Do I need a kill switch if I'm just streaming?

It's worth enabling. Some streaming services check your IP during a session, not just when you first load the page. If your VPN drops briefly and the service catches a different IP, it may interrupt playback. A kill switch prevents that from happening. It's a one-time setup and doesn't affect anything when the VPN is running normally.

My internet went down and I can't connect. Could the kill switch be causing it?

If your VPN has dropped and the kill switch is blocking your internet, reconnecting the VPN will restore your connection. If the VPN won't reconnect, you can temporarily disable the kill switch in your VPN's settings to regain internet access. Some VPN apps have a quick toggle in the system tray or menu bar.

Does a kill switch protect against all IP leaks?

A kill switch covers leaks caused by the VPN dropping, but not leaks that happen while it's still connected. DNS leaks and WebRTC leaks are separate issues that need their own fixes: DNS leak protection in your VPN settings, and for WebRTC, using the streaming app instead of a browser is the simplest solution.

Is the kill switch the same thing as always-on VPN?

They're similar but not identical. Always-on VPN means no connection can be made at all unless it goes through the VPN. A kill switch is more reactive: it cuts traffic when the VPN drops, then restores it when the VPN reconnects. For most people, a kill switch does the job. Always-on VPN is more useful in managed or enterprise setups.

Does enabling a kill switch use more battery?

Negligibly, if at all. The kill switch monitors the VPN connection status, but this is a lightweight background task. The main battery impact of a VPN comes from the encryption overhead, not the kill switch.

Can a kill switch cause problems with apps like email that aren't streaming?

It can interrupt something mid-transfer if the VPN happens to reconnect at the wrong moment, large email attachments syncing being a fairly common example. It's not a fault with the kill switch itself, just the brief pause it creates during a reconnect. Our Outlook VPN guide covers this specific scenario in more detail, since it's a fairly common cause of stalled syncs on that app.

I enabled the kill switch but my internet didn't cut out when I disconnected the VPN. Is something wrong?

Possibly, or you may have toggled the app-level option rather than the system-level one. App-level kill switches only block the specific apps you've chosen, so everything else, including a browser tab you're testing in, will carry on working normally. Go back into your VPN's settings and confirm the full, system-wide kill switch is the one that's enabled, then repeat the test above.

Do I still need a kill switch if my VPN rarely drops?

It's still worth having on. A stable connection is exactly why the kill switch is easy to forget about, since it might go months without ever firing. The point of it is covering the one time your VPN does drop unexpectedly, not the everyday case where everything works fine. Since it costs you nothing in day-to-day performance, there's not much reason to leave it off.

What Is a VPN Kill Switch and Why You Should Enable It

VPN connections don't drop often, but when they do, your real IP address is briefly exposed on your regular internet connection. A kill switch prevents this by cutting your internet the instant the VPN disconnects, then restoring it automatically once the VPN reconnects. For streaming it means no mid-session detection. For privacy it means no gaps. It's usually a single toggle in your VPN app's settings.

What a kill switch does

When your VPN drops, without a kill switch your device falls back to your regular unprotected connection. This happens silently, often for just a few seconds before the VPN reconnects. During that window, your real IP is visible. Some streaming services check IP addresses during a session, not just at the start, so even a brief slip can trigger a block. A kill switch closes that window entirely.

Why VPN connections drop

VPN connections aren't perfectly stable. They can drop for a number of reasons:

Your device switches from wi-fi to mobile data (or between different wi-fi networks)
Your router or modem briefly loses its internet connection
The VPN server you're connected to becomes overloaded or restarts
Your device wakes from sleep and the VPN connection hasn't re-established yet
A firewall or network setting interrupts the VPN connection

Most of these drop-and-reconnect cycles happen in seconds and you'll never notice them, unless something like a streaming service logs your real IP in that window. With a kill switch enabled, there's no window for anything to see your real address.

Drops like this happen more often on public wi-fi than on a stable home connection, since cafe, airport, and hotel networks tend to be busier and less consistent. If you're regularly connecting on the move, a kill switch is doing more work for you than it would at home, which makes it worth double-checking it's actually switched on before you head out.

Two types of kill switch

Most VPN apps give you two options:

System-level kill switch: Blocks all internet traffic on the device when the VPN drops. Nothing gets out: no apps, no background processes, nothing. This is the thorough option and usually the right one.

App-level kill switch: Lets you choose specific apps that get cut off when the VPN drops, while everything else stays connected. Useful if you want certain apps (a download manager, for example) to only ever run through the VPN, while your browser can still work if the VPN drops. More flexible, but less complete.

If streaming is your main reason for using a VPN, go with the system-level option. You want the streaming service's connection to drop entirely if the VPN goes down, not carry on with your real IP.

How to enable the kill switch

NordVPN: Settings > Kill Switch. There are two toggles: one for the internet kill switch (system-level) and one for the app kill switch. Enable the internet kill switch for full protection. The app kill switch lets you specify which apps to block if the VPN drops.

ExpressVPN: Preferences > General > Network Lock. That's ExpressVPN's term for the kill switch. Toggle it on. ExpressVPN's version is system-level only, with no per-app option.

PureVPN: Look in Settings for an Internet Kill Switch or Internet Security section. Toggle it on. PureVPN also has split tunnelling in the same area if you want to control which apps use the VPN.

On mobile: Android has a built-in "Always-on VPN" option that works similarly to a kill switch. The path varies by device and Android version, but it's generally in Settings > Network & internet > VPN, then tap the settings icon beside your VPN. On iOS, this option requires device management configuration and isn't available as a simple toggle. Most VPN apps on both platforms have their own kill switch setting that's simpler to use than the system option.

The kill switch is invisible when everything's working. You'll only notice it if the VPN drops, and even then it just means a brief pause until the connection comes back.

Does the kill switch affect streaming performance?

No. When the VPN is connected and stable, the kill switch does nothing. It sits quietly in the background and only fires if the VPN drops. With a reliable provider and a decent home connection, that rarely happens. You're unlikely to notice it at all under normal use.

If the kill switch is triggering frequently and cutting your internet, the problem isn't the kill switch; it's that your VPN connection is unstable. Try switching to a different server or protocol. A good VPN on a stable connection should hold its tunnel without dropping.

How to actually test your kill switch works

Turning the toggle on isn't quite the same as knowing it works. It's worth testing it once, so you're not relying on a setting you've never actually seen in action.

Connect your VPN as normal and confirm it's showing as connected.
Open a website or app you'd notice failing quickly, like a news homepage.
Manually disconnect the VPN from within the app, not by turning off wi-fi. You want to simulate the VPN dropping while the rest of your network stays up.
Try to load a new page or refresh. With the kill switch working, your internet should go dead immediately rather than falling back to your normal connection.
Reconnect the VPN and confirm your internet comes back.

If your internet keeps working normally the moment the VPN drops, the kill switch isn't doing anything, even if the setting looks enabled. Double-check you toggled the system-level option rather than the app-level one, and that you're testing on the same device where you enabled it. This is essentially a simplified version of the checks in our full guide to confirming your VPN is working, which also covers IP and DNS leak testing if you want to go further than the kill switch alone.

Do free VPNs have kill switches?

Some do, but it's inconsistent, and it's worth checking rather than assuming. A number of free VPN apps either leave the kill switch out entirely or bury it behind a paid tier. Given that free VPNs are also generally less stable, with connections dropping more often, that's a worse combination: more frequent drops paired with less protection when they happen. If a kill switch matters to you, and for streaming or general privacy it's a genuinely useful feature to have, check the specific app's feature list before relying on it, and treat "kill switch included" as one of the things worth comparing when choosing a provider in the first place.