Mobile VPN settings · sources checked 2026-11-03
Always-on VPN on iPhone and Android: where to find the controls
Find Android Always-on VPN and iPhone VPN On Demand settings, understand Apple’s managed Always On limits, and follow official platform guidance.
Short answer: are Always-on VPN settings the same on iPhone and Android?
No. Android Help documents a user-facing Always-on VPN setting for a VPN profile, and supported configurations can add a separate Block connections without VPN control. On iPhone, VPN On Demand can automatically start a configured VPN under rules; Apple’s Always On VPN is a distinct organization-managed IKEv2 feature that requires device supervision. An app may also offer its own automatic-connect or disconnect protection. The labels and coverage are not interchangeable.
Where do I find Always-on VPN on Android?
On supported Android devices, open Settings > Network & internet > VPN, select the settings icon next to the VPN, then turn on Always-on VPN. If the menu differs, search Settings for VPN or check the device maker’s help. Android Help notes that a VPN configured through an app may not expose the system Always-on option. A work profile or administrator can control which settings are available. See the detailed Android Always-on guide for the separate Block connections without VPN switch and app-list effects.
What does Block connections without VPN change on Android?
When the control is available and enabled, Android blocks traffic that does not use the VPN. Android Developers warns that apps outside an allowed or disallowed app list can lose network access; a block can also interrupt apps that need to bypass the VPN. Check routing exceptions and the device’s managed profile before relying on the setting. Always-on starts and maintains the VPN service lifecycle, while the VPN app remains responsible for its server connection.
Where do I configure automatic VPN connection on iPhone?
Start in the VPN provider’s iPhone app and review its automatic-connect or Connect On Demand options. Apple’s VPN overview says VPN On Demand is configured with rules in a VPN configuration profile and can automatically establish a connection when conditions match. A profile may be installed by an organization or provider. To review installed profiles, use Settings > General > VPN & Device Management; available controls depend on the app, profile, and iOS version. Apple’s iPhone VPN settings guide and Platform Deployment documentation explain supported configurations.
Can a regular iPhone user turn on Apple Always On VPN?
Apple documents Always On VPN for IKEv2 as an organization-controlled feature on iOS and iPadOS that requires device supervision. After the organization installs its profile, it activates without user interaction and remains active until the profile is removed. This is different from consumer VPN apps’ automatic-connect or kill-switch options. Check with a work or school administrator before changing a managed profile.
Does automatic connection mean all traffic is blocked when the tunnel is down?
No. Starting a VPN automatically and blocking traffic outside it are different behaviors. Android has a separate Block connections without VPN control where supported. Apple’s On Demand rules determine when a connection starts or stops; Apple’s managed Always On feature describes stricter organization-managed behavior. A VPN app may implement additional protections, but check its current documentation. A single browser IP check cannot audit every app, DNS request, transition, or failure case. See the Android/iPhone kill-switch guide for those limits.
What should I do if enabling the setting breaks connectivity?
First check whether the VPN is connected, whether an app was excluded or blocked, and whether the phone is managed by work or school. On Android, blocking non-VPN connections can intentionally leave apps offline while the tunnel is unavailable. On iPhone, review the app’s connection status and any installed profile, then follow the provider’s support steps. Avoid disabling a managed policy or testing with sensitive activity. For Wi-Fi and captive-portal checks, see the VPN Wi-Fi troubleshooting guide.
Sources
- Android Help: Connect to a VPN on Android and manage Always-on VPN (accessed 2026-11-03)
- Android Developers: Always-on VPN and blocked connections (updated 2026-10-23; accessed 2026-11-03)
- Android Enterprise Help: Always-on VPN and blocking non-VPN connections (accessed 2026-11-03)
- Apple iPhone User Guide: Configure VPN settings (accessed 2026-11-03)
- Apple Platform Deployment: VPN overview, On Demand, and Always On VPN (accessed 2026-11-03)
- Apple Developer: VPN On Demand rules (accessed 2026-11-03)