The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →The fix depends on what “not working” means. A VPN that will not connect needs different checks from one that connects but leaves apps offline or drops every few minutes. Work through the sequence below, changing one setting at a time so you can identify the cause without accidentally leaving your phone unprotected.
Quick troubleshooting checklist
- Turn the VPN off and confirm that a normal website loads.
- Test another network: switch between Wi‑Fi and mobile data.
- Restart the phone; restart the router if Wi‑Fi is involved.
- Disconnect other VPNs and remove obsolete VPN profiles.
- Temporarily disable Always-on VPN and Block connections without VPN.
- Complete any public Wi‑Fi sign-in page.
- Exclude the VPN app from battery and background restrictions.
- Try another VPN server.
- Change the VPN protocol.
- Temporarily disable split tunneling, custom DNS and filtering features.
- Update the app, sign out and in, clear its cache, or recreate the profile.
- Reset Android network settings.
- Contact the VPN provider or your organization’s IT administrator with the exact error and logs.
1. Identify the symptom
Note which description matches your phone:
- The app crashes or will not open.
- The Connect button does nothing or the attempt times out.
- The tunnel connects and immediately disconnects.
- Android shows a persistent VPN warning.
- The VPN icon appears, but websites and apps cannot connect.
- Browsing works, but one app, game, bank or streaming service fails.
- It works on another network or another device.
“Connected” normally means Android created a VPN interface. It does not prove that DNS, routing or the remote server is usable.
2. Confirm that Android is online without the VPN
Turn the VPN off, open a normal website, then test both Wi‑Fi and mobile data if available. Toggle Airplane mode on for about 10 seconds and off again, then restart the phone. For Wi‑Fi problems, restart the router and try another Wi‑Fi network. For mobile-data problems, check signal, data allowance, roaming and carrier restrictions.
| Test result | What it suggests |
|---|---|
| Works on mobile data but not Wi‑Fi | Router, captive portal, DNS, firewall or local network policy |
| Works on Wi‑Fi but not mobile data | Carrier/APN, roaming, protocol or cellular filtering issue |
| Fails on every network | App, account, profile, protocol, device or VPN-service problem |
| Works on another device on the same network | Android or the VPN app’s configuration is more likely |
| Every VPN fails on this phone | Android or the manufacturer’s network-management layer is more likely |
3. Remove Android VPN conflicts
Open Settings → Network & internet → VPN. Menu names differ by manufacturer; search Settings for “VPN” if you cannot find it. Google documents this location and the Always-on controls at Android VPN Help.
#1 Best Overall
- 𝐑𝐨𝐚𝐦 𝟔 𝐀𝐗𝟏𝟓𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐓𝐫𝐚𝐯𝐞𝐥 𝐑𝐨𝐮𝐭𝐞𝐫 - Delivers fast Wi-Fi 6 speeds (1201 Mbps on 5 GHz, 300 Mbps on 2.4 GHz) for uninterrupted video streaming, downloading, and online gaming all at the same time. Actual Wi-Fi speeds vary based on source bandwidth, environment, and distance to devices.
- 𝐒𝐞𝐜𝐮𝐫𝐞 𝐖𝐢-𝐅𝐢 𝐎𝐧-𝐓𝐡𝐞-𝐆𝐨 - Connects to public Wi-Fi and creates a private, secure network for all your devices. Supports multiple devices at once, ideal for hotels, Airbnbs, airports, and even home use. VPN connectivity enables secure remote work. This is not a Mi-Fi device or mobile hotspot.
- 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐀𝐧𝐲𝐰𝐡𝐞𝐫𝐞, 𝐀𝐧𝐲 𝐖𝐚𝐲 - Offers (1) Router Mode for Ethernet or USB (phone) tethering connections, (2) Hotspot Mode for secure access to public WiFi , and (3) AP/RE/Client Mode to extend WiFi, add WiFi to wired setups, or connect wired devices wirelessly.
- 𝐏𝐨𝐫𝐭𝐚𝐛𝐥𝐞 𝐚𝐧𝐝 𝐃𝐮𝐫𝐚𝐛𝐥𝐞 𝐃𝐞𝐬𝐢𝐠𝐧 - The Roam 6 AX1500, measuring a compact 4.09 in. × 3.54 in. × 1.10 in., is a pocket-sized travel router perfect for your next trip or adventure.
- 𝐌𝐮𝐥𝐭𝐢𝐩𝐥𝐞 𝐰𝐚𝐲𝐬 𝐭𝐨 𝐩𝐨𝐰𝐞𝐫 𝐲𝐨𝐮𝐫 𝐫𝐨𝐮𝐭𝐞𝐫 - Power the Roam 6 via its USB-C port using the included adapter or any 5V/3A PD power source, like a power bank.
- Disconnect any other VPN and remove stale profiles.
- Open the gear icon beside the intended VPN.
- Temporarily turn off Always-on VPN.
- Temporarily turn off Block connections without VPN, then reconnect from the app.
Always-on can leave a persistent notification when its connection fails. “Block connections without VPN” is a lockdown switch: traffic outside the VPN is blocked, so the whole phone can appear offline while the tunnel is unavailable. Android describes these behaviors in its VPN documentation.
Re-enable lockdown after troubleshooting if preventing unprotected traffic is your priority. If you use split tunneling, excluded apps may also be blocked while lockdown is enabled; Mullvad documents this Android interaction at its Android guide.
Work profiles and managed phones
An employer or school can enforce Always-on VPN, lockdown, allowed-app lists or work-profile-only routing. Personal apps may bypass a work VPN, while an administrator may prevent you from changing or removing it. Android Enterprise policy details are at Android Enterprise Help. Contact IT rather than factory-resetting a managed device.
4. Finish the Wi‑Fi sign-in
Hotels, airports, schools, offices and public hotspots may require browser authentication before permitting any VPN traffic. Turn the VPN off, join Wi‑Fi, open a browser and visit a plain HTTP page or the network’s sign-in address, complete the login, then reconnect the VPN.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #2
- 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
- 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
- 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.
If no sign-in page appears, forget and rejoin the network, check its details for a sign-in notification, temporarily set Private DNS to Automatic, or test mobile data. Some networks require authentication; others actively restrict VPN protocols.
5. Stop Android from killing the VPN app
Background restrictions can terminate a tunnel when the screen turns off or the phone enters power-saving mode. Search Settings for the VPN app, then inspect Battery, Background usage, Auto-start, Sleeping apps or similarly named controls. Choose Unrestricted, Don’t optimize or the closest option, and remove the app from aggressive memory cleaners.
Samsung, Xiaomi/Redmi, OnePlus, Oppo, Vivo and Huawei may place these controls in different menus:
| Device family | What to look for |
|---|---|
| Pixel and near-stock Android | Settings → Apps → VPN app → App battery usage; allow background use |
| Samsung | Battery and device care → Battery → Background usage limits; check Sleeping apps and Auto start |
| Xiaomi/Redmi | Battery settings, Autostart and background restrictions |
| OnePlus/Oppo/Vivo/Huawei | Battery optimization, startup manager, app freezer or protected-app controls |
Labels vary by Android version. OpenVPN recommends disabling battery optimization for reliable Always-on operation at OpenVPN Connect’s Android guide.
Recommended Free Tools
Rank #3
- Unlocked, portable hot spot for 5G and 4G LTE around the world, certified with AT&T requires a 5G compatible SIM card. Ask your 5G wireless network provider for the best 5G data plan for your needs
6. Try another server and protocol
A server can be overloaded, unavailable, distant or blocked by the current network. Choose the app’s recommended or nearest server, then try a second server in the same country. Use a nearby country only as a diagnostic.
Change one protocol setting, reconnect, and test again:
- WireGuard: often efficient, but a particular network or configuration may reject it.
- OpenVPN UDP: commonly preferred for speed when UDP is permitted.
- OpenVPN TCP: may work on restrictive or unreliable networks, with possible speed loss.
- IKEv2/IPsec: can handle network changes well, but support varies by provider and app.
There is no universally best protocol. UDP filtering, TCP timeouts, IPv6 incompatibility, DNS failure, MTU problems and expired server certificates can all produce similar symptoms. Provider support differs; for example, Surfshark documents WireGuard, OpenVPN and IKEv2 options at its Android page.
7. Fix “connected but no internet”
- Temporarily disable Always-on VPN and lockdown.
- Turn off split tunneling or per-app routing.
- Try another server and protocol.
- Disable the VPN app’s custom DNS, ad blocking, tracker blocking or antivirus feature temporarily.
- Set Android Private DNS to Automatic.
- Reconnect after toggling Wi‑Fi off and on, then test mobile data.
- If only some destinations fail, test whether IPv4 works while IPv6 does not.
Test several unrelated websites and apps. Re-enable security and filtering features one at a time after finding the cause. Banking, streaming and gaming services may reject known VPN addresses; Android Auto, casting, printers and smart-home discovery may require local-network access.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRank #4
- WIFI 7 SPEEDS UP TO 3.6 GBPS, ANYWHERE YOU GO: Powered by a 5G or 4G cellular connection, M7 delivers fast, reliable WiFi 7 performance. Real-world speeds depend on carrier network, signal strength, location, and connected devices
- GLOBAL COVERAGE WITH NETGEAR eSIM IN 140+ COUNTRIES: Purchase 5G or 4G data plans from the Nighthawk app with no contracts. Requires free NETGEAR account. Coverage and speeds vary by country and carrier
- US CARRIER SUPPORT: The M7 is certified for AT&T and T-Mobile, unlocked for flexible use across compatible carriers. For US local carrier eSIM or SIM activation and data plan details, contact your carrier directly
- POWERFUL BUILT IN SECURITY - includes firewall protection, WPA3 encryption, and automatic firmware updates help protect your data when using public WiFi
- CONNECT UP TO 32 DEVICES AND FREE UP YOUR PHONE: A dedicated hotspot outperforms phone tethering. Connect laptops, tablets, and smart devices simultaneously while keeping your phone free
8. Repair permissions, account and app state
- Open the VPN app and accept Android’s VPN connection request.
- Confirm the intended VPN is selected in Android’s VPN screen.
- Force-stop the app and reopen it.
- Sign out and back in if authentication appears stale.
- Update from Google Play or the provider’s official download page.
- Clear the app cache.
- If needed, clear storage and recreate or re-import the profile.
Clearing storage can delete WireGuard profiles, certificates, saved credentials, custom DNS and split-tunnel rules. Record recovery details before doing it. Reinstall only after confirming your account and configuration information.
Also check for an expired subscription, device-limit error, wrong account, expired certificate, deleted server profile or provider outage. Mullvad’s current Android download page lists Android 9.0 or later, an official APK and WireGuard configuration fallback: Mullvad Android download.
9. Reset Android network settings
Search Settings for reset network settings. Common paths are Settings → System → Reset options → Reset Wi‑Fi, mobile & Bluetooth; Samsung and other brands use similar wording under General management or System management.
This removes saved Wi‑Fi networks, Bluetooth pairings and some cellular preferences. It normally does not erase personal files or perform a factory reset. Rejoin Wi‑Fi and recreate the VPN profile afterward.
Best Value
- 𝐑𝐨𝐚𝐦 𝟔 𝐀𝐗𝟏𝟓𝟎𝟎 𝐝𝐮𝐚𝐥-𝐛𝐚𝐧𝐝 𝐬𝐩𝐞𝐞𝐝𝐬 - Wi-Fi 6 Speeds up to 1,201 Mbps (5 GHz) and 300 Mbps (2.4 GHz) for up to 60 devices simultaneously. Actual Wi-Fi speeds vary based on source bandwidth, environment, distance to devices, and obstacles. ◇§
- 𝐏𝐨𝐫𝐭𝐚𝐛𝐥𝐞 𝐚𝐧𝐝 𝐝𝐮𝐫𝐚𝐛𝐥𝐞 𝐝𝐞𝐬𝐢𝐠𝐧 - Roam 6 AX1500 is a pocket-sized travel router compactly designed for trips and adventures, featuring a 1 Gbps WAN/LAN port and a 1 Gbps LAN port for reliable wired connectivity.
- 𝗦𝗲𝗰𝘂𝗿𝗲 𝗪𝗶-𝗙𝗶 𝗼𝗻-𝘁𝗵𝗲-𝗴𝗼 - Connects to public Wi-Fi and creates a private, secure network for all your devices. Supports multiple devices at once, ideal for hotels, Airbnbs, airports, and even home use. VPN connectivity enables secure remote work.
- 𝐌𝐮𝐥𝐭𝐢𝐩𝐥𝐞 𝐰𝐚𝐲𝐬 𝐭𝐨 𝐜𝐨𝐧𝐧𝐞𝐜𝐭 - (1) Router Mode: Connects to public Wi-Fi, ISP, or phone (USB tethering). (2) AP/RE/Client Mode: Adds WiFi to wired setups, extends WiFi, or connects wired devices wirelessly.
- 𝐎𝐮𝐫 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐜𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. Advanced security is integrated into the device’s design, development, and ongoing maintenance.
10. When the app remains unusable
Use an official manual WireGuard profile, Android’s manual VPN profile where supported, or the provider’s official APK. Manual setup is not automatically simpler: keys, certificates, server addresses and DNS settings must be maintained. A router-level VPN or a different provider is another option, but neither repairs an Android configuration problem.
Google’s own VPN availability depends on device and country; its help page identifies Pixel 7 and later phones and Pixel Tablet where the service is available: Google Android VPN Help.
What to send support
Provide your Android version, phone model, VPN app and version, protocol, server location, Wi‑Fi or mobile data status, exact error text, whether another network works, and relevant diagnostic logs with personal information removed. Tell support which single change restored or failed the connection.
Quick Recap
Prevent repeat failures
- Keep Android and the VPN app updated.
- Exclude the VPN app from battery optimization and sleeping-app controls.
- Keep account-recovery details and a backup configuration available.
- Know how to disable lockdown temporarily if the VPN service is unavailable.
- Maintain a trusted-network or local-device exception when casting, printing or smart-home access requires it.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →
