Always-On VPN Setup Guide
The best VPN is one you never forget to turn on. Here's how to configure automatic, always-on VPN protection on every device.
Platform-by-Platform Setup
Windows
- 1. Open your VPN app settings
- 2. Enable 'Launch at startup'
- 3. Enable 'Auto-connect when app starts'
- 4. Enable kill switch
- 5. Set protocol to WireGuard/NordLynx for minimal overhead
macOS
- 1. Open your VPN app settings
- 2. Enable 'Launch at login'
- 3. Enable 'Auto-connect'
- 4. Enable kill switch
- 5. Grant VPN the necessary macOS permissions (System Settings > Privacy)
Android
- 1. Open your VPN app and enable auto-connect
- 2. Go to Settings > Network > VPN > your VPN > gear icon
- 3. Enable 'Always-on VPN'
- 4. Enable 'Block connections without VPN' (OS-level kill switch)
- 5. This creates a system-level always-on VPN that survives app restarts
iOS
- 1. Open your VPN app settings
- 2. Enable 'Connect on Demand'
- 3. Enable 'Auto-connect for Wi-Fi networks'
- 4. Note: iOS doesn't have a system-level always-on VPN like Android
- 5. The VPN app manages reconnection — choose a provider with reliable iOS app
Router
- 1. Install VPN on your router (see our router VPN guide)
- 2. All devices on the network are always protected
- 3. No per-device configuration needed
- 4. Perfect for smart TVs, IoT devices, and guests
- 5. Consider GL.iNet travel router for portable always-on VPN
The Three Essential Settings
1. Auto-ConnectVPN connects automatically when your device starts or joins a network
2. Kill SwitchBlocks all traffic if VPN drops — prevents accidental exposure
3. Auto-ReconnectVPN automatically reconnects after drops — no manual intervention