Can Two VPN Apps Conflict?

You installed a VPN for travel last year, a second one came free with your antivirus, your employer gave you a third for work, and now the internet on your laptop crawls or refuses to load at all. Somewhere in that pile sits the question this article answers: can two VPN apps conflict? They can, often, and the symptoms rarely mention the real cause. Instead of "two VPNs are fighting", you get a spinning browser, an authentication error or a message about a missing adapter.

This guide explains what a VPN app really takes over on your device, why two of them cannot share it peacefully, how to recognise a clash, and how to clean up without losing access to the VPN you do want. It is deliberately about the clash itself. For basic connection failures with only one app, see VPN Not Connecting? Step-by-Step Fixes.

What a VPN app takes over

A VPN app does not just open a window. To send all your traffic through a tunnel, it changes several shared parts of the system.

• The routing table. This is the list of rules that says which network a packet should leave through. A VPN adds a rule such as "send everything through the tunnel first".
• DNS settings. Most VPNs also tell the device which DNS server to ask, so that website lookups go through the tunnel too.
• A virtual network adapter. On computers, a VPN adds a software network card, and the system ranks it against the real Wi-Fi and Ethernet cards.
• The system's VPN slot. Phones allow one app to hold the active VPN at a time. On a computer there is no strict slot, but only one set of default routes can win.
• Background services and firewall rules. Helper services start with the system, open ports and add rules.

Each of these is a shared resource. If two apps both claim "all traffic goes through me", they are asking the system for incompatible things. That is the root of every conflict in this article.

Why two VPNs cannot both be in charge

Imagine two traffic officers each shouting a different direction at the same crossroads. Drivers (your packets) obey one, then the other, and end up stuck or going in circles. Here is how that plays out technically.

1. Competing default routes. App A says "send everything to my tunnel". App B says the same. The system picks one based on priority, usually the most recently added. Traffic that was meant for A's tunnel may enter B's, which A cannot see.
2. Competing DNS. Each app sets its own DNS server. If the winner's DNS server is only reachable through the other tunnel, name lookups fail, and every site says "server not found" even though the connection is up.
3. Tunnel inside a tunnel. If B connects while A is up, B's own handshake travels through A's tunnel. Sometimes this works, but it adds overhead, reduces the maximum packet size and often causes stalls on large downloads.
4. Address overlaps. Both tunnels may hand your device private addresses from the same range, such as those described in RFC 1918. When two networks use the same numbers, the system cannot tell which is which.
5. Kill switch versus kill switch. Each app's kill switch blocks traffic if its own tunnel drops. When one app steps aside for the other, the first app's kill switch sees "tunnel down" and cuts the internet.
6. Permission fights. On a phone, whenever you start the second app it asks to take over the VPN slot. The first is dropped. If both are set to reconnect automatically, they can take turns stealing the slot, and the connection flaps.

A clash is therefore not a sign that either product is faulty. They are simply not designed to share.

Symptoms that point to a clash

None of these proves a conflict alone, but several together are a strong signal.

Symptom	What it usually means
Connected, but no site loads	Competing routes or DNS
Internet works only when one app is fully closed	Routes or kill switch of the second app
Frequent "VPN permission" prompts on a phone	Two apps fighting for the VPN slot
One app keeps disconnecting the other	Automatic reconnect loops
Very slow speeds only when both are installed	Tunnel inside a tunnel or competing adapters
An error about a missing or disabled adapter	Another app removed or reordered the adapter
Work resources unreachable after you connect a personal VPN	Personal VPN overrode the company routes
Websites show a different location than expected	The wrong app's tunnel is carrying the traffic

If the symptom began right after installing a new VPN-like app (including an antivirus suite with a built-in "secure connection" feature), suspect that app first.

Phones: one active VPN, but many apps in the way

Phones are simpler because the operating system enforces a single active VPN. That saves you from most routing fights, but not from all trouble.

Android. Only one app can hold the VPN at a time. When you start a second VPN app and accept its prompt, the first is disconnected. Problems appear when both are set to "always on", or when a leftover "block connections without VPN" rule from the old app stays enabled and cuts the internet while the new app is not yet connected. In Settings, check which app is selected under VPN, and switch off always-on for the app you no longer use. The article on Android VPN permissions explains what these toggles do, and Android's own help page on connecting to a VPN lists the system settings.

iPhone and iPad. iOS also allows one active VPN, but it can keep several VPN configurations saved. If an old configuration still has "connect on demand" switched on, it may start at moments you do not expect and displace the app you wanted. Open Settings, General, VPN and Device Management, remove configurations you no longer use, and only keep the one you rely on.

A less obvious conflict on phones comes from other apps that behave like VPNs: ad blockers that use a local VPN, privacy filters, secure-DNS apps or parental-control tools. They also use the VPN slot, so they can knock out your normal VPN, or vice versa. If you use such an app, you may need to choose between them, or use a feature inside one app instead of a second app.

Windows and Mac: more than one can be on, which is the risk

Computers do not enforce a single slot, so two tunnels can be active together. That is exactly why computers see messier conflicts.

On Windows:

1. Open the list of network adapters in system settings and note each VPN-related entry. Disabled or "unidentified" entries often come from old software.
2. Disconnect every VPN. Then connect only the one you want and test.
3. Check whether any app has installed a virtual adapter that you do not recognise. Our guide to Windows VPN network adapter problems shows how to read and reset the list.
4. Look at the firewall rules and at security suites. Many antivirus packages include their own VPN and may set rules that block others. Compare with VPN vs firewall for the roles each plays.
5. If a built-in system VPN profile and a separate app both exist, use only one at a time. Microsoft's help page on connecting to a VPN in Windows describes the built-in profile.

On macOS:

1. Open System Settings and view the VPN list. Remove profiles that you no longer need.
2. Look at the menu bar for tray icons from other tunnel apps, including mesh tools. A mesh VPN that links your own devices, as described in mesh VPN tools, can run alongside a normal VPN, but both change routing, so test the combination before you rely on it.
3. After removing something, restart the Mac, because system extensions load at start-up.

Work VPN and personal VPN on one machine

This is the most common legitimate reason for two VPNs. Your company's remote-access VPN wants all traffic, or at least traffic to company systems, to go through its own tunnel. Your personal VPN wants to take everything for itself.

• Company policy usually has priority. Many employers forbid running other tunnels while connected to the corporate one. Ask your IT team before testing.
• If both must exist, a feature called split tunneling can give each its own job: company traffic to the company VPN, the rest to the personal one. Read what split tunneling is first; it is easy to configure wrongly.
• A simple discipline helps: connect only one at a time. Finish personal browsing, disconnect, then connect to work.
• Do not install personal VPN software on a company-managed laptop without approval. It may break security rules and your access.

A clean-up routine that works

When you suspect a clash, follow this sequence rather than guessing.

1. List every VPN, tunnel or mesh app on the device. Include security suites, ad blockers with a local VPN and any system profiles.
2. Disconnect all of them. Quit each app fully, not just close the window.
3. Check that the plain internet works. If it does not, the issue is your network or an earlier leftover rule, not the active app.
4. Turn off automatic start and always-on for every app except the one you want.
5. Restart the device.
6. Connect only your chosen VPN. For XPASS customers, that means the free VPNclient app, signed in with the username and password from My Pass; the download page has the official links if you need to reinstall.
7. Test with a few sites, then add anything else back one at a time. When it breaks again, you have found the conflicting pair.
8. Uninstall the ones you will not use. Use the system's own uninstall tool, then restart so leftover adapters can be removed.

For a quick way to stop a tunnel safely on any device, see how to turn off a VPN.

Scenarios

Ning, student with a free VPN and a paid one. After installing a second app on her Android phone, the internet kept dropping. Both apps were set to always-on, and each reclaimed the slot every few seconds. She switched always-on off for the old app, uninstalled it and the flapping stopped.

Tee, consultant using a company VPN. He connected his personal VPN while the company tunnel was active, and the file server became unreachable. The personal tunnel had replaced the routes to the server. He now disconnects the personal VPN before work and checks with IT before testing anything else.

Jaa, Windows laptop user. An antivirus suite installed its own "secure connection" feature and a virtual adapter. Her normal VPN stopped connecting after an update. She disabled the suite's VPN module, removed the stale adapter in network settings and rebooted. The VPN worked again.

Habits that prevent clashes

• Keep one VPN app per device for daily use.
• Before trying a new VPN, disconnect and switch off auto-start for the old one.
• Read what an antivirus or router app turns on; many include VPN-like features.
• Uninstall tools you no longer use rather than leaving them dormant.
• Note which app you intended to use before you travel or start a remote shift, so you do not have to guess when something breaks.
• Do not stack VPNs hoping for extra safety. If you want a deliberate multi-step route, use a feature designed for it.

Summary

Two VPN apps can conflict because each wants to control routing, DNS, adapters and the system's VPN slot. Phones allow one active VPN, so clashes show up as constant permission prompts or leftover block rules; computers allow two tunnels at once, which leads to broken routes, DNS failures and slow connections. Diagnose by disconnecting everything, testing the plain internet, then adding one app at a time, and uninstall what you do not use. If you want a single prepaid VPN pass to keep things simple, the pricing page lists the options.