Fix it

Why does my VPN keep disconnecting?

The short answer

A VPN drops for one of a few reasons: your device changed networks, the Wi-Fi or the phone put the connection to sleep, the network blocks or throttles the VPN's traffic, the server you picked is overloaded, or the kill switch is doing its job after one of those. Find which one below; each has a fix that takes a minute.

Updated October 2026

1. Your device switched networks

Walking out of Wi-Fi range onto mobile data, or from one Wi-Fi network to another, changes your address. A protocol that roams keeps the tunnel: WireGuard identifies each peer by its key, so the server accepts the same key from the new address; IKEv2 does the same through MOBIKE. OpenVPN sees a new address and reconnects, which is the few-second gap you notice. Fix: use WireGuard or IKEv2 in your VPN app's settings when it offers them.

2. Wi-Fi power saving and sleep

Many routers and most public hotspots drop a connection that has been idle for a minute, and phones turn Wi-Fi down when the screen locks. The VPN then has to start over when you pick the phone up. Fix: turn on the keepalive option if your app has one, and on a phone keep Wi-Fi awake in its power settings; on your own router, look for a setting that forgets idle sessions quickly and lengthen it.

3. Battery optimisation on Android

Android suspends background apps to save battery, and a suspended VPN app cannot keep its tunnel alive. Fix: Settings, Apps, your VPN app, Battery, and choose Unrestricted (the wording varies by phone). Some manufacturers add a second optimiser of their own; exclude the app there too. GhostShield VPN's Android page has the steps.

4. iPhone: Low Data Mode and Private Relay

Low Data Mode pauses background work and can stop a VPN reconnecting after the screen locks. iCloud Private Relay is designed to step aside for a VPN, but if Safari misbehaves while the VPN is on, turn it off for a test. The full list of iPhone fixes is on VPN not working on iPhone.

5. The network blocks or throttles UDP

WireGuard and IKEv2 run over UDP only, and some hotel, school, office and airport networks drop or slow UDP. The symptom is a VPN that connects and then stalls or drops every few minutes on one network while it is solid everywhere else. Fix: a VPN app that offers a TCP fallback, or mobile data on that network. Nothing on the device changes what the network does.

6. A busy or distant server

One overloaded server drops sessions while the rest of the network is fine. Fix: pick another location, preferably a nearby one, and try again. If every location drops, the cause is on your side.

7. MTU: packets too big for the path

A VPN wraps each packet in another packet, so a packet that just fitted before may no longer fit. When the path cannot carry it, large transfers stall, pages half-load and the tunnel can appear to drop. WireGuard defaults to an MTU of 1420 bytes, which fits most paths; some mobile carriers and PPPoE lines need less. Fix: if your app lets you set the MTU, try 1380 or 1280.

8. The kill switch is doing its job

A kill switch blocks all traffic when the tunnel drops, so a drop looks like “the VPN broke the internet”. It is protecting you; the real cause is one of the items above. Fix: leave it on and fix the drop.

9. An old app, or a managed device

An out-of-date app on a new operating system can lose the tunnel after every update. Update the app and the OS, then restart. On a phone or laptop issued by a school or employer, a management profile can block VPNs outright, which looks like constant disconnects; that is policy, not a fault.

If it is GhostShield VPN

GhostShield VPN runs WireGuard in every app, so switching between Wi-Fi and mobile data keeps the tunnel up. If it still drops, note the network (home Wi-Fi, mobile data, work or school), the device and the location you picked, and write to info@ghostshield.ai; we look at the server side with you. New here? Every plan starts with a 7-day free trial, so you can test it on your own networks first.

Questions people ask

Why does my VPN keep disconnecting on my phone?

On a phone the usual causes are the switch between Wi-Fi and mobile data, Wi-Fi that sleeps when the screen locks, and battery optimisation that suspends the VPN app in the background. A protocol that roams (WireGuard or IKEv2) survives the first; the other two are settings on the phone, listed above.

Why does my VPN keep disconnecting on Wi-Fi only?

The Wi-Fi network is dropping idle connections or throttling UDP. Routers and public hotspots often forget a connection that has been quiet for a minute. Many VPN apps send a keepalive packet to stop that; if yours has a keepalive setting, turn it on. If the VPN is solid on mobile data and only flaky on one Wi-Fi network, the network is the cause.

Is it bad if my VPN keeps disconnecting?

Every drop is a moment when your traffic can leave your device unprotected, unless the app has a kill switch, which blocks traffic until the tunnel is back. Turn the kill switch on if you care about never being exposed, and fix the cause of the drops so the kill switch does not keep cutting you off.

What is a VPN kill switch?

A setting that stops all traffic when the VPN connection drops, so nothing leaves your device unprotected until the tunnel is back. It can look like the VPN disconnecting and “breaking the internet”, when it is doing exactly its job.

Does WireGuard disconnect less than OpenVPN?

Yes, in the situation people notice most: changing networks. WireGuard identifies each peer by its key rather than its address, so when your phone moves from Wi-Fi to mobile data the server simply accepts the same key from the new address. OpenVPN treats that as a new connection and renegotiates, which takes a few seconds.

Why does my VPN disconnect when my phone locks?

Battery optimisation on Android, or Low Data Mode and Wi-Fi sleep on iPhone, suspend background apps and connections. Exclude the VPN app from battery optimisation on Android; on iPhone turn off Low Data Mode and keep the VPN app installed and allowed.

Sources

  1. WireGuard known limitations: UDP only, and roaming without an extra round trip
  2. WireGuard whitepaper: how a peer is identified by its key, which is what lets a session survive an address change
  3. RFC 4555, MOBIKE: the IKEv2 extension for keeping a session while the address changes

Related