KillSwitch

KillSwitch is a feature that helps prevent accidental IP address and DNS request leaks if an active VPN connection unexpectedly drops.

When KillSwitch is enabled, network traffic should go through the protected VPN tunnel. If the VPN connection breaks unexpectedly, AmneziaVPN blocks internet access so that traffic does not go through the regular connection.

If you disconnect VPN manually, KillSwitch should not block the regular internet connection.

• Windows, macOS, Linux — KillSwitch is available in AmneziaVPN settings.
• Android — AmneziaVPN has no built-in KillSwitch feature. To block traffic without VPN, use Android system settings: Always-on VPN and Block connections without VPN.
• iOS — AmneziaVPN has no built-in KillSwitch feature.

Windows, macOS, and Linux

1. Open AmneziaVPN.
2. On the bottom panel, click ⚙️ (gear icon).
3. Go to Connection.
4. Click KillSwitch.
5. Enable the switch in the KillSwitch section.

If you need to keep access to specific DNS servers while KillSwitch is active, add them to DNS KillSwitch exceptions.

Android

On Android, you can block connections without VPN in the system settings.

Section names and the path to these settings may differ depending on the Android version and the device manufacturer's interface.

Block connections without VPN cannot be enabled separately. First enable Always-on VPN.

Before setup, connect to the required location in AmneziaVPN. When you enable Always-on VPN, Android pins the current AmneziaVPN connection as permanent.

1. Open AmneziaVPN.
2. Choose the required location and connect to VPN.
3. Open Android system settings.
4. Go to VPN.
5. Click ⚙️ (gear icon) next to AmneziaVPN.
6. Enable Always-on VPN.
7. Enable Block connections without VPN if you need to block internet traffic without an active VPN connection.

iOS

On iOS, network behavior after a VPN connection is interrupted is controlled at the system level. There is no separate KillSwitch switch in the AmneziaVPN app.