What a kill switch actually does
A VPN encrypts your traffic and routes it through a remote server. Your real IP address is hidden — websites and the network see the VPN server's IP instead. This works as long as the VPN stays connected.
The problem: VPN connections drop. It can happen when you switch networks, when the wifi signal stutters, when your device wakes from sleep, or when a VPN server has a brief outage. For a few seconds — sometimes longer — your traffic travels unprotected through the regular internet. Your real IP is visible. Everything you're doing is unencrypted.
A kill switch monitors the VPN connection continuously. The moment it detects a drop, it cuts all internet traffic before any unprotected data can leave your device. No VPN, no internet — until the VPN reconnects or you choose to proceed.
⚠ Without a kill switch
A 3-second VPN drop is enough to expose your real IP address to every site you're connected to, log unencrypted DNS queries, and reveal your actual location to the network. Most people never notice the drop happened — the connection resumes and everything looks normal.
When a kill switch actually matters
For casual browsing, a brief VPN drop is a minor nuisance. For certain situations, it's a meaningful risk.
How to enable the kill switch in NordVPN
On iPhone or Android
- Open NordVPN and tap the menu icon in the top corner.
- Go to Settings → Advanced settings.
- Toggle on Kill Switch. On iOS, NordVPN uses Apple's built-in VPN kill switch functionality — it activates automatically when you enable the VPN. No separate toggle needed on newer iOS versions.
On Mac or Windows
- Open NordVPN and click the gear icon (Settings).
- Click General (Windows) or Preferences (Mac).
- Toggle on Kill Switch. On Windows, you can also choose between App Kill Switch (blocks specific apps) and Internet Kill Switch (blocks all traffic).
✓ App kill switch vs internet kill switch
NordVPN's Windows app offers two modes. Internet kill switch blocks all traffic if the VPN drops. App kill switch only blocks specific apps you choose — useful if you want to keep some apps (like a work messaging tool) running even if the VPN disconnects, while protecting others. For maximum protection, use internet kill switch.
Kill switch and no-logs — how they work together
A no-logs policy means your VPN provider doesn't record your activity. A kill switch means your activity isn't exposed to the network if the VPN drops. They protect against different threats:
No-logs protects you from your VPN provider knowing what you did. Kill switch protects you from the network seeing your real identity if the VPN fails.
Both are worth having. NordVPN has both — independently audited no-logs policy and a kill switch on all platforms.
Free Download
The Traveler's Digital Security Checklist
The complete pre-travel setup — including kill switch, auto-connect, and obfuscated server configuration.
No spam. Unsubscribe anytime.
Frequently asked questions
Yes — there's no real downside. The kill switch only activates if the VPN drops, which should be rare with a good VPN. When it does activate, you lose internet momentarily until the VPN reconnects (usually seconds). That brief inconvenience is worth not having your real IP exposed unexpectedly.
No — the kill switch runs in the background and only activates when the VPN drops. It has no effect on connection speed during normal use. It's monitoring software, not an additional encryption layer.
If you have the kill switch enabled and your internet cuts out briefly, it means the VPN connection dropped and the kill switch activated. This is it working correctly. Wait a few seconds for the VPN to automatically reconnect — your internet will resume with the VPN back on. If it happens frequently, try switching to a different VPN server or protocol.
No — they serve different purposes. A firewall filters traffic based on rules (what's allowed in and out). A VPN kill switch is specifically triggered by VPN connection failure and blocks all traffic until the VPN reconnects. Some kill switches are implemented using firewall rules under the hood, but the concept and purpose are different.
The VPN we travel with
NordVPN — kill switch on all platforms
Kill switch included on iOS, Android, Windows, and Mac. App kill switch and internet kill switch on Windows. Audited no-logs policy means nothing to hand over even if asked.
Get NordVPN — Save up to 69% →* Affiliate link — we earn a commission at no cost to you.