Quick fix: Check the internet without the VPN, update and restart the app, confirm your account, and try another server or supported protocol. Change one thing at a time. An always-on VPN or kill switch can still block a disconnected test; deliberately pausing protection sends test traffic outside the VPN.
This guide covers consumer VPN apps on personal devices. For an employer-managed VPN, ask IT before changing profiles, certificates, firewall rules or adapters. Keep a note of the exact error, app version, network and each change you test.
Most VPN problems fit into a few categories: internet issues, app or software problems, server or protocol mismatches, and privacy-related failures like leaks. Addressing them in order saves time and avoids unnecessary changes.
Key Takeaways
- Start with the basics: check your internet, restart the app, and verify your account is active.
- Trying another server or supported protocol helps isolate some connection and speed problems; it is not a guaranteed fix.
- Escalate with the exact error and your test results before paying for another service.
What To Check First When A VPN Stops Working
Start with the underlying internet connection, account, app and provider status. Record the outcome of each check before changing advanced settings.
Confirm Your Internet Connection Is Stable
So how do you start your VPN troubleshooting?
Your VPN cannot connect if your base internet connection is down or unstable. A VPN depends on your existing connection to reach its servers.
Pause sensitive activity before testing without the VPN. Check whether an always-on VPN or kill switch still blocks access, then deliberately allow a brief unprotected test on a personal device. Try a known HTTPS page. If it fails, investigate the base connection, captive portal and device settings before blaming the VPN server.
Restart your router and wait 60 seconds before reconnecting. Try switching from Wi-Fi to a wired connection or use mobile data as a test.
If only the VPN-connected test fails, investigate the app, server, protocol and network policy. At a hotel or airport, complete the normal Wi-Fi login or terms page first, then reconnect the VPN. Do not ignore certificate warnings or enter sensitive credentials into an unexpected login page.
Restart The App, Device, And Router
A simple restart clears temporary errors in the VPN app, your operating system, and your network hardware. This is often the fastest fix for VPN connection failures.
Close the VPN app completely. Restart your device.
Power cycle your router by unplugging it, waiting 30 seconds, and plugging it back in. Reopen the VPN app and try connecting again.
Check For Provider Outages And Server Problems
VPN providers occasionally take servers offline for maintenance or experience outages. If your account and internet are both fine but the VPN still will not connect, the server itself may be the issue.
Check your VPN provider’s status page or official social media channels. Try connecting to a different server location within the app.
If the app shows multiple servers in the same region, try a few before switching protocols. Some providers list real-time server health inside the app.
Verify Your Account, Login, And Subscription Status
Confirm the account, plan and connection allowance in the official dashboard. An expired paid plan can remove paid-server access while leaving a free tier usable. Also check automatic date and time if sign-in or certificate checks fail. Proton’s connection guidance explains these account and clock checks.
Confirm your subscription is active through the provider’s account dashboard. If you recently changed your password, update it in the app.
Check whether your account has a device limit and whether you are already at that limit on other devices.
Fixing Connection And Installation Problems
If basic checks do not solve the problem, inspect the app, conflicting software and supported network settings. Use a specific error or diagnostic result to choose the next step.
Update Or Reinstall The VPN App
Outdated VPN software can develop compatibility issues with your operating system, especially after a major OS update. Reinstalling the app gives you a clean slate.
Check for updates inside the app or through your device’s app store. If an update is available, install it and test the connection.
If no update is available or the update does not help, uninstall the app completely. Download a fresh copy directly from your VPN provider’s official website and reinstall it.
Remove Conflicting VPN Apps And Old Adapters
Running two VPN apps at the same time, or having leftover network adapters from a previous VPN, can cause conflicts.
Quit any unused active VPN or proxy and retest before uninstalling software. Keep employer-managed clients and their configuration. Use the old VPN’s official uninstaller where removal is appropriate.
Do not remove unfamiliar adapters merely because their name mentions tunnelling. Record any driver error and ask the provider to identify the specific component that needs repair.
Check Firewall, Antivirus, And Network Permissions
Your firewall or antivirus software may block your VPN app from accessing the network. This is a common cause of connection failures after a software update or new security suite installation.
Check the security product’s block history and the VPN’s official compatibility instructions. Allow only the verified application if a documented rule is needed; avoid broad exclusions or unknown files.
Do not disable antivirus or the firewall as a routine first step. Use the security product’s supported diagnostic procedure, or ask IT on a managed device. Restore protection immediately if support explicitly requires a brief test.
A successful test with a filter paused suggests an interaction that still needs diagnosis. Confirm the exact rule with support instead of assuming the whole security product is defective.
Troubleshoot Windows Adapter Issues
Windows VPN clients use different adapters and drivers. A WAN Miniport fault is relevant only when the connection uses it; it does not explain every WireGuard, OpenVPN or provider-specific failure.
Start with the Windows network troubleshooter and the VPN app’s supported repair path. Record Device Manager errors before changing drivers. Do not uninstall working adapters blindly.
Use network reset only after simpler checks fail and you can restore the configuration. Microsoft’s Windows guidance warns that reset can require reinstalling VPN clients or virtual switches. Work devices need IT approval.
Switch Servers And Protocols To Restore Access
Try another server and supported protocol while keeping the network and task unchanged. A different result helps isolate the problem; neither change is a universal cure.
When Changing Servers Solves Congestion Or Blocking
Server congestion and temporary server-side issues are common causes of slow speeds and dropped connections. Switching to a different server location often solves both.
Choose a server geographically closer to your physical location for better speed. If one server in a region fails, try another in the same region before switching countries.
Avoid servers your VPN app labels as busy or overloaded. For streaming, use servers your provider labels as optimized for that service.
Changing servers is quick and should be your first protocol-level step.
How To Choose Between WireGuard, OpenVPN, And IKEv2
Different VPN protocols handle speed, stability, and firewall compatibility differently. For VPN troubleshooting, choosing the right one for your situation can fix a connection that keeps failing.
| Protocol | Useful test | Important limit |
|---|---|---|
| WireGuard | Compare performance where supported | UDP may be blocked; no universal speed winner |
| OpenVPN TCP | Try a provider-supported TCP connection | Port 443 does not guarantee access |
| OpenVPN UDP | Compare with TCP on the same network | Routing and network policy affect results |
| IKEv2/IPsec | Test reconnection where supported | Provider and platform availability vary |
Start with automatic protocol selection where available. OpenVPN TCP on port 443 may help on some networks, but using the HTTPS port does not make VPN traffic identical to web traffic or guarantee access.
If IKEv2 is available, compare how it reconnects during a Wi-Fi-to-mobile handover. The result depends on the app, device and network.
When To Try IKEv2/IPsec Or L2TP/IPsec
IKEv2/IPsec may be useful for a supported mobile connection. Check the provider’s current app documentation before choosing it; a protocol name alone does not establish reliability.
Try IKEv2/IPsec only when the provider and current platform support it. L2TP/IPsec belongs to a particular legacy setup, not a universal repair; follow the network owner’s documentation.
For a legacy L2TP/IPsec configuration, follow the network administrator’s exact instructions. Do not replace a supported modern connection with it merely to clear an error.
What To Do If A Network Blocks Certain Tunnels
Some networks, such as school networks, workplace firewalls, or hotel Wi-Fi, actively block VPN protocols. This is why your VPN works at home but fails elsewhere.
Where VPN use is permitted, try the provider’s supported automatic, TCP or obfuscation option. A firewall can identify VPN traffic even on port 443. Follow workplace, school and local rules.
If your provider offers a “firewall bypass” or “camouflage” mode, enable it before connecting. If none of these work, contact your VPN provider’s support team and describe the network environment.
A protocol change may help, but some network policies or authentication requirements cannot be fixed inside the VPN app. Ask the network operator or use another permitted connection.
Solving Slow Speeds, Drops, And Streaming Issues
Separate slow performance from frequent disconnections. Compare the underlying connection, server and device settings before deciding whether changing providers would help.
How To Improve VPN Speed Without Guesswork
VPN speed loss can result from server distance, encryption overhead, protocol choice, and congestion. Address these factors in order to avoid unnecessary changes.
First, test your internet speed without the VPN connected to establish a baseline. Connect to the VPN and run the same speed test.
There is no universal acceptable percentage loss. Repeat tests with the same device, network and endpoint, comparing latency and the actual task as well as throughput. Pause background downloads and try a nearby server or another supported protocol.
Choose a server that is geographically close to you rather than routing through a distant country.
A large repeated difference warrants investigation, but can reflect routing, the device, Wi-Fi, congestion or the test itself. It does not identify the faulty component alone.
Reduce Congestion With Better Server Selection
Popular server locations can become congested during peak hours, causing slow speeds and connection drops, so VPN won’t connect.
Try connecting at a different time of day to see if congestion is the cause. Switch to a less-used server in the same country or region.
Use a recommended location or load indicator when the app actually provides one. Do not assume every provider displays real-time server load.
If your provider has specialty servers for streaming or gaming, use those for those activities.
Use Split Tunneling Carefully Where Available
Split tunneling lets you route some traffic through the VPN while sending the rest directly through your regular connection. This can improve speed for apps or services that do not need VPN protection.
Exclude an app only when you deliberately want its traffic outside the VPN. A banking or streaming app is not automatically a safe exclusion. Check the interaction with the kill switch and restore your intended routing after testing.
On mobile, split tunneling availability varies by operating system. Not all providers support it on iOS.
Tell The Difference Between ISP, Wi-Fi, And VPN Issues
Not every slow connection is caused by the VPN. Your ISP or Wi-Fi setup may be the actual problem – so check this out for your VPN troubleshooting.
Run a speed test without the VPN. If speeds are already slow, the VPN is not the cause.
Move closer to your router or switch to a wired connection and retest. If speeds improve significantly without VPN on a wired connection, your Wi-Fi is the limiting factor.
If your ISP speed is consistently low regardless of VPN use, contact your ISP rather than VPN troubleshooting.
Checking For Leaks, DNS Problems, And Privacy Risks
Another issue to consider when VPN troubleshooting is that even when a VPN appears to be working, it may be leaking your real IP address or DNS requests. A leak means your browsing activity or location could be visible to your ISP or websites, which undermines your privacy.
How To Spot An IP Leak Or DNS Leak
Is your VPN not working or is your VPN not connecting? An IP leak occurs when your real IP address is visible despite using a VPN. A DNS leak happens when your device sends DNS queries outside the VPN tunnel, exposing your browsing activity to your ISP.
Compare the actual public IP address before and after connecting with an IP-address checker. The same public address warrants investigation; a country or map label alone is not proof of a leak. Geolocation can be inaccurate, and browser-only VPNs or split tunnelling change which traffic is covered.
Compare results with the provider’s expected resolver behaviour. An unexpected or third-party resolver is not automatically proof that requests travelled outside the tunnel. Check custom DNS, browser DNS-over-HTTPS and split tunnelling with support.
If you find a leak, try switching servers, changing protocols, or enabling DNS leak protection in your VPN app settings.
Many modern VPN apps include built-in leak protection, but it’s important to verify this yourself.
Why Kill Switches Matter During Dropouts
A kill switch is designed to stop covered traffic when the tunnel fails. Without it, traffic may use the regular connection and public IP. HTTPS can still encrypt website content, but it does not preserve the VPN’s routing or conceal the same connection metadata.
Enable the kill switch in your VPN app settings if available. On some apps, it may be labeled “network lock” or “internet kill switch.”
The kill switch will block your internet until the VPN reconnects, which is intentional. If your internet cuts out frequently, check whether the kill switch is activating due to connection instability.
A kill switch is an important safety net but does not prevent all leaks.
Browser, App, And System Settings That Can Expose Traffic
Some browser features and app settings can bypass your VPN tunnel and expose traffic. WebRTC is a common browser-level leak source.
Check the provider’s browser and WebRTC guidance if a test reports an unexpected address. Behaviour depends on the browser and network configuration. Do not install an unknown extension or disable useful browser features solely because a test lists local addresses.
DNS-over-HTTPS encrypts requests to a selected resolver; it does not alone establish whether that connection bypasses the VPN. Browser-selected DNS can bypass a provider’s DNS-based filtering while the HTTPS connection remains inside the tunnel.
On mobile, check the VPN’s documented platform limitations and routing settings. App-selected DNS, operating-system features and split tunnelling can affect filtering; resolver identity alone does not show the network path.
These settings are easy to overlook, especially after browser updates.
When Log Collection Helps And When To Be Careful
You can go through VPN connection problems. Most VPN providers collect some diagnostic logs to troubleshoot connection issues. Knowing what gets logged and why is important for privacy.
If you contact your VPN provider’s support team, they may ask you to enable diagnostic logging temporarily. Enable log collection only when troubleshooting and disable it after resolving the issue.
Read the exact diagnostic-data, consent and retention terms. An activity no-logs policy does not mean support tickets or voluntarily shared client logs contain no personal data. Inspect files and redact account identifiers, tokens and private network details before sharing.
Log collection should be a temporary step, not a permanent setting.
When To Switch VPN Services Instead Of Troubleshooting Further
Some VPN problems cannot be fixed on your end. If you have tried all standard fixes and the VPN still fails regularly, the issue may be with the provider – so start your VPN troubleshooting there.
Signs The Problem Is The Provider Rather Than Your Device
How do you deal with issues such as VPN app not working, VPN setup issues, VPN kill switch problems, VPN DNS issues, or VPN server not responding? Persistent issues across multiple devices, locations, and protocols often indicate a provider-side problem.
The VPN fails on different devices using the same account. Server outages are frequent or go unacknowledged for long periods.
Speeds remain poor regardless of server or protocol. Customer support is slow or unable to help.
Recent news about security incidents, ownership changes, or data exposure is also a warning sign.
Escalate with the tests already completed. Establish whether the fault follows the account, device or network before paying for an alternative; a count of warning signs is not a diagnosis.
What To Compare Before Paying For Another Service
For VPN troubleshooting, switch providers only if the new service better fits your needs. Compare these factors before committing.
| Factor | What To Check |
|---|---|
| Server network | Number of servers and countries covered |
| Protocol support | WireGuard, OpenVPN, IKEv2 availability |
| Kill switch | Available on all platforms you use |
| No-logs policy | Independently audited where possible |
| Platform support | Covers all your devices and operating systems |
| Customer support | Live chat availability and response quality |
| Price | Monthly vs annual cost and device limits |
Look for independent audits and verified privacy policies, not just marketing claims.
Best Fit By User Type And Common Use Case
Different VPN providers suit different needs. Choosing the right one helps avoid recurring problems.
For an employer’s VPN, use the approved client and IT instructions. Travellers need compatible devices, permitted use and a fallback connection. A country count or obfuscation feature does not guarantee access.
For lawful streaming, check the service, device and your viewing entitlement; a provider-labelled streaming server does not guarantee catalogue access. For privacy, compare audit scope and dates, data handling and platform-specific controls.
For families, consider providers that support enough simultaneous connections for all devices.
For the wider selection decision, our VPN beginner guide explains what a consumer VPN can and cannot protect. Buying another subscription should follow diagnosis, not replace it.
How To Contact Support With Useful Diagnostics
The quality of information you provide to support determines how quickly they can help.
Note the exact VPN error message or behavior you see. Record which servers, protocols, and devices you have tried.
Include your operating system version and VPN app version. If you enabled diagnostic logs, have them ready to share.
Describe your network environment, such as home Wi-Fi, public Wi-Fi, or mobile data, and whether the issue happens on all networks or just one.
Good support teams use this information to identify whether the issue is account-level, server-level, or network-level.
Conclusion: Fix VPN Connection Problems In The Right Order
VPN troubleshooting works best when you move through the fixes in order. Start with your internet connection, account status, and app restart before changing advanced settings. Many VPN problems come from simple issues like unstable Wi-Fi, an expired subscription, outdated software, or a temporary server outage.
If the basics do not solve the issue, compare another server and a protocol supported by the app and device. Record the result before changing something else. For hotel Wi-Fi, complete the portal sign-in first. TCP on port 443 can help on some networks, but neither it nor a particular protocol guarantees speed or access.
Once connected, compare the visible public IP with your disconnected baseline and use the provider’s leak guidance. A location-label mismatch or third-party DNS resolver alone does not prove a leak. Check the kill switch and browser settings without claiming that every device or app has been tested.
If the failure persists, send support the exact error, app and OS versions, networks tested and the server/protocol results. Use another permitted connection when access is urgent. Compare a replacement only when the evidence points to a persistent compatibility or service problem.
Frequently Asked Questions
This section covers specific VPN problems that do not fit a single VPN troubleshooting step. Each answer is brief and practical.
Why does my VPN connect but I still can’t access internal websites or network drives?
For an employer-managed VPN, give IT the affected hostname, error and time. Internal access may depend on routes, DNS, permissions or server-side policy; a connected icon does not identify the cause. Do not substitute public DNS or change managed profiles without their instructions.
How do I fix a VPN that won’t connect from home Wi-Fi but works on mobile data?
Compare the same device on both networks. Restart the home router and try the app’s automatic protocol or another supported option. OpenVPN TCP on port 443 may help where supported, but does not mimic HTTPS exactly or guarantee access. Ask the network operator before changing router settings.
What steps should I take when a VPN keeps disconnecting or dropping frequently?
Check the Wi-Fi or mobile signal, update the app, then compare another server and supported protocol. Keep the kill switch enabled for protected use. If it blocks internet during failures, restore the tunnel or deliberately pause protection only for a controlled test.
Why is my VPN connected but my internet becomes very slow or stops working?
Separate slow performance from no internet. Check the underlying network, any captive portal, server choice and kill-switch state before changing DNS. Test one change at a time; use the provider’s documented resolver settings rather than a random replacement.
How can I troubleshoot VPN setup and tunnel issues on a FortiGate firewall?
This is an administrator task. Record the firmware, tunnel type, exact error and relevant logs, then use Fortinet’s documentation for that version or contact your IT team. Consumer-app protocol changes are not a general FortiGate repair procedure.
Why won’t a VPN work on my Android phone or iPhone, and how can I resolve it?
Update the app and restart the phone. Test another network and check the VPN’s supported permissions or background-running settings. On iPhone, inspect profiles and interacting security apps using Apple’s guidance. Do not delete an employer-managed profile or reset networking without approval.
What is VPN and basic troubleshooting?
A VPN routes covered traffic through an encrypted tunnel to a VPN server. Basic troubleshooting separates the underlying internet connection from the app, account, server and protocol. It does not require buying a new subscription.
How to troubleshoot VPN issues?
Check the underlying internet connection and kill-switch state, restart and update the app, confirm the account, then try another server or supported protocol. Use official compatibility instructions for security software; do not routinely disable the firewall.
Why is my VPN suddenly not working?
Possible causes include an outage, an account or plan change, unstable networking, a device update, blocked traffic or a conflicting filter. Compare another server and network and record the error; the symptom alone does not establish which cause applies.
How do you reset your VPN?
Start by restarting the app and device. Reinstall only through the official provider or app store after preserving needed settings. A Windows network reset is a last resort and may require reinstalling VPN clients or virtual switches; ask IT first on managed devices.
Related Articles
Share this article
Stuart Kerr Spindlow is Impulsec’s Publisher, Chief Editor and Lead Reviewer. He writes and maintains coverage of consumer cybersecurity and digital-safety software, with a focus on practical suitability, limitations and the evidence behind product claims. Read Stuart’s full profile.