Last updated:

Get started with ExpressVPN.
What can a VPN do?
Show Me
Learn about five ways to use ExpressVPN.
5 ways to use your VPN
See Them Now

The Internet Kill Switch is ExpressVPN’s kill switch. If your VPN connection unexpectedly drops, the Internet Kill Switch blocks all internet traffic, keeping your data safe.

The Internet Kill Switch is available in the ExpressVPN app for Windows, Mac, Linux, and routers.

Note: You can find instructions on using the Internet Kill Switch for Android and iOS via these respective links.

Jump to…

How does the Internet Kill Switch work?
When is the Internet Kill Switch active?
How to enable or disable the Internet Kill Switch?
Unable to apply changes to the Internet Kill Switch
Allow (or deny) access to local network devices
How to enable (or disable) the Advanced Kill Switch

How does the Internet Kill Switch work?

When you are not connected to the VPN, your internet traffic may be vulnerable to third-party tampering. To keep your data safe and secure, in case your VPN unexpectedly disconnects, the Internet Kill Switch is activated and blocks all internet traffic until your VPN connection is restored. Learn more about the Internet Kill Switch.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

When is the Internet Kill Switch active?

The Internet Kill Switch is enabled by default. When enabled, the Internet Kill Switch is active as soon as you are connected to the VPN and when the app is in other connection states. If you disconnect from the VPN manually, the Internet Kill Switch will not be active although it is enabled in the app settings.

The following table summarizes when the Internet Kill Switch is active (or inactive) in different VPN connection states.

This table shows a summary of when Network Lock is active or inactive.

Note: When the VPN is connecting, it may take a few seconds for the Internet Kill Switch to become active.

If your VPN unexpectedly disconnects, the Internet Kill Switch is activated and blocks any internet traffic entering or leaving your device until the connection is restored.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

How to enable (or disable) the Internet Kill Switch

Important: You cannot disable the Internet Kill Switch in the ExpressVPN router app.

The Internet Kill Switch is enabled by default. If you disabled the Internet Kill Switch previously, you can go into the app settings to re-enable it.

If the Internet Kill Switch is disabled:

  • You will be able to browse the internet if your VPN unexpectedly disconnects.
  • Your traffic will not be encrypted and secure.

Follow the instructions corresponding to your device:

Important: Before changing your Internet Kill Switch setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click the Profile tab
  2. Under Settings, click Internet Kill Switch.
  3. Click Enable when connected.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

  1. In the ExpressVPN app, click the Profile tab.
  2. Under Settings, click Internet Kill Switch.
  3. Click Enable when connected.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

ExpressVPN GUI app for Linux

  1. On the ExpressVPN GUI app for Linux, click Profile.
  2. Under Settings, click Internet Kill Switch.

  3. Click Enable when connected to toggle the kill switch on/off.

ExpressVPN CLI for Linux

  1. Open Terminal.
  2. To disable Network Lock, enter the following command: expressvpnctl set networklock falseTo enable Network Lock, enter the following command: expressvpnctl set networklock true

ExpressVPN legacy app for Linux

  1. Open Terminal.
  2. Disconnect from the VPN before changing your setting. Enter the following command: expressvpn disconnect
  3. To disable Network Lock, enter the following command:
    expressvpn preferences set network_lock off To enable Network Lock, enter the following command:
    expressvpn preferences set network_lock default

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Unable to apply changes to the Internet Kill Switch

If you are unable to apply changes to the Internet Kill Switch:

  1. Restart your device.
  2. Restart the ExpressVPN app.

If the issue persists, follow these instructions specific to your device:

  1. Press Ctrl + Alt + Delete.
  2. Select Task Manager. Click Yes to allow changes made to your device.
  3. Click More details.
  4. Select Services.
  5. Right-click ExpressVpnService.
  6. Click Stop.
  7. Right-click ExpressVpnService.
  8. Click Start.
  9. Relaunch ExpressVPN.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

  1. Use Spotlight Search to find Activity Monitor.
  2. Select ExpressVPN.
  3. Click the Force Quit icon at the upper-left corner of the screen.
  4. Relaunch ExpressVPN.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Allow (or deny) access to local network devices

When the internet kill switch is enabled, you are still able to access your local network devices by default. In the app settings, you can change access to your local network devices by allowing or denying access to them.

In the ExpressVPN apps for Windows, Mac, and Linux, access to local network devices is indicated by a checkbox for Allow access to devices on local network:

  • When toggled on: Access to local network devices is allowed.
  • When toggled off: Access to local network devices is denied.

Important: Before changing your Internet Kill Switch setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click the Profile tab.
  2. Under Settings, click Internet Kill Switch.
  3. Under LAN, click Allow access to devices on local network to toggle on/off.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Important: Before changing your Internet Kill Switch setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click the Profile tab.
  2. Under Settings, click Internet Kill Switch.
  3. Under LAN, click Allow access to devices on local network to toggle on/off.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

How to enable (or disable) the advanced kill switch

The ExpressVPN apps for Windows, Mac, and Linux include an advanced kill switch called the Advanced Internet Kill Switch. When enabled, this advanced kill switch prevents data leaks even when the VPN is off. All internet traffic is blocked unless the VPN is active.

In the apps, the Advanced Internet Kill Switch is indicated by a toggle labeled Enable at all times:

  • When toggled on: All your internet traffic is blocked unless you’re connected to the VPN. This offers an extra layer of security to protect your data.
  • When toggled off: The kill switch works as normal, only blocking internet traffic if your active VPN connection unexpectedly drops.

Follow the instructions corresponding to your device To adjust the settings of the advanced internet kill switch:

Windows

  1. On the ExpressVPN app for Windows, click the Profile tab.
  2. Under Settings, click Internet Kill Switch.
  3. Click Enable at all times to toggle on/off.

Mac

  1. On the ExpressVPN app for Mac, click the Profile tab.
  2. Under Settings, click Internet Kill Switch.
  3. Click Enable at all times to toggle on/off.

Linux

  1. On the ExpressVPN GUI app for Linux, click Profile.
  2. Under Settings, click Internet Kill Switch.
  3. Click Enable at all times to toggle the advanced kill switch on/off.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Was this article helpful?

We're sorry to hear that. Let us know how we can improve.

A member of our Support Team will follow up on your issue.