VPN kill switch: Put your trust in Network Lock
Network Lock is the ExpressVPN kill switch. It keeps your data safe even if your VPN connection drops, blocking all internet traffic until protection is restored.
Even when the power flickers, you change Wi-Fi networks, or your computer goes to sleep, your network remains secure. It’s a default feature on ExpressVPN apps for Windows, Mac, Linux, and routers.
What is a VPN kill switch?
A VPN protects your privacy and lets you browse securely. But what if your VPN connection gets interrupted? Your browser and other apps won’t warn you that you are connecting without protection. That’s where a VPN kill switch comes in.
If your VPN drops, the kill switch disables all internet traffic and also prevents any data from leaving your device unprotected. This proactive measure shields your IP address and other sensitive information, defending against threats that can compromise your data security even without interruptions in the VPN connection. Once your VPN connection is restored, your secure internet access resumes.
Why do I need a VPN kill switch?
If you need a VPN, you need a kill switch. A kill switch guarantees that your device won’t leak your IP address or location or send any of your data unencrypted. This protects your identity and communications from being observed or intercepted.
Network Lock, the ExpressVPN kill switch, keeps your internet traffic from ever escaping outside the encrypted VPN tunnel, so your information is always safe.
Network Lock: How it works
Robust firewall rules
Network Lock begins with a “block everything” firewall rule on all desktop platforms. A second rule then allows only VPN-routed traffic. These rules stay active through the entire connection cycle, including during reconnects and disruptions, ensuring consistent protection.
Comprehensive traffic management
Network Lock covers all types of network traffic—IPv4, IPv6, and DNS requests—to prevent any data from leaking outside the VPN tunnel. This total coverage ensures your personal information and activities remain private, even amid network instability or when switching Wi-Fi networks.
When is the VPN kill switch activated?
Network Lock is enabled by default. Whenever you connect to the VPN, Network Lock becomes active, and it stays active until you choose to disconnect. It keeps your connection secure when:
-
When you switch between VPN servers
There is a small time window between disconnecting from your old server and connecting to your new one. If your apps send data during that window, your IP could be revealed if Network Lock is off.
-
When malicious apps attempt to bypass the VPN
The kill switch activates when malicious or unauthorized apps attempt to bypass the VPN, blocking their traffic to maintain data security.
-
When your bandwidth gets throttled
When networks operate beyond capacity, internet service providers have to throttle the bandwidth of each user. This leads to unreliable connections and could destabilize your VPN and result in leaks if Network Lock is off.
-
When public Wi-Fi is unstable
When your Wi-Fi signal is weak, your device will constantly switch between cellular and Wi-Fi connections. This can interfere with the connection between your computer and your VPN server.
Is Network Lock automatic?
Indeed it is! Network Lock is enabled by default. As long as you do not disable it, your internet traffic will automatically be blocked if the VPN drops or your network is disrupted. This proactive measure safeguards against interrupted connections and prevents any off-VPN traffic from leaking out, serving as an essential form of leak protection. When the VPN connection is back up, you’ll be unblocked and back in action in just moments.
Windows, Mac, and Linux users can turn off Network Lock with a few clicks. Linux users can also toggle the "Enable at all times" option, which prevents leaks even when the VPN is turned off. (Turning off Network Lock is not recommended, and it cannot be disabled on the ExpressVPN app for routers.)
ExpressVPN apps with Network Lock
App for routers
When you secure your router with ExpressVPN, Network Lock ensures that every device connected to that router stays protected, unless you exclude that device with split tunneling. Devices that are set “No VPN” or “MediaStreamer” will not be affected by Network Lock.
Apps for Mac and Windows
Network Lock keeps your laptops and desktops secure no matter where you are. The ExpressVPN kill switch safeguards your privacy even when your internet connection is in flux. And the default setting keeps Network Lock from interfering with local devices, like printers.
GUI and CLI app for Linux
Breathe easy when your Linux computers are using ExpressVPN, no matter where you are. ExpressVPN's Linux GUI app has Network Lock on by default, and you can also toggle on "Enable at all times" to prevent leaks even when the VPN is turned off.
Network Protection for Android and iOS
On Android, ExpressVPN offers a feature similar to a kill switch, accessible through the Android system settings. However, it's important to note that this setting may not provide complete leak protection, particularly in split tunneling configurations or when accessing local devices. To block internet access when your VPN connection drops while preserving access to local devices and split tunneling, keep the setting under Network Protection in its default position, toggled on.
On iOS, you can also enhance your data security by keeping the setting under Network Protection toggled on. This default position will block internet access whenever the VPN connection is interrupted, but it may disrupt features like media casting and Personal Hotspots.
Frequently asked questions
Do all VPN services include a kill switch?
No, some VPN services do not include a kill switch. However, ExpressVPN includes a kill switch called Network Lock. If your VPN disconnects, Network Lock stops all network traffic, protecting your IP address and other sensitive information.
How do you turn on the kill switch in ExpressVPN?
Network Lock, ExpresssVPN kill switch, is enabled by default and will engage automatically if needed. Unless you disable it, your network traffic is protected without any effort on your part.
How do I disable the VPN kill switch?
You can disable Network Lock, the ExpressVPN kill switch, by following these instructions. Disabling Network Lock is not recommended. Without it, your traffic may be briefly unprotected if the VPN connection is interrupted, which can happen when the power flickers, your computer goes to sleep, or you switch between Wi-Fi networks.
What if the ExpressVPN kill switch is not working?
If you are having problems with Network Lock, you can try restarting your device and then restarting the ExpressVPN app. If that does not resolve your issue, please contact Support.
Get the best VPN kill switch and protect yourself
If you need a VPN with a kill switch that never lets you down, go with ExpressVPN.
Try it now, totally risk-free. If you’re not satisfied with Network Lock, contact Support and get a full refund within 30 days. It’s that simple.