If your VPN disconnects after a few minutes, when your screen locks, or while your device switches between Wi-Fi and mobile data, start by narrowing down when the drop happens. A VPN connection depends on several things working together: the device’s network, the VPN app, its selected server, and the operating system’s rules for background activity. A brief interruption can come from any one of them, so repeatedly changing servers without checking the pattern may hide the cause rather than fix it.
Identify when the connection drops
First, look for a repeatable trigger. Does the VPN disconnect while the device is idle, only on one Wi-Fi network, during a call, or whenever you leave home? Note whether the app reports a disconnection, keeps showing “connected” while traffic stops, or reconnects automatically. Those are different symptoms: a full disconnect points toward a lost tunnel or an app being stopped, while a connection that appears active but cannot pass traffic may involve routing, DNS, or a server-side issue.
Test one change at a time. If you restart the phone, change the protocol, replace the server, and disable battery restrictions all at once, you may restore the connection but won’t know which change mattered. A short troubleshooting note can help: record the device, operating system, network type, VPN mode, selected server, approximate time of the drop, and any error text. Avoid posting account details, passwords, full configuration links, or unredacted diagnostic logs in a public forum.
- ✅ Check whether the drop occurs on one network or on every network you can safely test.
- ✅ Compare what happens with the screen on and after the device has been idle.
- ✅ Note whether the connection returns by itself or requires you to tap Connect.
- ❌ Don’t assume that an unchanged “connected” label proves traffic is still passing through the VPN.
- ❌ Don’t run two VPN or proxy apps at the same time while diagnosing a drop.
Also check whether another app or system feature is managing the network. A work profile, security app, firewall, private DNS setting, or second proxy client can affect routing or compete for the device’s VPN slot. On desktop systems, proxy settings and a virtual network interface may behave differently: system-proxy mode covers applications that honor the system proxy, while TUN mode routes traffic through a virtual interface. The exact behavior depends on the client and its rules.
Check the network and VPN client
Before changing advanced settings, make sure the underlying internet connection is stable. Disconnect the VPN and try loading a few ordinary websites or using a service that does not depend on the VPN. If those also stop working, troubleshoot the Wi-Fi, mobile connection, router, or local network first. A VPN cannot keep a tunnel alive when the device has no usable route to the internet.
Next, update the VPN app from its official distribution channel and restart it. If the app has a subscription or configuration refresh option, use the app’s normal refresh process and confirm that the selected server is still available in the list. Avoid deleting a configuration or reinstalling the app before checking whether you can restore it; on some clients, removing local data also removes imported settings.
Try another server only after checking whether the original server is the likely problem. If one server disconnects repeatedly but another remains connected on the same device and network, the original route or server may be temporarily unsuitable. If every server drops at the same moment, focus first on the local network, device power management, app permissions, or conflicting software. When comparing routes, change only the selected server and keep the rest of the setup the same.
VPN protocols and transport options can react differently to a network’s restrictions and interruptions. If your client offers more than one supported protocol, test another option using the app’s controls, then observe whether the same trigger still causes a drop. Don’t copy protocol names or settings from an unrelated client: a configuration intended for one app may not work in another, and some options are controlled by the provider rather than exposed to users.
If the app reconnects but websites remain unreachable, check the client’s routing mode and rules as well as its connection status. A selected server, a running tunnel, and an application actually using that tunnel are related but separate checks.
If you use a third-party client such as Clash Verge, sing-box, or Shadowrocket, confirm that the subscription imported successfully and that the active profile has not been replaced by an older one. Check the client’s mode and rules, and make sure a second VPN app is not trying to take control of the same network interface. When the symptoms began immediately after editing a profile, restore the last known working configuration before making further changes.
Step-by-step: isolate the cause without changing everything
Use this sequence to make a controlled comparison. You do not need to run every test if the cause is already clear, but keep the order so that each result helps narrow the next step.
- Confirm the baseline. Turn off the VPN and check whether the device’s regular internet connection works. If it does not, resolve the underlying connection first.
- Start with the usual setup. Connect using the server and settings that normally fail. Keep the device awake while you confirm that a few routine pages or apps load. If you need to check whether the exit route changed, use the IP lookup page before and after connecting; this confirms a routing change for that test, not that every app uses the same route.
- Test the suspected trigger. If the problem happens after screen lock, leave the device idle as you normally would. If it happens while moving between networks, test that transition only when it is practical and safe. Note the app’s message and whether traffic stops before or after the status changes.
- Change one variable. Try another server, another supported protocol, or a different network—but not all at once. Reconnect and repeat the same test. If you changed networks, remember that captive portals, managed Wi-Fi, and router policies can affect VPN traffic.
- Restore the setting if it makes things worse. Return to the original server or option before testing a different variable. This prevents a series of changes from making the setup harder to understand.
- Save useful evidence. Record the operating-system version, app version, connection mode, network type, server label, approximate time, and exact error wording. Redact account identifiers, access tokens, subscription URLs, and private IP details before sharing a screenshot or log.
For app-specific checks, test both a browser and the application that prompted the troubleshooting. Some apps follow the system proxy while others use their own network stack. If the browser works but one app does not, inspect that app’s routing rules, proxy support, and permissions instead of concluding that the whole VPN connection is unstable.
If you need a refresher on importing a subscription and checking the client’s basic connection state, follow the getting started guide. Menu names can differ between official clients and third-party apps, so use the instructions for the app you actually have installed.
Platform-specific fixes for Windows, Android, iPhone, and macOS
Windows: check sleep, adapters, and competing software
If drops occur after the PC sleeps or the display turns off, check Windows power settings and the VPN client’s behavior after wake. A wireless adapter may reconnect to the access point while the VPN tunnel does not recover cleanly. Test by disconnecting and reconnecting the VPN after wake, then check whether the problem also occurs while the PC stays awake. If the VPN works only after reconnecting, update the client and wireless adapter driver through their official update channels.
Check whether another VPN, firewall, endpoint-security tool, or proxy configuration is active. One client may leave a virtual adapter or routing rule that conflicts with another. Disable or exit only software you recognize and are allowed to manage; on a work-managed device, ask the administrator before changing security controls. If you use TUN mode, compare it with the client’s system-proxy mode only if both are supported and you understand that they may cover different applications.
Android: review battery and background restrictions
Android manufacturers may apply additional battery management beyond the standard system settings. If the VPN drops when the screen locks, open the app’s battery or background-usage settings and allow the VPN client to run in the background where that option exists. Menu names differ by Android version and manufacturer, so search Settings for the app name or “battery optimization” rather than relying on a path that may not match your device.
Also check Android’s VPN settings for an always-on option or a setting that blocks connections without a VPN. These can help maintain a preferred connection, but a strict block may also make the internet appear unavailable while the VPN is reconnecting. Change such options only if you understand their effect and can restore the original choice. If your device switches between Wi-Fi and mobile data, test each network separately before testing the transition.
iPhone: check VPN status, profiles, and network transitions
On iPhone, open the VPN app and confirm that the active connection is the one it manages. If the device has a work or school configuration profile, another VPN app, or a security app that manages connections, those settings may affect which VPN can run. Don’t remove a managed profile without permission. If the VPN drops during a Wi-Fi-to-cellular transition, check whether the phone’s mobile data connection works on its own and whether the app reconnects after the transition.
When an iPhone appears to stay connected but cannot load anything, toggle the VPN off and back on using the app, then test again. If the problem returns, update the app and iOS when practical, and check whether the app offers a supported automatic or on-demand connection option. Availability and behavior vary by client and configuration; an option shown in one VPN app may not exist in another.
macOS: check network extensions and Wi-Fi changes
On macOS, a VPN may rely on a system network extension or a configuration approved in system settings. If macOS reports that an extension needs approval, follow the client’s official instructions rather than trying to bypass system protections. After a macOS update, reopen the VPN app and check its permissions and connection status. If the problem began after installing another network utility, firewall, or VPN, test whether it is competing for routing or filtering traffic.
For drops during Wi-Fi changes or sleep, check whether ordinary internet access returns before the VPN does. Reconnect from the app and observe whether it chooses the same server and mode. If a browser works but another application does not, check the client’s routing rules and the application’s proxy behavior. Do not delete VPN profiles or network settings as a first step; record the current configuration and consult the client’s instructions before removing anything.
When to switch servers or contact support
Try a different server when the drop is repeatable on one selection but not on another under otherwise similar conditions. If the issue follows one Wi-Fi network, test another trusted network where possible; if it follows the device across networks, focus on the client and operating system. Avoid judging a server from one brief test. A momentary interruption can come from a network handoff, while a repeated failure under the same conditions is more useful evidence.
Contact support when the client repeatedly fails to connect, a particular error persists after a client restart and a basic network check, or several servers fail in the same way. Include the details that help reproduce the problem: device and operating-system version, VPN app and version, connection mode, server label, network type, what you were doing when it dropped, and the error message. Say which troubleshooting steps you tried and whether each one changed the result. Use a private support channel for diagnostic files and follow instructions for redacting sensitive information.
A support request is less useful if it only says “the VPN is unstable.” A concise timeline helps distinguish a tunnel failure from a device sleeping, a Wi-Fi handoff, an app-specific routing rule, or an unavailable server. If the problem affects a managed work device, include whether organization policies limit changes and ask the administrator before altering profiles, firewalls, or security software.
4
platforms covered
1
change at a time
The figures above describe the scope of this troubleshooting guide, not a guarantee about connection stability. No single setting can prevent every drop: the device, access network, VPN client, and selected route all influence whether a tunnel stays available.
VPN disconnection FAQ
Why does my VPN disconnect when I lock the screen?
The operating system or device manufacturer may restrict background activity to save power, or the network may be reconnecting while the device is idle. Check the VPN app’s background and battery permissions, then test whether the VPN remains connected while the device is awake. On Android, manufacturer-specific battery controls can matter; on Windows and macOS, sleep and wireless-adapter behavior may be relevant. Change one setting at a time and check the result.
Why does the VPN drop when I switch between Wi-Fi and mobile data?
The device’s network route changes during a handoff, and an existing VPN tunnel may need to reconnect over the new connection. Check that both Wi-Fi and mobile data work independently, and see whether the VPN app reconnects automatically after the change. If only one network causes repeated drops, the network’s firewall, captive portal, or access policy may be involved.
The app says “connected,” but nothing loads. What should I do?
Reconnect from the VPN app and test an ordinary website, then compare a browser with the application that is failing. Check the client’s routing mode and rules, DNS-related options, and whether another proxy or VPN app is active. A connected label alone does not prove that every application is using the tunnel or that the route can reach its destination.
Should I always change servers when the VPN disconnects?
No. Change servers when the failure appears limited to one selection and you can compare it under the same device and network conditions. If every server drops at the same time, investigate the device, local network, background restrictions, or conflicting software first. Record the original server and settings so you can return to them if another selection does not help.