Why Does VPN Keep Turning On on iPhone?

You switch the VPN off in Settings, go back to the home screen, and a minute later the badge is back at the top of the screen. Or you open one particular app, and the VPN starts without being asked. Or every time you join the home Wi-Fi it connects. When an iPhone VPN keeps turning on, it is rarely a glitch. It is almost always a setting somewhere, doing exactly what it was told to do.

This guide is a diagnostic path, not a theory lesson. It starts by telling the three symptoms apart, goes through the six usual causes in the order that finds them fastest, and ends with a clean reset if you want to start over. If you simply want the standard way to switch a VPN off, see turning off a VPN on any device.

First, work out which symptom you have

"Keeps turning on" covers three different situations, and each has different causes.

1. It comes back after you turn it off. You flipped the switch, and later it flips itself. This points to automatic rules: Connect On Demand, an app option, an automation or a profile.
2. It starts when you open a certain app or join a certain network. The trigger is specific. Look at Shortcuts automations and on-demand rules for particular Wi-Fi networks.
3. The badge appears but you never connected your VPN. Something else is using the VPN mechanism. Other apps can create VPN-style connections, which is a separate source from your VPN app.

Spend thirty seconds noting which one it is, and what you were doing in the minute before it happened: joining Wi-Fi, opening an app, unlocking the phone, waking from sleep. That one note often solves the case before you open a single menu.

Cause one: Connect On Demand

This is the most common cause. A VPN configuration can carry rules that tell iOS to bring the tunnel up automatically. The switch that enables this is called Connect On Demand, and it lives on the configuration's info screen.

To check it:

1. Open Settings, then General, then VPN and Device Management.
2. Tap VPN. You will see one or more configurations.
3. Tap the small i button beside the one that keeps starting.
4. Look for Connect On Demand. If it is on, iOS may connect whenever the rules say so.
5. Switch it off, then switch the VPN itself off.

Some apps set these rules every time they connect, so the switch may turn itself back on. If it does, the app has its own auto-connect option (the next cause) and you should change it there too. This article stays focused on the symptom rather than on every field of that screen.

Cause two: the VPN app's own auto-connect options

Many VPN apps have settings with names such as auto-connect, connect on launch, connect on untrusted Wi-Fi, reconnect after interruption or keep alive. Names vary between apps and versions, and we cannot list the screens of any particular app, so look through its settings page for anything that sounds automatic.

What each type does in general:

Option type	Behaviour	Typical reason to turn it off
Connect on launch	Starts the VPN whenever you open the app	You only open the app to check status
Connect on untrusted or public Wi-Fi	Starts when you join a network not on your trusted list	You trust a network you have not listed
Auto-reconnect	Tries again after a drop	Usually helpful; turn off only for testing
Always-on style rules	Keeps the tunnel up and restores it if it drops	You want manual control

A related feature is the VPN kill switch. It blocks traffic when the tunnel drops so nothing leaks, and in doing so it can look as if the VPN is forcing itself on. If your internet stops until the VPN returns, a kill switch or similar protection may be involved, which is the app doing its job.

When you want the VPN to stay off, switch off the auto options in the app first, then use the Settings switch, then check that it stays off for an hour.

Cause three: Shortcuts automations

The Shortcuts app can run actions when something happens, for example when you open an app, arrive somewhere or connect to a Wi-Fi network. One of the possible actions is to connect to a VPN. If you or someone else set up such an automation, it will keep switching the VPN on exactly as designed.

To look:

1. Open the Shortcuts app and tap the Automation tab.
2. Read the list. Look for triggers such as "When I open" an app, "When I connect to" a Wi-Fi network, or time-based rules, with an action that mentions VPN.
3. Tap the automation to see details. Some run immediately, others ask before running.
4. Switch it off or delete it.

If you do not use Shortcuts, the list will be empty and you can rule this cause out in ten seconds. If you did create one some time ago, you may have forgotten it entirely, which is exactly why it is worth checking.

Cause four: another app using the VPN mechanism

Apps that filter content, block ads, manage DNS, scan for malware or protect children's browsing often work by installing a VPN-style network extension. They show up in the VPN list in Settings and make the same badge appear. The app may have its own switch, and it may start its extension on schedule or on launch.

How to find out:

1. In VPN and Device Management, look at the VPN list. Note each entry's name and which app it belongs to.
2. If you see an entry you do not recognise, tap the i button and read it. Do not delete it blindly, because a parental-control or work app might need it.
3. Open the matching app and look for its on/off switch.
4. Before removing an app, read its store listing and its App Privacy Details so you know what you are removing.

A good clue is the timing. If the badge appears at the moment you unlock the phone, or after you open a particular app, you may be looking at that app's extension rather than your VPN. Having two of these active at once can also cause slowness, because they compete for the same system feature.

Cause five: a profile or managed-device setting

If the iPhone was provided by an employer or school, or you installed a configuration profile, a VPN may be forced on by management. In that case you may find that the VPN returns instantly, that you cannot delete it, or that the switch is greyed out.

Check Settings, General, VPN and Device Management for entries under profiles or device management. If one belongs to your organisation, leave it alone. Always-on VPN is a feature Apple provides only for supervised, managed devices, so a personal phone does not normally have it. If the phone is managed and the VPN is a nuisance, ask the administrator. Removing a management profile yourself can lock you out of work apps and may be against policy.

If you find a profile you do not recognise on a personal phone, take it seriously. Find out where it came from before removing it, and remove it if you cannot explain it.

Cause six: reconnecting after a network change

Sometimes nothing is wrong and the VPN behaves as designed. When your phone moves from Wi-Fi to mobile data, wakes from sleep or exits Airplane Mode, a VPN app that has been told to keep the tunnel can rebuild it. The badge disappears for a moment, then returns. This feels like "turning on by itself", but it is the tunnel recovering.

To confirm, note whether it only happens just after a network change. If so, read reconnecting when the VPN disconnects, which covers that behaviour. If you do not want automatic recovery, turn off auto-reconnect in the app, accepting that you will reconnect by hand.

A quick map from symptom to cause, and three case studies

What you notice	Most likely cause	First thing to check
Comes back minutes after you switch it off	Connect On Demand, or app auto-connect	The i button on the configuration; the app's settings
Starts when you open one particular app	Shortcuts automation, or an app-specific rule	Shortcuts, Automation tab
Starts when you join a certain Wi-Fi	On-demand rule or app trusted-network setting	The i button; the app's trusted networks
Badge appears but your VPN app says disconnected	A different app's extension	The VPN list in Settings
Cannot be switched off at all	A managed profile	VPN and Device Management, profiles
Returns right after a Wi-Fi or data change	Auto-reconnect doing its job	The app's reconnect option

The map is a starting point. These three short cases show how it plays out.

Nina, the commuter. Her VPN reconnects every morning when she joins the office Wi-Fi. She had once turned on a trusted-network option in the app so that it would connect on any network outside her home. Moving the office network into the trusted list stopped it. Nothing needed deleting.

Arun, the shortcut fan. He built an automation two summers ago that starts the VPN whenever he opens a video app. He forgot about it entirely. The Automation tab showed it immediately. Deleting it ended the mystery in under a minute.

Lin, the badge from nowhere. The VPN badge sat in the status bar even when her VPN app said disconnected. The VPN list in Settings showed a second entry from a content-blocking app she had installed for her son. The two were unrelated, and the second one needed to stay, so she simply learned to read the list rather than the badge.

A clean reset when you cannot find it

If you have worked through the causes and the VPN still comes back, do a controlled reset. It keeps your pass intact, because the login details stay on your My Pass page.

1. Switch the VPN off in Settings, and turn off Connect On Demand if it is present.
2. Delete the VPN configuration with the Delete VPN button on its info screen.
3. Delete the Shortcuts automations that mention VPN.
4. Delete the VPN app, restart the iPhone, and install the app again from the App Store.
5. Open the app, sign in and connect once, and allow the permission prompt.
6. Before you change anything else, watch the phone for an hour. If the VPN behaves, add your preferences back one at a time.

If it still turns itself on, the problem is outside the VPN app, likely a profile or a second extension, and the iPhone troubleshooting guide is the next step.

Summary

When an iPhone VPN keeps turning on, a rule is nearly always responsible: Connect On Demand on the configuration, an auto-connect option in the app, a Shortcuts automation, another app's VPN-style extension, a managed profile, or ordinary auto-reconnect after a network change. Note what you were doing when it started, check the causes in order, and change one thing at a time. If you need a pass to use while you sort it out, the pricing page lists the current options.