This guide shows you how to turn on Android's Always-on VPN and Block connections without VPN for NymVPN, so your device stays protected automatically and does not fall back to an unprotected connection. Setting up both together is also what stops the Android "Disconnected from always-on VPN" notification.
How to enable it
- 在您的设备上打开 NymVPN 应用程序。
- 前往设置并打开断网保护选项。
- When prompted, open Android's VPN settings for NymVPN.
- Enable Always-on VPN.
- Enable Block connections without VPN on the same screen.
With both enabled, your device comes up protected after every reboot, stays protected if the tunnel drops, and stops showing the disconnect notification.
What the two settings do
Always-on VPN and Block connections without VPN are separate Android system settings that work together. NymVPN's own kill switch is a third layer that is always active from the moment you open the app, with nothing to configure.
始终开启的 VPN（Always-on VPN）
Starts NymVPN automatically, including after a reboot, and keeps trying to hold the tunnel open. On its own, if the tunnel drops, Android still allows traffic through your normal connection until NymVPN reconnects.
屏蔽未使用 VPN 的所有连接（Block connections without VPN）
Also called lockdown mode. Whenever the tunnel is not up for any reason, no traffic leaves your device at all. This is the setting that removes the unprotected fall-back: instead of letting packets through, Android blocks them until NymVPN is connected again.
About the "Disconnected from always-on VPN" notification
If you turn on Always-on VPN but leave Block connections without VPN off, Android shows a "Disconnected from always-on VPN" notification whenever the tunnel briefly drops. That message comes from Android, not NymVPN, and it means your device is online without the VPN for a moment. Enabling Block connections without VPN closes that gap, so there is nothing left to warn about and the notification stops.
If the tunnel keeps dropping
Frequent disconnects are usually Android battery optimisation pausing the app in the background. Exclude NymVPN from battery optimisation so the system stops closing the tunnel. If disconnects continue, see What to do if the VPN connection fails?
相关问题
“断网保护”功能在“快速模式”和“匿名模式”下都有效吗？
是的。 无论您使用何种模式连接，断网保护功能均在设备层面发挥作用。 您也可以参阅文章快速模式和匿名模式之间有什么区别？
始终开启的 VPN（Always-on VPN）功能会消耗我的电量吗？
影响很小。 “快速模式”（Fast mode）采用的 WireGuard 协议是目前最省电的 VPN 协议之一。 参阅文章WireGuard 是什么？
开启“断网保护”功能后，我还能访问打印机等本地设备吗？
请打开“访问本地局域网”功能。 参阅文章“访问本地局域网”功能是什么？
Is my traffic exposed while the notification is showing?
Briefly, yes: while the tunnel is down and Block connections without VPN is off, traffic can use your normal connection. Enable Block connections without VPN to remove that gap. To confirm your connection is not leaking, see How can I verify the security of my VPN connection?
Some apps fail while reconnecting after I turned this on. 这正常吗？
Yes, that is Block connections without VPN doing its job: traffic is blocked while the tunnel is down and resumes as soon as NymVPN reconnects.