NordVPN Kill Switch: platform differences and safe checks

Choose the outcome before enabling the setting

Imagine you manage a website from a laptop and want its administrative session to use the VPN. Your requirement might be: stop all internet activity if the tunnel is unavailable. Alternatively, you may want one selected program to close, while unrelated applications remain usable. Those are different requirements, and a feature labelled Kill Switch does not make them identical.

NordVPN distinguishes an Internet Kill Switch from an App Kill Switch. The former blocks internet connectivity; the latter closes designated programs. Read the feature explanation with that distinction in mind. Closing a selected application does not turn every other application into a protected one.

Write your requirement in one sentence. For example: “During a VPN interruption, the browser and file-transfer application must not continue their ordinary internet work.” Then list whether you need a whole-device block or protection for named programs. This makes it easier to notice a mismatch before an important session.

Set up a supported configuration

On Windows, inspect the Kill Switch controls before relying on them. If your aim is a broad internet block, selecting a single application is not a substitute. If you choose the app option, save your work first: deliberately closing a program can interrupt an upload or discard an unsaved operation. Recheck the selected list after replacing a program or changing how you launch it.

On Android, use the current app settings and the device’s VPN controls together. NordVPN’s Android setup guide lists Kill Switch and auto-connect separately. Manufacturer menus differ, so follow your device’s actual controls rather than copying an unrelated phone’s screenshots. Auto-connect answers when the app should reconnect; blocking answers what happens while a permitted connection is absent.

For Linux, NordVPN documents nordvpn set killswitch on, nordvpn set killswitch off and nordvpn settings for enabling, disabling and inspecting the feature. Read the current settings before making changes. If you administer the machine remotely, arrange a local recovery route first; a networking change that blocks your remote session can prevent you from undoing it through that same session.

Check exceptions instead of assuming every packet is covered

NordVPN’s Linux allowlist documentation says matching ports or subnets bypass the VPN and are not blocked by Kill Switch. These rules apply to matching incoming and outgoing traffic. A large subnet or broad port exception therefore changes the protection you are evaluating.

Separately, the Kill Switch and split tunneling guide describes combinations where excluded applications lose access under Internet Kill Switch. Do not assume a banking application will always remain online just because you excluded it from the tunnel. Inspect the guidance for your platform and test the combination you actually intend to keep.

Start with the simplest configuration that meets your need. Add a necessary exception only after recording what it excludes and why. The practical benefit is a settings list you can explain later, rather than a collection of old exceptions that quietly changes the result.

When the internet stops working

A blocked connection may be the intended result. Check the VPN’s connection state, the selected blocking mode and your recent settings changes before deleting network components. If you need to turn the feature off to restore ordinary access, understand that you are changing the protection policy; do not do it midway through work that depends on the VPN.

If one application fails while others work, inspect app selection, split tunneling and exceptions. If everything fails, distinguish an underlying Wi-Fi or internet outage from a VPN tunnel problem. Keep a short record of the failure time and app version for support, without putting credentials or private page contents into diagnostic screenshots.

Choose the app for the work you do

NordVPN’s app-versus-extension guide says the browser proxy extension covers browser traffic, while the application has broader device-oriented features. It also advises against simultaneously running both because of interference. Choose the appropriate route instead of stacking them in the belief that two icons automatically mean twice the protection.

For website work, a correctly chosen Kill Switch can make your preference explicit: pause connectivity instead of continuing without the intended tunnel. It remains one layer alongside account security, HTTPS, software updates and careful access control. Our VPN guide for website owners puts that layer in context. If the documented behavior fits your devices, review NordVPN’s current app and subscription details before choosing it.