Platform comparison · sources checked 2026-11-03
Android vs iPhone VPN kill switches: what is actually blocked?
Compare Android's Always-on and Block connections without VPN controls with iPhone VPN app and On Demand behavior. Features vary by provider and configuration.
Short answer: how do Android and iPhone controls differ?
Android documents a system Always-on VPN option and, on supported configurations, a separate Block connections without VPN option that blocks traffic outside the VPN. On iPhone, Apple documents VPN On Demand rules that automatically start or stop a configured VPN based on conditions; those rules are not the same thing as a blanket consumer-facing lockdown switch. A VPN app may add its own controls. Check the exact app, OS version, and settings rather than assuming the same feature name means the same coverage.
What can I configure on Android?
Android Help describes turning Always-on VPN on in Settings > Network & internet > VPN, though the route and availability vary by device and app. Android Enterprise documentation separately describes blocking non-VPN connections. With that block enabled, excluded apps can lose network access; if the VPN is unavailable, ordinary connections may be blocked. Managed-device policies and app routing can change what you can edit. See the Android Always-on guide for setup details.
What does VPN On Demand do on iPhone?
Apple's Network Extension documentation says On Demand rules can start or stop a VPN according to conditions such as the network or a connection request. A rule can intentionally disconnect on a matching network, so automatic connection behavior alone does not establish that every traffic path is blocked whenever a tunnel is down. On Demand configuration can be managed by a VPN app or a device profile; available controls depend on that setup.
Does an iPhone VPN app kill switch guarantee all traffic stays in the tunnel?
No. App-specific behavior and supported configurations differ, and a provider's description is not an independent audit of every iOS version or traffic type. For example, Proton documents an iOS kill switch and notes that some DNS requests from Apple services may bypass its VPN. Read your provider's current limitations and test only non-sensitive traffic; do not infer universal coverage from a single browser result.
How should I check the setting safely?
First identify whether the control covers accidental disconnects, manual disconnects, selected apps, or all device traffic, and whether split tunneling is enabled. On Android, inspect the VPN profile's Always-on and Block connections without VPN settings if present. On iPhone, check the VPN app's current security options and whether a profile or managed configuration applies. For a low-risk observation, compare a public-IP check before and after connecting using a separate test service; do not force a disconnect or use sensitive accounts. A browser check cannot prove behavior for every app, DNS request, brief transition, or failure scenario.
What should I do if the internet stops working?
That can be the intended result of a blocking control while the VPN reconnects, or it can indicate a network, profile, or app problem. Check the VPN status, allowed or excluded apps, and the provider's troubleshooting steps. Avoid disabling protection while handling sensitive activity. For work or school devices, ask the administrator before changing a managed VPN profile.
Are these controls the same as anonymity?
No. They address routing when a VPN is disconnected or reconnecting. They do not prevent websites from recognizing accounts, cookies, or browser signals. A VPN also shifts some network visibility to its provider; see the VPN visibility guide for that distinction.
Sources
- Android Help: Connect to a VPN on Android and manage Always-on VPN (accessed 2026-11-03)
- Android Enterprise Help: Always-on VPN and blocking non-VPN connections (accessed 2026-11-03)
- Apple Developer: VPN On Demand Rules (accessed 2026-11-03)
- Apple Platform Deployment: VPN overview and On Demand (accessed 2026-11-03)
- Proton VPN Support: Kill switch behavior and iOS notes (provider-specific; accessed 2026-11-03)