A VPN client can show “Connected” while a browser or app still cannot reach the internet. The status usually confirms that the client has established a tunnel; it does not prove that your device has working internet access, that DNS is resolving correctly, or that every app is sending traffic through the route you expect. Work through the checks below in order, changing one thing at a time so you can identify what actually fixes the problem.
5
checks to work through
4
platforms with device tips
1
change at a time
First, Check the Connection Without the VPN
Start with the simplest question: can the device reach the internet when the VPN is disconnected? Disconnect in the VPN app, then open a few unrelated websites or try an app that normally needs an internet connection. If nothing works, the VPN is unlikely to be the root cause. Check whether the router is online, whether other devices on the same network can connect, and whether the network requires you to sign in through a captive portal.
On public Wi-Fi, a hotel, airport, or campus network may require you to accept terms or enter a room, ticket, or account detail before general internet access is available. Disconnect the VPN, open the network’s sign-in page, complete the required step, and then reconnect. If the sign-in page does not appear, try opening a normal website rather than an app that may reuse cached content. Avoid entering sensitive information into a page unless you have confirmed that it belongs to the network provider.
If direct access also fails, restart Wi-Fi or mobile data and check the device’s network indicator. For Wi-Fi, confirm that the device is connected to the intended network rather than a saved network with no internet access. For mobile data, check that cellular data is enabled and that the app you are testing is allowed to use it. Restarting the router may help if other devices have the same issue, but it will not resolve an account or outage problem outside your local network.
If the internet works with the VPN off but fails as soon as you connect, continue to the next checks. Keep track of whether the problem affects every app, only a browser, or only one network. That distinction helps separate a tunnel or DNS issue from an app-specific setting.
Fix 1: Try a Different Server and Reconnect Cleanly
A server can become temporarily unreachable, congested, or unsuitable for the network you are using. A client may retain a “Connected” label even when requests are not completing as expected. Disconnect once, wait until the app reports that the tunnel has closed, and connect to another available server. If the app offers more than one protocol or connection mode, test a different supported option only after confirming that the basic internet connection works.
Change one setting at a time. If you switch servers, leave the protocol unchanged for that test; if you later change the protocol, return to a known server. This makes the result useful rather than leaving you unsure which change mattered. A server label describes its location or route, not a guarantee that every site, app, or network will work through it.
Also check whether another VPN or proxy tool is running. Two VPN clients can compete to install routes, manage DNS, or create device-level tunnels. Quit or disconnect the other tool before testing again. Browser proxy extensions, manually configured system proxies, and security software that inspects connections can also affect traffic even if they do not show a VPN status.
When discussing VPN76 VPN for Expats in China, as with any VPN option, distinguish a client’s connection status from the device’s actual ability to load the service you need. A useful test is to open more than one ordinary website and then try the specific app that failed. If one site works but another does not, the issue may be limited to that destination rather than the whole tunnel.
Some clients include a kill switch that blocks internet traffic when the tunnel is unavailable or being re-established. This is intended to prevent traffic from leaving outside the VPN, but it can look like a complete internet outage if the tunnel has stalled. If you understand the privacy trade-off and can do so safely, temporarily turn the kill switch off for diagnosis, reconnect, and test. Restore your preferred protection setting afterward; do not treat disabling it as a general fix.
Fix 2: Check DNS and Device Network Settings
DNS translates a website name into the address a device needs to connect. A tunnel may be up while name lookups are slow, blocked, or sent to an unexpected resolver. This can make a browser report that a site cannot be found even when other network traffic is possible. First test a few different sites and apps. If apps work but browser names do not, or if a browser can reach some destinations but not others, DNS is one possible cause—not proof that it is the only one.
Look for a custom DNS setting, encrypted DNS option, filtering app, or security profile that may remain active alongside the VPN. A setting configured on the router can affect all devices; a setting configured on one phone or computer may affect only that device. If you recently installed an ad blocker, firewall, parental-control app, or privacy tool, temporarily pause it for a controlled test. Re-enable it afterward, and avoid removing a managed work or school profile unless its administrator has advised you to do so.
On Windows, you can open Command Prompt and run ipconfig /flushdns to clear the local DNS cache, then reconnect the VPN and retry. This clears cached lookups; it does not repair a disconnected router, a blocked route, or an unavailable DNS server. On macOS, disconnect and reconnect the network first. DNS settings are available in the network service details, but the exact labels can vary by macOS version and network configuration. If the device is managed, check with the administrator before changing resolver settings.
On Android, review the system’s Private DNS setting and any DNS-filtering app. A custom Private DNS provider may not work on every network or alongside every VPN configuration. On iPhone, check whether a DNS or content-filtering profile is installed and whether a recently added privacy app is active. Do not remove a profile you do not recognize until you have identified what installed it; workplace, school, and security profiles can have legitimate functions.
Do not enter a random DNS address as a shortcut. Changing resolvers can affect privacy, filtering, local network services, and access to work or school resources. Prefer a setting provided by your network administrator, device owner, or VPN client. If reverting a recent DNS change restores access, record the original setting and investigate the changed configuration before choosing a permanent replacement.
Fix 3: Isolate the Problem with a Short Test
Use this sequence to narrow down the cause without repeatedly resetting the device. It is especially useful when the connection appears to work on one network but not another. Keep notes about the network, selected server, and result. The goal is not to collect speed measurements; it is to learn which condition changes the outcome.
- Test direct access. Disconnect the VPN and open more than one site or app. If direct access also fails, resolve the underlying Wi-Fi, mobile data, router, or sign-in issue first.
- Reconnect once. Wait for the client to finish disconnecting, then connect again. Confirm that the client still reports an active connection before testing.
- Change the server only. Select another available server while leaving other settings as they were. Try the same sites and apps again.
- Compare apps. Test a browser and a separate app. If only one browser fails, check its proxy, extension, secure-DNS, and cache settings rather than resetting the whole device.
- Compare networks. If practical, test a different trusted Wi-Fi network or mobile data. A result that changes with the network points toward router, firewall, or network-policy behavior.
- Restore deliberate changes. Re-enable security tools and protection options you paused for diagnosis. Keep only changes that you understand and can reproduce.
For a clearer comparison, avoid changing the server, protocol, DNS provider, and firewall rules all at once. If several settings change together and the problem disappears, you will not know which adjustment helped or which one may cause a later problem. If the problem returns after restoring a setting, note that result and report the specific setting, device, and network type to support.
A network may restrict VPN traffic or require a particular sign-in step. On a managed work or school connection, follow the organization’s policy and ask its IT team rather than trying to bypass controls. On a home network, check router security or parental-control settings only if you have permission to administer the router. A VPN connection being blocked by a network does not necessarily mean that either the device or the VPN account is broken.
Fix 4: Check for Proxy Conflicts and App-Specific Routing
A VPN does not always route every app in the same way. Some clients support split tunneling, where selected apps use the VPN and others connect directly. If the affected app is excluded from the tunnel, its traffic may follow a different path from your browser. Review the client’s per-app or split-tunneling list and confirm that the app you are testing is included in the intended route. If you change the list, reconnect before testing so the updated routing takes effect.
Check for a proxy configured separately from the VPN. On a computer, system proxy settings can direct browser traffic to a proxy that is offline or no longer reachable. A browser extension may also have its own proxy configuration. Temporarily disable only the proxy you recognize and have permission to manage, then retest. If the device belongs to an employer or school, its proxy may be required; contact the administrator before changing it.
On Windows, review Settings for any manually configured proxy and check whether another VPN adapter or network utility is active. On Mac, check the active network service’s proxy settings and disconnect other network-tunneling apps. Names and menus differ between operating-system versions, so use the system search or official device guidance if you cannot find the setting. Do not delete network adapters or profiles just because their names are unfamiliar.
On Android, only one app can generally control the system VPN slot at a time. Close other VPN or firewall apps, then reopen the intended client. Also check whether the affected app has restricted background data or is excluded in the VPN’s per-app settings. On iPhone, check for another active VPN configuration or a device-management profile. If multiple profiles are present, identify their owner before removing or changing anything.
If a single app remains offline while the rest of the device works, force-close and reopen that app, then check its own network, proxy, or account settings. An app may keep an old connection open after the VPN route changes. Sign out only if you know the account credentials and understand any consequences. A browser cache reset is usually unnecessary when other apps and fresh browser sessions already work.
- ✅ Confirm the affected app is included in the intended VPN route.
- ✅ Close competing VPN clients before testing again.
- ✅ Review browser and system proxy settings you recognize.
- ❌ Do not remove managed profiles or unknown adapters as a first step.
- ❌ Do not assume one working app proves that every app uses the tunnel.
Fix 5: Use Device-Specific Checks, Then Escalate
Windows and macOS
On Windows, first confirm that Airplane mode is off and the expected Wi-Fi or Ethernet adapter is connected. If the VPN client offers a built-in repair or reconnect option, use that before resetting the network stack. A Windows firewall or endpoint-security product may block a newly created VPN connection; check its alerts and allow only software you trust. Clearing the DNS cache can help with stale lookups, but avoid deleting adapters or changing advanced routing unless you can restore the original configuration.
On macOS, confirm that the VPN configuration is enabled in the system settings and that no second network tool is attempting to manage the same connection. If the VPN disconnects whenever the Mac sleeps or changes networks, reconnect after waking and test on a stable network. Review any content filters or network extensions installed by security software. Removing a configuration profile can affect other services, so identify its purpose before making changes.
Android and iPhone
On Android, check Wi-Fi and mobile data separately. Some devices provide a setting that changes networks automatically when Wi-Fi has no internet; turn it off temporarily only if it is making your tests confusing. Review Private DNS, data-saver restrictions, battery settings that may suspend the VPN app, and per-app routing. Menu names vary by manufacturer and Android version. After changing a setting, reopen the VPN client and reconnect rather than assuming the existing tunnel has adopted the change.
On iPhone, check whether the issue occurs on Wi-Fi, cellular data, or both. Review VPN and device-management settings, and see whether another privacy or content-filtering app is active. If the connection stops after the phone changes networks, disconnect and reconnect in the VPN app. Avoid repeatedly deleting and reinstalling the VPN profile: doing so can remove settings you need or leave you unable to restore the configuration without support.
What to Send Support
If the problem persists, provide the support team with useful diagnostic details: the device and operating-system version, VPN client version, network type, whether direct access works, whether every app or only one is affected, the server and protocol selected, and the steps you have already tried. Include the approximate time the issue began and any error text. Do not send passwords, private keys, or unrelated personal information. A clear description is more useful than repeatedly changing settings without recording the results.
Some networks, DNS services, apps, or remote services may be temporarily unavailable. If direct access works but every VPN server fails on one network, report that pattern and test again later or on another permitted network. If the VPN connects on another network but not the current one, the local network or its policy is a stronger lead. If only one app fails everywhere, focus on that app’s configuration or ask its provider for help.