Kill Switch — protection when the tunnel drops
A VPN kill switch is a safety net that prevents accidental exposure if the encrypted tunnel disconnects. Without it, your operating system can fall back to the open internet, revealing your real IP and DNS. Tunari's Kill Switch blocks all traffic until the tunnel is safely restored.
What a Kill Switch is and the leak it prevents
When a VPN is connected, your traffic goes through an encrypted tunnel. If that tunnel drops for any reason, most operating systems will immediately route apps back over the regular network.
That fallback can expose your real IP address, DNS requests, and location to networks and sites you access. A kill switch stops this by holding all traffic until the secure tunnel is back, so there is no unprotected gap.
How Tunari blocks traffic until the tunnel returns
Tunari monitors the VPN session and, if the connection drops, blocks internet traffic from leaving your device until the VPN reconnects or you choose to disconnect. Once the tunnel is restored, normal connectivity resumes automatically.
This protection works across all supported protocols: WireGuard (default), AmneziaWG (a censorship-resistant WireGuard variant), VLESS+Reality (disguises VPN traffic as ordinary HTTPS/TLS to resist DPI), OpenVPN, and IKEv2. The tunnel uses AES-256 encryption.
Tunari follows a strict no-logs policy by design and operates under EU jurisdiction (TunariVPN Sp. z o.o., Warsaw, Poland; GDPR/RODO applies). No browsing history, traffic, DNS queries, or IP addresses are tracked, collected, or stored.
When a Kill Switch matters most
Public Wi‑Fi and shared networks: hotspots can be unstable, and captive portals or brief dropouts are common. If the VPN blips, the kill switch prevents your apps from leaking onto the open network.
Censorship and DPI environments: in Russia, TSPU/ТСПУ deep‑packet‑inspection systems throttle or block many VPN protocols. In our tests, AmneziaWG and VLESS+Reality help resist DPI, but temporary disruptions can happen. The kill switch ensures your real IP does not leak during those moments.
Torrenting and privacy-first tasks: long-running transfers or unattended sessions are vulnerable to momentary disconnects. With a kill switch, transfers pause rather than expose your IP.
How to enable Kill Switch in the Tunari app
iOS and Android: open the Tunari app, go to Settings, and toggle Kill Switch on. When enabled, if the VPN drops, your device will have no internet access until Tunari reconnects or you disable the toggle.
Windows: open the desktop app, find Settings, and enable Kill Switch. Traffic will pause automatically during reconnects or when switching servers.
macOS (alpha): the feature is included in the alpha builds under Settings. As the macOS app is in active development, labels and availability may change during testing.
If you need temporary connectivity without the VPN, turn Kill Switch off, complete your task, then reconnect and re‑enable it.
Frequently asked questions
Try Tunari free for 7 days
Enable Kill Switch and keep your IP private on iOS, Android, and Windows; macOS is in alpha. 30-day money-back guarantee on paid plans.
View pricing