A VPN kill switch blocks all device network traffic the moment the VPN tunnel drops — preventing accidental leaks.
Explanation
Without a kill switch, if your VPN tunnel disconnects mid-session (network hiccup, server restart, congestion), your traffic falls back to routing over the naked network — and destinations see your real IP, ISPs see your real destinations, and any cookies or sessions may leak identity. A kill switch prevents that by blocking all outbound traffic until the tunnel is re-established. Two common types: application-level (only blocks specific apps you designated) and system-level (blocks everything until the VPN reconnects). System-level is the safer default. Kill switches are a VPN feature; web proxies do not need them because there is no tunnel to drop — every request either goes through the proxy or fails visibly in the browser.
Related terms