Start with the symptom, not a reinstall

When a VPN will not connect, reinstalling the app is rarely the best first move. A failed connection can come from several different places: the device may have no internet access, the account or subscription may need attention, the selected server may be temporarily unavailable, the client may be using an incompatible configuration, or the operating system may be blocking a required permission. Identifying which layer is failing can save time and help you avoid deleting a configuration that was working before.

Begin by recording what you see. Does the client stay on “connecting,” immediately show an error, connect and then disconnect, or claim to be connected while websites remain unavailable? Note whether the problem affects every network or only one Wi-Fi network, whether other apps can get online, and whether the issue began after an operating-system or client update. These details help separate a connection-establishment failure from a routing or DNS problem that happens after connection.

Check ordinary internet access with the VPN disconnected. Open a few unrelated websites or use another app that needs a network connection. If those also fail, troubleshoot the Wi-Fi, mobile data, router, or captive portal first. A VPN cannot repair an internet connection that is already offline. If basic internet works, reconnect the VPN and test a second app or website; one site being unavailable does not prove the entire tunnel has failed.

Bottom line: First determine whether the device has internet without the VPN, then find out whether the VPN fails to connect or connects without carrying the expected traffic. Those are different problems and call for different checks.

Check the network, account, subscription, and server

Networks can block or interrupt the traffic a VPN client needs to establish a connection. Public Wi-Fi at a hotel, airport, school, or workplace may require you to accept terms on a sign-in page before internet access becomes available. Disconnect the VPN, open a browser, and complete any network sign-in step. Then test the connection again. On a managed work or school device, network rules may also restrict VPN software; do not try to bypass an organization’s security policy. Ask the network administrator what is permitted.

Next, check the account and subscription in the service panel. Confirm that you are signed in to the account associated with your active plan and that the plan or subscription is available. An account password, a subscription link, and the profile imported into a client are not interchangeable: the password signs you in to the panel, while a compatible client uses subscription data to obtain connection settings. If you recently changed an account or imported a different subscription, verify that the client is using the intended profile.

If the client connects to one server but not another, select a different available server and try again. A single endpoint may be unavailable or unsuitable for the current network, while other settings remain valid. If the same client fails on several servers and on more than one network, the cause is more likely to involve the client, account, device permissions, or subscription configuration. Avoid repeatedly editing server addresses or copying settings from unofficial sources; a manual change can make a valid profile unusable.

For a general overview of what to compare when choosing a service and connection setup, see Best VPN for China. A region label alone does not explain why a particular connection fails: the client still needs a compatible profile, a reachable endpoint, and permission to create the required network connection on the device.

Work through a safe troubleshooting sequence

Use this sequence before removing the app or rebuilding the configuration. Change one thing at a time and test after each change. If several settings are altered together, it becomes difficult to tell which change helped—or created another problem.

  1. Disconnect and test the base connection. Turn off the VPN and make sure the device can browse. If the network is captive, complete its sign-in. If ordinary connectivity is broken, restart the router or switch between Wi-Fi and mobile data where available, then retest without the VPN.
  2. Close duplicate network tools. Quit other VPN or proxy clients, including clients that may remain active in the background. Two apps can compete to manage system routes, DNS, or a virtual network interface. Do not remove work-managed security software; check with the device administrator instead.
  3. Restart the VPN client and device. Disconnect from the server, fully quit the client, open it again, and retry. If that changes nothing, restart the device. This can clear a stalled network extension or a stale route without deleting account data or subscription settings.
  4. Refresh the client’s configuration. If the profile was imported a while ago or the service panel provides an updated subscription, refresh it using the client’s normal subscription function. Check the client’s confirmation message and make sure the intended profile is selected. Do not paste the subscription URL into an unfamiliar converter or send it to someone who is troubleshooting with you.
  5. Try another available server and network. If safe and practical, compare the same client on a different Wi-Fi network or mobile data. A change in result points toward the original network or endpoint, but it does not by itself identify the precise cause. Note which combinations work and which do not.
  6. Check app and system updates. Install the client version offered through the service’s official channel and apply relevant operating-system updates when convenient. If a problem began immediately after an update, record the version and date. Do not downgrade to software from an untrusted download site.
  7. Review permissions and security prompts. Accept the operating system’s VPN or network-extension prompt for the trusted client. Check whether a firewall, endpoint-protection tool, parental control, or device-management profile is blocking it. Change a security setting only if you understand the effect and are authorized to do so; restore it after a controlled test.

On Windows, check whether the client is allowed through the firewall and whether another VPN adapter or security product is controlling network traffic. On macOS, look for an approval prompt for the VPN configuration or network extension in system settings; the wording can vary by operating-system version. On iPhone and iPad, confirm the VPN configuration prompt was accepted and that the relevant profile is enabled. On Android, review the system VPN permission and check whether an always-on VPN or “block connections without VPN” setting is affecting the test. On Linux, confirm that the client is compatible with the installed distribution and that it has the permissions its documentation requires. In every case, follow the client’s current instructions rather than applying commands intended for a different operating system.

Separate protocol, client, and routing problems

VPN protocols and proxy protocols are not interchangeable names for the same configuration. Clients differ in which protocols and subscription formats they can import, and a client may support a protocol but not the particular profile format supplied by a service. If an app displays an error such as “unsupported configuration,” first confirm that the client is intended for that subscription and that the profile imported successfully. Do not try to fix a format mismatch by guessing ports, transport settings, encryption options, or server addresses.

The same caution applies when choosing a third-party client such as Clash Verge, sing-box, or Shadowrocket. Compatibility depends on the client version, operating system, configuration format, and the options used in the supplied profile. Use the service panel’s documented import method, and check the client’s own import status. A subscription link that works in one app may not be accepted by another, even when both apps can connect to VPN or proxy services in general. Available protocols and import formats should be confirmed in the panel; the names of common protocols do not establish that a particular service provides each one.

Sometimes the VPN says it is connected but traffic does not behave as expected. Check whether the client uses full-device routing, application-based routing, or split tunneling. With split tunneling, some apps or domains may use the VPN while others use the regular network by design. Test with a second app and review the client’s routing rules before concluding that the connection is down. If only domain names fail but a known service works by other means, DNS handling may be involved; restore the client’s default DNS and routing settings before experimenting with custom values.

Also distinguish a connection error from a service-side login or access error. A website may reject a session, require a fresh sign-in, or be unavailable for reasons unrelated to the VPN. Try a separate destination, check the website’s own status information where available, and avoid repeatedly changing network settings to fix an application-specific issue.

Know when to stop changing settings and ask for help

Contact support when the normal checks do not resolve the problem, when your account shows an unexpected subscription state, or when the client reports a repeatable configuration error. A useful support request describes the failure clearly without exposing credentials. Include the device platform and operating-system version, the VPN client name and version, the time the problem occurred, the type of network in use, and the exact error text. State whether ordinary internet access works with the VPN disconnected and whether another server or network changes the result.

If the client has diagnostic logs, review them for personal data before sharing. Logs and screenshots can contain a subscription token, public address, device name, account identifier, or visited domain. Redact those details and never include your password or full subscription link. If support needs a specific diagnostic file, use the service’s official support channel and follow its instructions for handling it securely.

Do not send payment again just because a connection fails. Connection troubleshooting and billing status are separate checks. If the panel shows an account or order issue, provide the relevant order reference through the private support channel rather than posting it publicly. When a network is managed by an employer, school, or venue, ask its administrator whether VPN connections are allowed before attempting further changes.

After support suggests a fix, change only the settings they identify and keep a note of the original configuration. If the suggested steps involve removing a profile, first confirm that you can retrieve or re-import it. That small precaution makes it easier to restore the client if the proposed change does not help.

VPN connection troubleshooting FAQ

Why does the VPN say connected when I cannot browse?

The tunnel may be established while traffic is blocked or routed differently than expected. Check split-tunnel rules, DNS settings, and whether the problem affects every app or only one destination. Disconnect the VPN and confirm that the underlying network works. Then reconnect and test more than one app. If only a specific website or app fails, investigate its session or service status separately rather than treating it as a complete VPN outage.

Should I uninstall and reinstall the VPN app?

Usually, not as the first step. Restart the app and device, check the account and subscription, refresh the profile through the normal client workflow, and verify permissions first. Reinstallation can remove local profiles or settings, so use it only after confirming you can download the trusted client again and restore the correct subscription. If an update caused the issue, provide the client version and error details to support before removing data.

Why does the VPN work on mobile data but not on Wi-Fi?

The Wi-Fi network may require a sign-in page, apply firewall restrictions, or handle VPN traffic differently. First connect to Wi-Fi without the VPN and complete any captive-portal step. Then retry with the client’s documented settings and compare with another available server. If the network is managed, ask its administrator about permitted VPN use. A successful test on mobile data narrows the investigation to the Wi-Fi path, but it does not prove that one particular setting is responsible.

What should I send to support?

Share your device and operating-system version, client name and version, approximate time of the failure, network type, exact error message, and the checks you have already completed. Explain whether basic internet works without the VPN and whether changing the server or network changes the result. Redact passwords, account details, subscription links, tokens, and sensitive log entries. Send diagnostic files only through the official support channel when requested.