Blog

VPN Not Connecting? How to Find What's Blocking It

An iPhone on a café table sending a ribbon of light toward a server tower on the horizon, with the ribbon stopping at a small closed garden gate halfway across

VPN won't connect? It's your network, the protocol, the server, the network's rules or your iPhone. Quick checks to tell which one, and what to try next.

Marco Lee7 min read

A VPN that won’t connect is being stopped by one of five things: your network, the VPN protocol, the VPN server, rules set by whoever runs the network, or a setting on your iPhone. The quickest test is to turn off Wi-Fi and try cellular data. If the VPN connects there, the Wi-Fi is the problem; if it fails everywhere, look at the server and your iPhone.

This post is about a VPN that never connects, or connects on only one network. If yours connects and then drops, see why your VPN keeps disconnecting on iPhone.

How to tell which one it is

Apple’s checklist for a VPN that isn’t working starts here: “Try connecting to the VPN from different Wi-Fi networks or cellular data to isolate network-specific issues” (Apple Support). Work down this list and stop when the VPN connects.

  1. Turn the VPN off and open a website. If nothing loads even without the VPN, the network isn’t letting you online yet. On public Wi-Fi, look for a sign-in page.
  2. Turn off Wi-Fi and try cellular data. Go to Settings > Wi-Fi, turn off Wi-Fi, then connect the VPN. If it connects on cellular but not on the Wi-Fi, the Wi-Fi network is the problem.
  3. Back on the Wi-Fi, try another protocol in your VPN app. If one connects and another doesn’t, the network is blocking a protocol.
  4. Try another server location. If one location fails on every network while others connect, it’s that server.
  5. Fails on every network, protocol and location? Look at your iPhone: the VPN configuration, another VPN, or updates.
  6. Once it connects, check it with the free VPN test. The IP address and network websites see should change to the VPN server’s, with no WebRTC or IPv6 leak.

VPN not working on Wi-Fi but works on data

Then the Wi-Fi is the difference. Two things to check on that network.

A sign-in page you haven’t finished. Apple says captive networks, the kind with a sign-in screen, are found “in coffee shops, internet cafes, hotels, airports, and other public locations,” and “After you log in, you should be able to access the internet” (Apple Support). Until you do, the network isn’t letting your traffic out, so the VPN can’t reach its server either.

Your own router. At home, many routers have a VPN Passthrough setting. TP-Link says it “allows the VPN traffic to pass through the Router,” is on by default on most of its routers, and can be switched in the router’s management page (TP-Link). Here’s how to find your router’s address on iPhone. Apple also suggests updating the router’s firmware and restarting the router and modem (Apple Support).

VPN won’t connect on hotel Wi-Fi

Turn the VPN off, sign in on the hotel’s page, then turn the VPN back on. If the page won’t appear, see hotel Wi-Fi login page not showing. Signed in and still stuck? Try another protocol, and if nothing works, ask the front desk whether their network allows VPNs.

Can a Wi-Fi network block a VPN?

Yes, and not always on purpose. NIST’s guide to IPsec VPNs: “Remote access users can find themselves on networks that, intentionally or not, cause VPN connections to fail” (NIST). One way it happens is through the protocol: each one travels a certain way, and a network can block that way.

  • WireGuard runs over UDP only. It “securely encapsulates IP packets over UDP” (WireGuard) and “explicitly does not support tunneling over TCP” (WireGuard).
  • IKEv2/IPsec uses UDP ports 500 and 4500. “IKE runs over UDP ports 500 and 4500” (IETF RFC 7296). NIST says “The most common network issue when setting up IPsec” is a firewall “blocking the IKE ports UDP 500 and 4500” (NIST).
  • OpenVPN can use UDP or TCP. UDP is the default, and the manual says OpenVPN “is designed to operate optimally over UDP, but TCP capability is provided for situations where UDP cannot be used” (OpenVPN). Which one an app uses depends on the app and its servers.

NIST adds that “Some networks block all UDP packets” (NIST), which stops WireGuard and IKEv2 alike. So on a network where you’re allowed to use a VPN, switching protocol is the main fix.

To check whether the Wi-Fi is blocking your VPN:

  • Connects on cellular, fails on the Wi-Fi with every protocol: the network blocks VPNs, or there’s a sign-in page you haven’t finished.
  • Connects on the Wi-Fi with only some protocols: the network blocks the others. If WireGuard and IKEv2 both fail while an OpenVPN option that uses TCP connects, I’d guess UDP is blocked.

The free NAT type test shows whether UDP gets out on the network you’re on.

One caution: if the network’s owner blocks VPNs on purpose, a protocol that happens to get through is still against their rules.

The VPN server: down, busy or blocked

If one location fails on every network while others connect, it’s the server. NIST’s guide mentions VPN servers that are “overloaded” and taking “a server out of use (for instance, to update its operating system)” (NIST). Pick another location. If every location fails on one network but works on another, it’s the network.

Keep “won’t connect” separate from “connects but a site won’t load.” If the VPN is connected and only one site refuses to work, that site may be refusing VPN connections. Netflix shows error E106 or “You seem to be using a VPN or proxy,” and says “VPNs aren’t supported for watching Live events on Netflix or if you’re on an ad-supported experience” (Netflix Help). A VPN doesn’t change that rule. If a site won’t load even with the VPN off, here’s how to tell who’s blocking it.

Why is my VPN not working at school or work?

Because the network may not allow it. Schools, employers and hotels set their own rules, and some block personal VPNs on purpose. UT San Antonio says personal or third-party VPN apps are “not permitted” on its campus Wi-Fi, because its security monitoring works “by inspecting traffic as it moves across the network” and “Personal VPNs encrypt that traffic” (UT San Antonio). On a work iPhone set up with Always On VPN, the organization can “monitor and filter traffic” and “restrict device access to the internet” (Apple Platform Security).

The iPhone itself can be locked down. On a supervised iPhone, one a school or company owns and manages, the administrator can turn off adding VPN configurations, so “Users and third-party apps can’t create and add VPN configurations” (Apple Platform Deployment). A supervised iPhone shows a supervision message at the top of the main Settings page, and installed profiles are listed in Settings > General > VPN & Device Management (Apple Support).

Some countries restrict VPNs. Freedom House reports that Turkey “restricted access to 16 of the most popular VPNs” in late 2023, and that in February 2024 Iran “criminalized the use of ‘unauthorized’ VPNs” (Freedom House).

My plain advice: follow the network’s rules and the local law. If you have a real need for a VPN at school or work, ask the IT team; UT San Antonio, for one, takes exemption requests for academic and research needs. I won’t cover ways around these blocks.

Your iPhone: configuration, other VPNs and updates

If nothing connects on any network, check the phone.

  • The VPN configuration. “The user must explicitly authorize your app the first time it saves a VPN configuration” (Apple Developer). If you declined, or deleted the entry, open the app and connect so it can add it again, and approve the request if iOS asks. The entries are in Settings > General > VPN & Device Management, and what a VPN configuration is explains each one.
  • Another VPN. “Only one Personal VPN configuration can be enabled simultaneously on the system” (Apple Developer), and a VPN from a work or school profile takes precedence over an app’s (Apple Developer). Apple also says VPN, firewall and other security apps “can potentially block some connections,” and suggests searching Settings for “VPN, profile, firewall, and filter” (Apple Support). Turn the others off while you test.
  • Date and time. Apple’s first fix for connection problems is making sure “the date, time, and time zone are correct” (Apple Support). Go to Settings > General > Date & Time and turn on Set Time Automatically (Apple Support).
  • Updates. Update iOS in Settings > General > Software Update (Apple Support). For the app, open the App Store, tap your photo at the top, then App Updates (Apple Support). NIST notes “Some unintentional failures can be worked around by always having the latest software” (NIST).

Then restart: “Restart your device. You might also need to restart your modem and router” (Apple Support).

Where Mistero fits

Mistero can’t fix a network that blocks VPNs, get you past a sign-in page you haven’t completed, or add a VPN to an iPhone whose manager has blocked VPN settings. Those are up to the network or the device’s owner.

What it gives you is room to run the checks above. You can “Choose WireGuard, OpenVPN, or IKEv2” and “Connect to available VPN locations in one tap,” so trying another protocol or location happens in the app. You can “Use Auto-Connect when Mistero launches,” which connects when you open the app, so on hotel Wi-Fi I’d sign in first, and “Turn on Kill Switch to help stop network traffic if the VPN disconnects.” The 4.0 update added “protocol selection, and recommended or streaming-optimized routes where available” (App Store listing, read Nov 7, 2026). Mistero’s own steps are in VPN won’t connect.

Sources

Pricing New subscribers can start a 3-day free trial. After the trial, the subscription renews automatically at $12.99 per week unless you cancel at least 24 hours before the trial ends, in Settings > [your name] > Subscriptions (Apple Support). There's also a one-time Lifetime purchase for $99.99. These are US App Store prices as of October 2026; the purchase screen shows the current price before you confirm.

Frequently asked questions

Why is my VPN not connecting?

Something between your iPhone and the VPN server is stopping it: a Wi-Fi sign-in page you haven't finished, a network that blocks the VPN's protocol, a server that's down or busy, a network that doesn't allow VPNs, or a setting on your iPhone. Try cellular data first. If the VPN connects there, the Wi-Fi is the cause.

Why does my VPN work on cellular data but not on Wi-Fi?

The Wi-Fi network is stopping it. Finish any sign-in page with the VPN off, then try a different protocol in your VPN app. WireGuard and IKEv2 both rely on UDP, so a network that blocks UDP stops both, while OpenVPN can also run over TCP. On your own router, check that VPN passthrough is on.

Why is my VPN not working at school?

Some schools block personal VPNs on their network on purpose, and a school-managed iPhone can be set so you and your apps can't add a VPN. Follow the school's rules. If you need a VPN for coursework or research, ask the school's IT team; some schools have an exemption process.

Can a Wi-Fi network block a VPN?

Yes. A network can block the UDP traffic or ports a VPN protocol uses, or block VPNs as a matter of policy. To check, turn off Wi-Fi and connect on cellular data. If the VPN connects there but not on the Wi-Fi, the Wi-Fi is blocking it.
View All Blogs
VPN7 min read10 Nov, 2026VPN in Brazil: Is It a Crime, and Do You Need One?As of November 2026, no Brazilian law makes using a VPN a crime. What the 2024 STF fine over X covered, what the lei Felca says, and when a VPN helps.VPN7 min read10 Nov, 2026Do You Need a VPN in Japan? Legal, and When It HelpsMost people in Japan don't need a VPN at home. No law I found bans one, and it helps most on public Wi-Fi. What it changes, and what Japan-only apps say.VPN7 min read10 Nov, 2026Is a VPN Illegal in South Korea? And Do You Need One?I found no Korean law that bans using a VPN. What stays illegal with one, why some sites show warning.or.kr, and when a VPN actually helps in Korea.