VPN Connected but No Internet? 7 Fixes to Get Back Online

Start with the symptoms, not the VPN status icon

A VPN client can report “Connected” while a browser or app still cannot reach the internet. The status usually confirms that the client has established a tunnel to a server; it does not guarantee that your device has working Wi-Fi or mobile data, that DNS is responding, or that every app is sending traffic through the intended route. The fastest way to troubleshoot is to work from the device outward: check the underlying connection, compare apps, then adjust VPN settings one at a time.

First, note what fails. Does every website time out, or only one site? Do messaging apps work while the browser does not? Does the problem begin as soon as you connect, or only after changing networks or waking the device? These differences point to different causes. A single site failing may be an application or service issue; all apps failing suggests a device, network, DNS, or tunnel problem. If only one app is affected, check its proxy settings and the VPN’s split-tunneling rules before changing the entire connection.

Keep the troubleshooting test simple. Choose a familiar website and one app you normally use, and try them both while connected and disconnected. Avoid signing into sensitive services over an unfamiliar public network just to test access. If the VPN is required by your workplace or school, follow its IT guidance before changing profiles, certificates, or security settings.

Seven fixes to try in order

Use the following sequence and change only one thing at a time. After each change, reconnect the VPN and test the same website and app. This makes it easier to identify the cause and undo an adjustment that did not help.

Confirm that the underlying connection works. Disconnect the VPN briefly and open a familiar site. If it still fails, the VPN tunnel is not the first problem to solve. Reconnect to Wi-Fi, check whether mobile data is enabled, and see whether another device on the same network can access the internet. If only the VPN-connected device is offline even with the VPN disconnected, restart that device and check its network settings.
Check for a captive portal or restricted network. Hotel, airport, campus, and guest Wi-Fi may require you to accept terms or sign in before general access is available. Disconnect the VPN, open the network’s sign-in page, complete the required step, then reconnect. Some managed networks intentionally restrict VPN traffic; in that case, use an approved network or contact the network administrator rather than trying to bypass its rules.
Reconnect cleanly and select another available server. Disconnect from the current server, wait briefly, and connect again. If there is no change, select a different available server in the same general region, where the service and your use case permit it. A particular route can be unavailable or temporarily incompatible with a network. Do not infer that a server is broken from one failed request; test more than one app and check the client’s connection details.
Review DNS and private DNS settings. DNS translates a domain name into the address a device uses to contact a service. If a site fails by name but another internet test works, DNS may be involved. Check whether the VPN app has a DNS option, and avoid combining several custom DNS settings without understanding their effect. On Android, a custom Private DNS provider can conflict with a VPN configuration; temporarily restore the setting to Automatic for a comparison, if your privacy or organization policy allows it. On Apple devices, review any installed DNS, filtering, or VPN profiles before changing them.
Look for a second proxy or conflicting network tool. A browser extension, system proxy, firewall, ad blocker, security suite, or another VPN client can send traffic through a different route or block it. Turn off only tools you recognize and are allowed to adjust, then test again. Do not disable endpoint protection on a work or school device. If you use a browser-only proxy, check whether the browser is configured to use it even when the VPN app is connected.
Check split tunneling and app-specific routing. Split tunneling lets selected apps use the VPN while others connect directly, or does the reverse, depending on the client. Review the app list and rules if only certain programs are affected. A browser can work while a game, messaging app, or command-line tool fails because it follows a different route. Restore the default routing profile temporarily if you are unsure which rule is responsible.
Try another supported VPN protocol, then update the client. Networks differ in how they handle VPN traffic, and a protocol that works on one Wi-Fi network may not work on another. If your provider’s client offers protocol choices, try another supported option and reconnect; do not enter unknown server addresses or import configurations from untrusted sources. Install client updates from the provider’s official channel, then restart the device if the update requests it.

Bottom line: If the internet also fails with the VPN disconnected, troubleshoot Wi-Fi or mobile data first. If direct access works but the tunnel does not, focus on the server, DNS, proxy conflicts, routing rules, and supported protocol settings.

A practical check for Windows, Mac, Android, and iPhone

Before changing a setting, write down the device, network, VPN server, protocol, and the exact symptom. Then follow the matching checks below. Labels can vary by operating-system version and client, so use the setting’s description rather than relying on a particular menu name.

Windows

Open the network controls and confirm that Wi-Fi or Ethernet shows a working connection. Disconnect the VPN and test a familiar site. If direct access works, reconnect and check Windows proxy settings to make sure an old manual proxy is not still enabled. Also review the VPN client’s split-tunnel and DNS options. If the issue began after switching networks, disconnect and reconnect the adapter or restart the computer before making deeper changes.

For a name-resolution problem, you can open Command Prompt and run ipconfig /flushdns, then reconnect and test again. This clears the local DNS cache; it does not repair a disconnected Wi-Fi link or an unavailable VPN server. Avoid using broad network-reset commands as an early step, because they can remove or alter other network configurations. If a reset is necessary, note any work, school, or manually configured settings first.

Mac

In System Settings, confirm that the active Wi-Fi or Ethernet connection is online, and temporarily disconnect the VPN to compare. Check the VPN client and macOS network settings for an old proxy configuration, custom DNS entry, or profile that may affect traffic. If you use a managed Mac, do not remove a configuration profile without approval. After changing a permitted setting, reconnect the VPN and test the same apps; switching between Wi-Fi networks can also reveal whether the problem is tied to one access point.

Android

Check that Airplane mode is off and that the selected Wi-Fi or mobile-data connection can access the internet without the VPN. Review Android’s VPN settings for an always-on VPN or a “block connections without VPN” option. These protections can intentionally block internet traffic when the tunnel is unavailable; turn them off only for a brief, controlled comparison and only if your security requirements allow it. Also review Private DNS and any second VPN or filtering app. If one app fails, check whether it is excluded from the VPN or restricted by the device’s background-data settings.

iPhone

Test the connection on Wi-Fi and mobile data separately, if both are available. In Settings, review the VPN status and any installed VPN, DNS, or device-management profile. An iPhone may also reconnect automatically through a profile or an on-demand rule, so switching the VPN off once may not remove the rule that reactivates it. Do not delete a work or school profile without checking with its administrator. If only one app fails, check its own network permissions and whether the VPN client applies app-specific routing.

On every platform, return a temporary test setting to its original value if it makes no difference. A useful comparison is whether direct access works, whether the VPN client reports a stable connection, and whether the same failure appears in more than one app. If you are comparing VPN services or choosing a route for different devices, VPNGD Best VPN for China can provide a starting point for reviewing the service and its available client options; it cannot diagnose a local Wi-Fi or device configuration by itself.

Read the failure pattern before making more changes

The pattern of failure can narrow the cause more effectively than repeatedly reconnecting. Use the observations below as clues, not as guarantees: several issues can produce similar symptoms, and network conditions can change between tests.

✅ If the internet fails with the VPN both connected and disconnected, check Wi-Fi, mobile data, router access, or the network’s sign-in page first.
✅ If direct access works but every app fails through the VPN, test a different available server and a supported protocol, then review DNS and client status.
✅ If a browser works but one app does not, inspect split tunneling, the app’s proxy configuration, and app-specific permissions.
✅ If websites fail by name but a known service still responds, investigate DNS settings and conflicting filtering tools.
❌ Do not conclude that the VPN is at fault solely because one website or service is unavailable; the service itself may be down or may impose regional restrictions.
❌ Do not install multiple VPN clients or repeatedly change DNS, proxy, and protocol settings at once; that makes the result difficult to interpret.

Some services restrict access by location, account eligibility, or their own security checks. A working VPN connection does not guarantee access to every website, streaming catalog, API, or banking service. If one service remains unavailable while other apps work, consult that service’s official help information before altering device-wide network settings.

For a more informative test, compare the same app on the same device, first without the VPN and then with it. Keep the network unchanged during the comparison. If the connection works on mobile data but not on a particular Wi-Fi network, the router or network policy may be involved. If it fails on both, but only when the VPN is enabled, the client, profile, server route, or protocol becomes a more likely place to investigate.

When to contact support and what to include

If these checks do not restore access, stop changing settings and collect the information needed to reproduce the problem. Include your operating system and version, VPN client version, connection type, whether direct access works, which apps fail, the selected server or region, and the protocol shown by the client. Note whether the issue began after an update, a network change, or a configuration change. Do not include passwords, authentication codes, private keys, or a full subscription URL in a public support request.

If the client provides connection or diagnostic logs, share them only through the provider’s official support channel and review them for personal information first. A screenshot of the connection status can help, but avoid exposing account details or other people’s network information. For a work or school VPN, contact the organization’s IT team: its configuration may depend on certificates, approved routes, or access policies that a general troubleshooting guide cannot safely change.

Finally, distinguish “connected” from “usable.” The client may have established a tunnel while DNS is unavailable, an app is routed outside it, or the local network is blocking traffic. Testing direct access, checking the affected apps, and changing one supported setting at a time usually reveals which layer needs attention. If only one site remains affected after the rest of the connection is working, treat that as a site-specific issue rather than resetting the entire device’s network configuration.