi, ISP, or VPN | Immediate | No configuration change |
| Restart device, modem, and router | Transient device or network state | Immediate | Brief outage only |
| Change server or protocol | VPN path or network filtering | Easy to undo | Different exit location or tunnel method |
| Temporarily disable kill switch or Always-on blocking | VPN tunnel drops | Easy to undo | Traffic may pass outside the VPN; restore immediately |
| Pause firewall or antivirus for a test | Local security software | Easy to undo | Protection is reduced during the test |
| Return DNS to automatic and flush cache | DNS resolution | Easy to undo | Custom DNS policy may be removed |
| Windows Network Reset or iOS/iPadOS Reset Network Settings | Corrupted network configuration | Difficult to undo | Saved Wi‑Fi, VPN, APN, and adapter settings are removed |
What should I avoid while troubleshooting?
- Do not assume a green VPN status proves that websites can resolve or route.
- Do not leave a kill switch, firewall, antivirus, or parental-control feature disabled after testing.
- Do not perform a network reset before recording Wi‑Fi passwords, VPN credentials, and work-network requirements.
- Do not change server, protocol, DNS, and firewall settings simultaneously; you will not know which change solved the fault.
- Do not blame the VPN when the same device cannot browse with it disconnected.
When should I contact support?
Contact the ISP or network administrator when ordinary internet fails across devices, or when the VPN works elsewhere but not on that network. Contact the VPN provider when the base connection works on multiple networks yet every server and supported protocol fails after DNS, firewall, and platform reset checks. Include the device and OS, VPN app version, server and protocol, network type, time of failure, and the results with the VPN disconnected.
Frequently Asked Questions
Why does my VPN work on Wi‑Fi but not on mobile data?
Mobile carriers can apply different filtering, APN, or IPv6 policies than your home router. Compare the same VPN server and protocol on both connections, then check the phone’s APN and Private DNS settings or ask the carrier whether VPN traffic is restricted.
Why can I open some apps but not websites after connecting to a VPN?
Different apps may use cached connections, their own DNS-over-HTTPS service, or hard-coded endpoints. Flush the device DNS cache, return the VPN DNS option to its default, and test a newly opened browser session rather than an already-running app.
Is it safe to use a VPN with the kill switch turned off?
Turning it off briefly can help isolate a tunnel failure, but traffic may use the ordinary connection while the VPN reconnects. Keep sensitive activity paused during the test and turn the kill switch back on once a stable tunnel is confirmed.
Why does changing the VPN server fix the problem?
A single server can have a route, capacity, or authentication problem that does not affect the provider’s other endpoints. A successful alternate server indicates a server-specific issue, not necessarily a fault in your device or broadband service.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
