Key takeaways
- When the VPN tunnel drops, a kill switch blocks all internet until it’s back, so your real IP and traffic never leak in the gap.
- System-wide is the safest setting and the right default. App-level only closes the apps you pick.
- Treat it as a baseline expectation, not a premium extra. Check it exists on your platforms, turn it on, and test it once.
A kill switch is the safety net that makes the rest of your VPN trustworthy. Without it, the moment your VPN connection hiccups (and it will, occasionally), your device quietly falls back to your normal, unprotected connection, exposing your real IP and traffic without telling you. A kill switch stops that.
How it works
When the VPN tunnel drops unexpectedly (a server blip, a network change, your laptop waking from sleep), reconnection takes a few seconds. In that gap, your apps keep trying to reach the internet, over your real connection. A kill switch blocks all internet access until the encrypted tunnel is back, so nothing leaks during the gap. You might see a brief “no connection” instead, which is exactly the point.
The two types
| Type | What it does | Best for |
|---|---|---|
| System-wide | Cuts all internet for the device until the VPN reconnects | Most people. The safest setting, and the right default |
| App-level | Only closes specific apps you choose (say, a torrent client or browser) if the VPN drops, leaving the rest of your connection online | When you only need certain activities protected |
If you’re not sure which to use, system-wide is the safer choice.
When it actually matters
A kill switch ranges from “nice to have” to “essential” depending on what you’re doing:
- Essential: anything where a momentary leak has real consequences (using a VPN on a restrictive network, torrenting, or any situation where your real IP being exposed for even a few seconds is a problem).
- Strongly recommended: day-to-day privacy. Drops are unpredictable. A kill switch means you never have to notice or react to them.
- Less critical: casual, low-stakes use on a trusted network, though there’s no real downside to leaving it on.
What to check
- It exists on the platforms you use. Desktop support is common, but mobile (especially iOS) implementations vary.
- On by default, or buried in settings. Turn it on either way.
- System-wide or app-level. Know which one you're getting, and that it does what you expect.
Test it before you trust it. Connect with the kill switch on, open an IP-check page, then force a drop: flip Wi-Fi off and on, or end the VPN process from your task manager. Everything should go dark until the tunnel is back. If anything loads over your real connection in that gap, the switch isn't doing its job.
A kill switch is one of those features you hope never to notice. It earns its keep in the few seconds a year your VPN blinks. We treat it as a baseline expectation, not a premium extra. See how today’s providers compare on the essentials in our VPN rankings.