This guide shows you how to turn on Android's Always-on VPN and Block connections without VPN for NymVPN, so your device stays protected automatically and does not fall back to an unprotected connection. Setting up both together is also what stops the Android "Disconnected from always-on VPN" notification.
How to enable it
- Open the NymVPN app on Android.
- Go to Settings and open the Kill switch option.
- When prompted, open Android's VPN settings for NymVPN.
- Enable Always-on VPN.
- Enable Block connections without VPN on the same screen.
With both enabled, your device comes up protected after every reboot, stays protected if the tunnel drops, and stops showing the disconnect notification.
What the two settings do
Always-on VPN and Block connections without VPN are separate Android system settings that work together. NymVPN's own kill switch is a third layer that is always active from the moment you open the app, with nothing to configure.
Always-on VPN
Starts NymVPN automatically, including after a reboot, and keeps trying to hold the tunnel open. On its own, if the tunnel drops, Android still allows traffic through your normal connection until NymVPN reconnects.
Block connections without VPN
Also called lockdown mode. Whenever the tunnel is not up for any reason, no traffic leaves your device at all. This is the setting that removes the unprotected fall-back: instead of letting packets through, Android blocks them until NymVPN is connected again.
About the "Disconnected from always-on VPN" notification
If you turn on Always-on VPN but leave Block connections without VPN off, Android shows a "Disconnected from always-on VPN" notification whenever the tunnel briefly drops. That message comes from Android, not NymVPN, and it means your device is online without the VPN for a moment. Enabling Block connections without VPN closes that gap, so there is nothing left to warn about and the notification stops.
If the tunnel keeps dropping
Frequent disconnects are usually Android battery optimisation pausing the app in the background. Exclude NymVPN from battery optimisation so the system stops closing the tunnel. If disconnects continue, see What to do if the VPN connection fails?
Câu hỏi liên quan
Does the kill switch work in both Fast and Anonymous mode?
Yes. The kill switch operates at the device level, regardless of which mode you connect with. See What's the difference between NymVPN Fast & Anonymous mode?
Will Always-on VPN drain my battery?
The impact is small. WireGuard, which powers Fast mode, is one of the most battery-efficient VPN protocols available. See What is WireGuard?
Can I still reach local devices like printers with the kill switch on?
Use the LAN bypass setting for that. Xem thêm tại mục Tính năng bỏ qua LAN dùng để làm gì?
Is my traffic exposed while the notification is showing?
Briefly, yes: while the tunnel is down and Block connections without VPN is off, traffic can use your normal connection. Enable Block connections without VPN to remove that gap. To confirm your connection is not leaking, see How can I verify the security of my VPN connection?
Some apps fail while reconnecting after I turned this on. Is that normal?
Yes, that is Block connections without VPN doing its job: traffic is blocked while the tunnel is down and resumes as soon as NymVPN reconnects.