Recommended Free Tools
The key-shaped icon in Android’s status bar is the VPN indicator. It normally remains visible while a VPN tunnel is connected, or while Android is enforcing a VPN configuration that is trying to reconnect. To remove it, open Settings, search for VPN, open the listed connection, and choose Turn off. If the connection returns, disable Always-on VPN; if you no longer need the saved profile, choose Forget instead.
A VPN app, a manually saved Android profile, a work profile, or an organization’s device-management policy may be responsible. The exact fix depends on which one created the connection. The key icon and an “always-on VPN stopped working” notification are related but different symptoms, so identify which one you are seeing before changing settings.
As an Amazon Associate I earn from qualifying purchases.
What the Android key icon means
Android uses a small key symbol to show that a VPN connection is active. Android’s platform documentation describes the icon as an active VPN indicator, and Samsung’s Galaxy support documentation similarly identifies it as the indicator for a connected VPN service. It is not a warning that your phone has been hacked, and it is not an icon for the phone’s screen lock or password manager.
The connection can have several sources:
- A VPN app installed from Google Play or another approved source.
- A VPN profile saved under Android’s network settings.
- A work-profile or enterprise VPN configured by an administrator.
- A device-management policy that enables Always-on VPN or lockdown.
Android can display the key while the tunnel is connected, and an Always-on configuration can immediately reconnect after you disconnect. On managed Samsung devices, Knox policies can produce behavior that looks different from a normal consumer VPN app. The icon’s appearance and exact location also vary by phone model and software version.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Key icon versus the persistent VPN notification
Do not treat every VPN-related symbol as the same problem. The status-bar key means Android considers a VPN connection active. A separate persistent notification can say that an Always-on VPN connection stopped working. Google Android Help states that this notification remains until the device reconnects; its documented way to stop that retry behavior is to turn off Always-on VPN in the VPN settings.
If you see only the key, start with the VPN list and disconnect the active connection. If you see a notification about a failed Always-on connection, inspect Always-on and lockdown settings even if the key is no longer present. Dismissing the notification alone does not change the VPN configuration.
Find which VPN is running
Use Android’s built-in search rather than guessing which app is responsible. Labels differ between Android releases and manufacturers, but the documented Google path is Settings > Network & internet > VPN.
- Open Settings and type VPN in the search box.
- Open the result that lists VPN connections. On some phones it is under Network & internet, Connections, or a similarly named network section.
- Read every listed entry. Note the name of the active profile, any VPN app named by Android, and whether a work profile is shown.
- Tap the gear or information button beside the connection to expose its controls.
Android Settings can show VPN apps that have been accepted by the system and can provide controls to configure or forget a profile. If the entry directs you to an app, that app owns the connection controls; use its in-app disconnect command rather than repeatedly toggling Android’s network switch.
Choose the right action: disconnect, forget, or change policy
| Action | What it does | Use it when | What remains |
|---|---|---|---|
| Turn off / Disconnect | Stops the current VPN session. | You want ordinary internet access temporarily but may use the VPN again. | The app and saved profile remain; an Always-on policy may reconnect it. |
| Forget | Removes the saved Android VPN profile and its stored configuration. | You no longer use that manually configured VPN. | The VPN app, if separately installed, remains on the phone; an administrator-managed profile may not be removable by you. |
| Turn off Always-on VPN | Stops Android from automatically maintaining or retrying that VPN. | The key returns immediately after disconnecting, or you want the service to stay off after reboot or a network failure. | The VPN can still be started manually later. |
| Turn off “Block connections without VPN” | Allows traffic to use a normal connection when the VPN is unavailable. | Lockdown is preventing apps from connecting after the tunnel fails. | You lose the no-bypass behavior that blocks non-VPN traffic. |
Do not choose Forget merely because you want to pause the VPN. It deletes the saved profile and may require you to enter server, certificate, or account details again.
Step-by-step: clear a normal VPN connection
1. Open the VPN settings page
Search for VPN in Settings and open the system VPN page. On Google’s documented interface, the path is Settings > Network & internet > VPN. Menu names can differ by Android version, manufacturer, language, or carrier.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
2. Identify the active entry
Look for a status such as Connected, an active switch, or the name of a VPN app. Do not assume the first item is responsible if several profiles are listed. A work-profile VPN and a personal VPN can appear together, and only one may be active.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
3. Disconnect it
Tap the gear beside the active connection and select Turn off or Disconnect. Wait several seconds, then pull down the notification shade and check the status bar. The key should disappear when no VPN is active.
If Android opens a named VPN application, open that app and tap its Disconnect, Stop, or equivalent control. App-configured VPNs do not always expose the same system-level controls as manually configured profiles.
4. Forget an unused profile
When the profile is obsolete, open its details and choose Forget. Confirm only after checking that you no longer need the connection. Forgetting removes the saved network configuration; it does not necessarily uninstall the app that created it.
5. Check whether it immediately reconnects
Return to the VPN entry after disconnecting. If it changes back to connected, or the key comes back after a short delay, inspect Always-on VPN and the lockdown setting. Automatic reconnection is usually a policy or app behavior, not a stuck status-bar drawing.
Stop automatic reconnection with Always-on VPN
Always-on VPN tells Android to keep a particular VPN service running or to retry it after a failure. Open the VPN’s gear icon and look for Always-on VPN. Turn it off, then disconnect the VPN itself. On some app-managed connections, Android does not show an Always-on switch in this screen; use the VPN app’s settings instead.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Google’s Android Help page notes that some of these controls require Android 14 or later. Older releases and manufacturer interfaces may place the option under an overflow menu or a separate advanced section. If the switch is visible but disabled, the phone may be managed by an employer, school, or other organization.
Understand and handle “Block connections without VPN”
Android’s lockdown control is labeled Block connections without VPN. When enabled, Android blocks network traffic that does not pass through the selected VPN. This prevents apps from silently using Wi-Fi or mobile data if the tunnel fails, but it also means that a failed VPN can make the phone appear offline.
To restore ordinary connectivity, open the VPN details and turn off Block connections without VPN, then disconnect or reconfigure the VPN as needed. This is a security trade-off: disabling lockdown permits traffic outside the tunnel. On a work or school device, an administrator may have enabled the control and may prohibit changing it. Ask the organization’s IT administrator before altering a managed policy.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →When a VPN app keeps the key icon visible
The app is still connected
Some VPN apps maintain their own connection state. Android may show the key even after you close the app’s main window because the app’s background service is still running. Reopen the app from the VPN settings entry or the app drawer and use its disconnect command. Force-stopping or uninstalling an app is not the first step; it can leave a saved profile or management setting behind.
The app reconnects after a network change
Automatic-connect features can start the VPN when you join Wi-Fi, switch to mobile data, or restart the phone. Disable automatic connection, startup, or Always-on options in the app if you want manual control. Then disconnect from the app and verify the Android VPN list.
A second VPN is active
Review every entry in the system VPN page. A browser security feature, parental-control tool, or work-profile service may create a separate VPN interface. Disconnect the entry that reports an active connection rather than deleting an unrelated profile.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Work profiles and administrator-controlled VPNs
Android supports VPNs limited to work-profile applications. An organization can also configure Always-on VPN and lockdown through device management. These controls may appear with a briefcase or work-profile marker, and the system may refuse to let you turn them off or forget them.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsIf the switch is missing, greyed out, or returns immediately after you change it, contact the organization that manages the phone. Removing a work profile, disabling a management agent, or resetting the device without authorization can violate company policy and may erase business data. The correct fix is for the administrator to change the VPN assignment or release the policy.
Samsung Galaxy and Knox-specific behavior
Samsung’s support material says Galaxy VPN indicators can vary by model and software version. A normal Galaxy VPN app should follow the disconnect and Always-on steps above, but Samsung Knox has additional policy terminology.
In Knox documentation, AlwaysOn and KeepOn are distinct management behaviors. Samsung notes that an AlwaysOn configuration can show a non-dismissible key icon when the VPN is not connected to its server. That is a managed-device edge case, not proof that every Galaxy phone or every VPN app is stuck. If the icon remains while the VPN server is unavailable and the controls are locked, the Knox administrator must change the policy.
If the key icon remains after you disconnect
Confirm the actual VPN state
Open Settings > VPN again instead of relying only on the status bar. If no entry says connected and there is no Always-on policy, the icon may be a delayed system display. Give the phone a short interval, then check the VPN page and notification shade again.
Check the persistent notification
A notification that says an Always-on VPN stopped working is evidence of a failed or retrying configuration, not merely an old icon. Follow the notification to the VPN settings and turn off Always-on if you want the retries to stop. The notification can remain until Android reconnects, according to Google’s documented behavior.
Recheck after a restart only as a diagnostic
A restart can refresh the status display and reveal which service starts at boot, but it does not remove a saved profile, Always-on policy, or administrator rule. If the key returns after restarting, repeat the VPN-list check and address the setting that is reactivating it.
Check for a managed profile
Look for a work-profile VPN or management notice. If Android does not allow the setting to be changed, stop troubleshooting at the user level and ask the responsible administrator.
Android version and device limits
Google’s instructions identify Android 14 or later for some VPN controls. On earlier versions, equivalent options may be named differently or may be exposed only by the VPN app. Always-on and lockdown availability can also depend on the device manufacturer.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteGoogle states that Pixel 7 and later phones and Pixel Tablet include an optimized built-in VPN by Google in countries where that service is available. Availability is geographic, so do not assume that a Pixel in every country has the same built-in service. The presence of that service does not change the general method: find the active VPN entry, disconnect it, and adjust Always-on or lockdown if it reconnects.
A quick decision guide
| What you see | Most likely cause | Next action |
|---|---|---|
| Key icon and a VPN entry marked connected | Ordinary active VPN session | Open its gear icon and choose Turn off, or disconnect in the named VPN app. |
| Key disappears, then returns | Always-on or app automatic-connect behavior | Disable Always-on or the app’s automatic connection, then disconnect again. |
| “Always-on VPN stopped working” notification | Persistent retry or failed tunnel | Open VPN settings and turn off Always-on if you do not want reconnection attempts. |
| Apps have no internet when VPN fails | Block connections without VPN is enabled | Turn off lockdown if policy permits and you accept normal, non-VPN traffic. |
| Controls are missing or greyed out | Work profile, enterprise management, or Knox policy | Contact the organization’s administrator. |
| Profile is obsolete and will never be used again | Saved system VPN configuration | Choose Forget after confirming it is not needed. |
What not to do
- Do not delete every VPN profile before identifying the active one; you may remove a work connection or a configuration you still need.
- Do not confuse the key icon with a phone security lock indicator.
- Do not disable lockdown on a managed device without approval.
- Do not promise that a reboot permanently fixes the issue; it cannot override Always-on or enterprise policy.
- Do not assume a Samsung Knox behavior applies to every Android phone.
The reliable path is to identify the VPN in Android Settings, disconnect it in the place that controls it, and then disable the automatic or managed policy that brings it back. Use Forget only for a profile you no longer need, and treat lockdown as a deliberate security-versus-connectivity choice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
