Kill Switch
BeginnerA VPN safety feature that instantly blocks all internet traffic if the encrypted tunnel drops, so your real IP and activity are never exposed even for a second.
In depth
A kill switch is the seatbelt of a VPN. Tunnels fail — Wi-Fi blips, servers reboot, networks switch — and without protection your device silently falls back to its normal connection, broadcasting your real IP to every open website, app and tracker until the VPN reconnects. A kill switch makes the failure loud instead of leaky: no tunnel, no internet.
How it works
Implementations are firewall rules under the hood. The VPN client configures the operating system to permit outbound traffic only through the tunnel interface; anything else is dropped. Two scopes are common:
- System-level: the whole device goes offline when the tunnel dies — strongest protection.
- App-level: only chosen applications (a torrent client, a browser) are cut, while normal traffic continues.
Why it matters
- P2P and torrenting: a one-second drop exposes your real IP to the entire swarm — the classic way copyright trolls collect addresses.
- Hostile networks and censorship: in places where VPN use itself is sensitive, a silent leak can have real consequences.
- Long-lived sessions: overnight downloads or always-on privacy setups cannot rely on you noticing a disconnect.
Buying tip
Check whether the kill switch is on by default, whether it survives reboots and OS sleep, and whether mobile apps implement it natively (iOS support is notoriously weaker than desktop).
Examples
- A torrent user's VPN drops at 3 a.m.; the kill switch keeps the client offline until the tunnel returns, so the swarm never sees the home IP.
- A journalist's laptop joins hotel Wi-Fi, the VPN reconnect lags two seconds, and the firewall rules hold all traffic until the tunnel is up.
- An app-level kill switch lets video calls continue on the normal connection while only the browser is restricted to the VPN.
Common use cases
FAQs
If exposure of your real IP for even a few seconds matters — torrenting, sensitive research, hostile networks — yes, non-negotiable. For casual geo-unblocking it is merely nice to have.
That is the kill switch doing its job: the VPN tunnel dropped and the client is blocking everything until it reconnects. Toggle the VPN, or disable the kill switch if you accept the exposure.
System-level for maximum safety — nothing escapes. App-level when you only need specific programs protected and want the rest of the device usable during tunnel hiccups.