The easy answer is usually the wrong one: there is no universal fastest server, safest free app, or protocol that wins on every network. The useful question is what fails in your own setup.
Editorial rule: keep the original evidence boundaries. Do not turn untested speed, access, pricing, or support claims into facts.
Where this advice breaks down
- Another reviewer’s speed result is not your baseline.
- “Unlimited” does not mean unlimited server choice or features.
- Protocol names do not guarantee performance or stability.
Match the symptom first
| When it drops | Most likely cause | Go to |
|---|---|---|
| After the screen locks | Power management | Step 2 |
| Switching Wi-Fi ↔ mobile | Auto-connect not enabled | Step 3 |
| Reconnects but nothing loads | DNS left behind | Step 4 |
| Internet dead after disconnect | Kill switch still active | Step 1 |
| Randomly, several times an hour | Protocol or server | Step 5 |
| Only on one network | Network-level filtering | Step 6 |
Step 1 — Kill switch
A kill switch blocks ordinary traffic when the tunnel drops. That is its job. But if the client crashes while the switch is armed, you are left with no connection at all and no obvious reason why.
Check it:
- Relaunch the client, connect properly, then disconnect properly
- If that does not restore traffic, disable the kill switch temporarily
- If traffic returns, you have found the cause
Names vary: “Kill Switch”, “Network Lock”, “Block connections without VPN”, “Always-on”.
Leaving it off permanently means traffic passes unprotected whenever the tunnel drops. Turn it back on once you have diagnosed the issue.
Step 2 — Power management
Operating systems suspend background activity to save battery, and VPN clients are not exempt.
- Battery saver mode — turn it off and see whether the drops stop
- Background activity — make sure the VPN client is permitted
- Battery optimisation — on Android, exclude the VPN app
- Sleep settings — on desktop, check whether the network adapter powers down
If disconnections line up with the screen turning off, this is almost always where the answer is.
Step 3 — Auto-connect
Most clients offer some form of automatic reconnection: “auto-connect”, “connect on demand”, “connect on untrusted networks”. When it is off, moving between networks leaves you disconnected until you notice.
Enable it, then test by switching from Wi-Fi to mobile data and back.
Step 4 — DNS left behind
When a tunnel closes without cleaning up, DNS settings can remain pointed at servers that are no longer reachable. The symptom is distinctive: the connection appears fine but nothing resolves.
- Flush the local DNS cache — on Windows,
ipconfig /flushdns - Confirm the adapter’s DNS setting has returned to automatic
- Test whether a non-browser app works while the browser does not
How DNS sits relative to the tunnel is covered in server region, NAT, and DNS.
Step 5 — Protocol and server
If the drops are random rather than tied to an event, the transport itself may be the issue.
- Switch protocols in settings and use the same endpoint for comparison
- Try a different server — individual endpoints can be unstable
- Note whether “automatic” behaves differently from an explicit selection
- Update the client; connection handling changes between versions
Step 6 — Network-level causes
If it only happens on one network:
- Test on mobile data — if stable there, the issue is that network
- Check whether a captive portal is interfering
- Some managed networks apply their own traffic handling
- Restart the router and check for firmware updates
- Check whether security software is intercepting the connection
Ordered checklist
- ☐ Relaunched client, connected and disconnected cleanly
- ☐ Kill switch tested by disabling temporarily
- ☐ Battery saver off, background activity allowed
- ☐ Auto-connect enabled and tested across networks
- ☐ DNS cache flushed, adapter settings verified
- ☐ Protocol changed, same endpoint
- ☐ Different server tried
- ☐ Client updated
- ☐ Tested on a second network
- ☐ Router restarted, firmware checked
FAQ
Should I just leave the kill switch off?
It is more convenient, but traffic then passes unprotected during any drop. On an untrusted network that defeats the point of connecting.
Everything worked before an update. What changed?
Client updates sometimes reset protocol selection or connection handling. Check those settings first before assuming a deeper problem.
Why does it only drop on my phone?
Mobile operating systems manage background processes far more aggressively than desktops. Steps 2 and 3 cover most of these cases.
I uninstalled the client and internet is still broken.
Virtual adapters or DNS settings can survive uninstallation. Work through step 4, then restart.
Could my router be the cause?
Yes. Failing hardware, saturated processing, or firmware issues all produce intermittent drops. A restart and firmware check are quick to rule out.
Is a work laptop different?
Often yes. Managed devices carry security policies, and personal VPN use may conflict with them. Check with IT before changing configuration.
When the problem is not the tunnel
Some symptoms look like disconnection but originate elsewhere. Two are worth ruling out.
The connection holds but performance is poor. That is a different problem. Slow, unstable, or lossy connections have local causes a tunnel cannot address — the separation is set out in packet loss, jitter, or high ping.
Peer-to-peer features degrade after connecting. Matchmaking taking longer, hosting failing, or voice chat dropping while the game itself works usually points at NAT behaviour rather than an unstable tunnel. See server region, NAT, and DNS.
If you are measuring performance while the tunnel is dropping, the numbers will not be usable — fix the drops first, then compare using the testing method.
Closing
Kill switch, power management, auto-connect, DNS, protocol, network. In that order, one change at a time.
Changing three settings at once and finding it works tells you nothing you can use the next time it happens.
Menu names and setting locations vary by client, device, and OS version. Consult your provider’s and device maker’s official documentation for exact paths. VPN use is subject to local law and to the terms of service of the platforms you use.
Who should not use this approach
- Anyone looking for a single universal winner
- Users who will not test against a no-VPN baseline
- Anyone treating app-store ratings as a security audit
When this approach actually helps
- People who test multiple routes under the same conditions
- Users with a clear priority: speed, privacy, stability, or cost
- Readers who verify provider claims against current official terms