How do I turn on Always-on VPN on Android?
Updated
Open Settings → Network & internet → VPN, tap the gear next to your VPN app and switch on Always-on VPN. Android then starts the VPN when the phone boots and reconnects it after drops. Also turn on Block connections without VPN if nothing should ever leave your phone unprotected: that is Android's built-in kill switch.
A VPN only protects you while it is connected. Start it by hand and sooner or later you'll forget, or the phone restarts overnight, or the connection drops in a lift and your messages go out over the café Wi-Fi without it. Android has two settings that fix this at the system level, for any VPN app that supports them. This guide shows where they are and what changes when you turn them on.
Always-on VPN and "Block connections without VPN": what each one does
| Setting | What it does | When it helps |
|---|---|---|
| Always-on VPN | Android starts the VPN at boot and restarts it if it stops | You never have to remember to connect |
| Block connections without VPN | No app can use the internet unless the VPN is connected | Nothing leaks during a reconnect or if the VPN fails to start |
The second setting is what VPN apps call a kill switch. Android's version is stronger than most in-app ones because the system enforces it: even apps that start before the VPN can't get out.
You can use Always-on on its own. "Block connections without VPN" only appears once Always-on is switched on.
How to turn it on
Connect once in your VPN app first and pick the location you want. Always-on starts the VPN without opening the app, so the app needs to know where to connect.
Pixel and most phones with stock Android
- Open Settings → Network & internet → VPN.
- Tap the gear next to your VPN app.
- Turn on Always-on VPN.
- Optional: turn on Block connections without VPN.
Samsung (One UI)
- Open Settings → Connections → More connection settings → VPN.
- Tap the gear next to your VPN app.
- Turn on Always-on VPN, and Block connections without VPN if you want the kill switch.
Other brands
Xiaomi, OnePlus, OPPO and others move the VPN page around between versions. The fastest way is to open Settings and search for VPN. The two switches have the same names everywhere.
What to expect after turning on the kill switch
"Block connections without VPN" does exactly what it says, which sometimes surprises people:
- Hotel and airport Wi-Fi login pages won't open. The login page is outside the VPN, so it's blocked too. Turn the setting off for a minute, sign in to the Wi-Fi, then turn it back on. Our guide on VPN connected but no internet covers this step by step.
- If the VPN can't connect, you're offline. That's the point of a kill switch, but it means a blocked network or an expired plan cuts your internet until you fix it or switch the setting off.
- Data limits matter. On a free plan with a daily allowance, the VPN stops passing traffic when the allowance runs out, and with the kill switch on your phone has no internet until it resets.
- Only one VPN can be always-on. Ad blockers and firewalls that work as a VPN can't run at the same time.
Battery and reliability
Always-on itself costs almost nothing: the VPN was going to run anyway. What drains battery is a VPN that keeps reconnecting because Android keeps killing it. To avoid that:
- Settings → Apps → your VPN → App battery usage (or Battery): choose Unrestricted.
- On Samsung, also remove the app from Sleeping apps and Deep sleeping apps in Battery settings.
- Keep the app updated. Old versions may not reconnect cleanly after a network change.
Troubleshooting
The Always-on switch is greyed out
The VPN app doesn't support Always-on. Android only offers the switch to apps that declare support for it. Use a different app, or start the VPN by hand.
The VPN didn't start after a restart
Open the app once and connect manually. Most apps, SimpleV included, need a saved location and a signed-in session to start in the background. If it still doesn't start, check that battery usage is set to Unrestricted.
I have no internet with the VPN on
Check whether the kill switch is on and the VPN is actually connected. If it's stuck connecting, the network may be blocking the VPN protocol; see VPN not working on hotel or office Wi-Fi.
How SimpleV handles Always-on
SimpleV VPN for Android supports both settings:
- Always-on starts SimpleV on the last location you used, so connect once in the app and pick your location.
- In the app, Settings → Always-on & kill switch opens the right Android page directly.
- Auto mode tries WireGuard first and falls back to VLESS with Reality on TCP 443 when a network blocks VPNs, which keeps an always-on connection working on more Wi-Fi networks.
- Free plan: 500 MB a day, no account. With the kill switch on, your phone goes offline once the day's data is used up, until it resets at midnight UTC. Premium has no daily limit, so it's the better fit for an always-on setup.
FAQ
Is Always-on VPN the same as a kill switch?
No. Always-on keeps the VPN running and restarts it. The kill switch is the second setting, Block connections without VPN, which stops all traffic whenever the VPN isn't connected.
Does Always-on VPN drain the battery?
Not by itself. A VPN uses a little battery whenever it's connected; Always-on just makes sure it is. Set the app's battery usage to Unrestricted so Android doesn't keep stopping and restarting it.
Why can't I sign in to hotel Wi-Fi with Always-on VPN?
Because Block connections without VPN also blocks the Wi-Fi login page. Switch it off, sign in, and switch it back on.
Can I use Always-on with two VPN apps?
No. Android runs one VPN at a time, and only one app can be set as always-on.
Does Always-on VPN work after the phone restarts?
Yes, that's its main job. The app needs to have connected at least once so it knows which server to use.