A VPN that will not connect is usually dealing with a local network interruption, an account or subscription issue, a server that is temporarily unavailable, or a setting the operating system has not approved. Start with the checks that are easy to reverse, and change one thing at a time. That makes it easier to tell whether the cause is your internet connection, the VPN app, or the network you are trying to reach.
Before troubleshooting, note the exact message shown by the app and whether the problem began after changing networks, updating the operating system, installing another VPN client, or editing a profile. Do not delete a working configuration or reset all network settings as a first step. The sequence below works for phones and computers, with platform-specific checks where they matter.
7
Checks to try in order
1
Setting to change at a time
5
Supported platform families
Start with the symptoms, not a settings reset
“VPN not connecting” can describe several different situations. The app may fail before it starts a connection, remain on “Connecting,” report a timeout, or say “Connected” while apps cannot load pages. These symptoms point to different parts of the setup. A failed login is not the same as an unreachable server, and a connected tunnel with no browsing is not necessarily a connection failure.
| What you see | Check first | Avoid assuming |
|---|---|---|
| The app cannot sign in | Username, password, account status, and the app’s sign-in method | That changing a server will fix authentication |
| The connection spins or times out | Basic internet access, the selected server, and protocol settings | That the subscription is necessarily invalid |
| The client says “Connected,” but pages do not load | DNS, routing mode, another proxy app, and the kill switch | That the tunnel status proves every app can reach the internet |
| The operating system asks for permission repeatedly | VPN profile approval and the operating system’s network permissions | That reinstalling the app is the only solution |
Keep the exact error text if you may need help later. Also note whether the failure happens on Wi-Fi, mobile data, or both. Those details can narrow the problem without requiring you to share passwords, subscription links, or other private account information.
Try these seven fixes in order
These checks move from basic connectivity to settings that are more specific to a VPN. After each change, attempt one connection and observe the result. If a step solves the problem, stop there instead of changing additional settings that were not involved.
- Confirm the internet works without the VPN. Disconnect the VPN and open a familiar website or app. If it also fails, reconnect to Wi-Fi or mobile data, check whether the router requires a sign-in page, and see whether other devices on the same network can browse. A VPN cannot establish a useful route if the device has no usable internet access.
- Check the account and subscription. Sign in again using the account method associated with your service, then review the account page for a status notice or an action that needs attention. If you recently changed your password, update it in the client rather than repeatedly retrying an old saved credential. Do not paste your password into support messages or public forums.
- Refresh the selected server. Disconnect, choose another available server or region, and try again. A particular route can be temporarily unreachable from your current network, while another may connect. If the app has a server list that needs refreshing, update it using the client’s normal controls before selecting a route.
- Restart the app and device. Fully quit the VPN app, reopen it, and retry. If the operating system still reports that the VPN profile is in use or the network state appears stuck, restart the device as well. This can clear a stale network session; it does not erase your account or prove that a particular server was at fault.
- Review the protocol setting. If the client offers a protocol selector, try a different available option and test again. Networks may handle connection methods differently, especially when a firewall, captive portal, or managed network is involved. Record the original selection first, and restore it if the alternative does not help. Do not assume every protocol is supported by every client or service.
- Approve the operating system’s VPN request. On iOS and Android, accept the system prompt to add or activate the VPN configuration. On Windows and macOS, check that the app has permission to create or manage a VPN connection and that the relevant profile is enabled. A permission dialog that was dismissed or denied can prevent the client from starting a tunnel.
- Check for competing network tools. Quit other VPN apps, proxy clients, firewall tools, and network filters temporarily, then test one client at a time. Two tools may try to control the same system VPN interface, route table, or DNS settings. If you use a compatible client such as Clash Verge, sing-box, or Shadowrocket, check which profile is active and avoid running a second proxy configuration simultaneously.
Work through a hands-on check on your device
Use this short procedure to separate an app problem from a network problem. It is especially useful when the client shows a vague timeout or when the connection works on one network but not another.
- Establish a baseline. Disconnect the VPN and confirm that a webpage loads. If the browser opens a public Wi-Fi sign-in page, complete that step first. On mobile, confirm whether the device is using Wi-Fi or cellular data so you can compare like with like.
- Check the client’s account state. Open the official app or compatible client you intend to use. Confirm that you are signed in and that the profile or subscription is present. If you use a subscription link, refresh it through the client’s built-in update function; do not copy a private link into a public diagnostic tool.
- Connect using one simple configuration. Select one available server, leave advanced routing rules unchanged, and start the connection. On iPhone or Android, respond to the operating system prompt. On a computer, watch for a permission prompt or a security notification that needs your confirmation.
- Test a second route or network only if needed. If the first attempt fails, switch to another available server. If practical, test the same client on a different trusted connection, such as mobile data instead of Wi-Fi. Changing both the server and the network at once makes it harder to identify the cause, so write down which change you made.
- Restore the original settings if the test does not help. If you changed the protocol or routing mode, return to the previous option before trying another adjustment. Keep a short record of the error, the network type, and the server choice. This information is more useful to support than a long list of unexplained configuration changes.
If you are comparing connection options for travel, work, or everyday browsing, begin with the device and network requirements rather than a promise that one setting works everywhere. The VPN for China overview can help you understand the service context, while the actual connection test should still be performed on your own device and network.
For a fresh setup, follow the relevant platform instructions in the new-user guide. Importing a subscription and approving a system VPN profile are separate steps: the first gives a client configuration, while the second lets the operating system create or activate the connection.
- ✅ Test ordinary internet access with the VPN disconnected.
- ✅ Change one setting at a time and note the result.
- ✅ Confirm the operating system has approved the VPN profile.
- ❌ Do not run two VPN or proxy clients at the same time while diagnosing.
- ❌ Do not share passwords, account tokens, or private subscription links in screenshots.
Check the settings that commonly differ by platform
The same connection can behave differently across operating systems because each manages VPN profiles, permissions, and background activity in its own way. Start with the checks for the device where the error occurs; reinstalling every app on every device is rarely a useful first diagnostic.
iPhone, iPad, and Android
Look for a system prompt asking to add or enable a VPN configuration. If you denied it earlier, open the app again and follow its connection flow so the operating system can ask for permission. On iOS, review VPN configuration entries in the system settings and remove only profiles you recognize and no longer use. On Android, check that the VPN app is allowed to connect and that another app has not been selected as the always-on VPN. If Android has an always-on or block-without-VPN option enabled, a broken profile may also prevent ordinary internet access until you disable that setting or restore the profile.
Mobile operating systems may pause background activity to save power. If the connection drops after the screen locks rather than failing immediately, check the app’s background or battery restrictions and the system’s VPN status. Keep the client updated through its normal distribution channel, and avoid installing multiple apps that each request control of the system VPN interface.
Windows, macOS, and Linux
On Windows, check whether a firewall or endpoint security tool blocked the app after an update, and confirm that another VPN connection is not already active. On macOS, approve the network extension or VPN configuration when prompted and review the active profile in system settings. On Linux, confirm that the selected client is running with the permissions it requires and that another network manager or proxy process has not replaced its routes. The names of controls vary by operating system version, so use the operating system’s own settings rather than following a menu path that may no longer match your screen.
For third-party clients, distinguish between a subscription being imported and a proxy actually being started. A successful configuration update only means the client retrieved data; it does not prove that a route is active. Check that the intended profile is selected, the client’s system proxy or tunnel mode is enabled as appropriate, and no other tool is competing for traffic.
Know when to switch servers—and when to ask for help
Trying another server is reasonable when one route times out, but repeatedly switching regions without checking the rest of the setup can hide the real issue. If every server fails on the same network while ordinary browsing works, look more closely at protocol selection, device permissions, firewall rules, and other proxy software. If the problem appears on only one Wi-Fi network, compare with another trusted network before changing account or profile settings.
Contact support when the account cannot authenticate, a required profile is missing, the same error persists after the basic checks, or the client and operating system disagree about whether a connection is active. Include the operating system and version if known, the client name and version, the exact error message, when the problem began, and which checks you already performed. You can also say whether the issue occurs on Wi-Fi, mobile data, or both.
Privacy note: A diagnostic screenshot can contain account names, server addresses, or subscription details. Hide private information before sending it, and never include your password or a full subscription URL. Support should be able to begin troubleshooting from the error text and the general steps you tried.
Some networks restrict or filter VPN traffic, and access rules can change without notice. A connection that works at home but not on a workplace, school, hotel, or public network may be affected by that network’s policies. Follow the network administrator’s rules, and do not try to bypass restrictions you are not authorized to bypass.
VPN connection FAQ
Why does the VPN say “Connected” when I have no internet?
“Connected” usually describes the client’s tunnel or proxy state, not whether every website can load. Check whether the problem affects all apps or only one, then review DNS, routing mode, a kill switch, and competing VPN or proxy tools. Disconnecting briefly can help determine whether the underlying network works normally, but reconnect afterward if you need the VPN protection.
Why does my VPN work on mobile data but not on Wi-Fi?
The Wi-Fi network may require a sign-in page, have a firewall or filtering policy, or handle a protocol differently. Confirm that ordinary browsing works on that Wi-Fi connection before opening the VPN app. If the network is managed, ask its administrator which connection methods are permitted rather than trying to evade its controls.
Should I uninstall and reinstall the VPN app?
Try a restart, account check, server change, and permission review first. Reinstallation may help if the app is damaged or cannot load its configuration, but it can also remove local profiles or settings you still need. Before removing anything, make sure you know how to sign in again and obtain the configuration through the official client or account flow.
Should I change the VPN protocol whenever a connection fails?
No. Protocol changes are a useful test when a particular network may be interfering with a connection, but they do not fix missing permissions, expired credentials, or a disconnected internet link. Record the original setting, try one alternative supported by your client, and switch back if it does not improve the result.