On Android, “VPN connected but no internet” usually means the tunnel came up but traffic inside it is not moving correctly. The most common causes are DNS conflicts, captive portals, restrictive WiFi, or stale network state after a handoff.
That distinction matters because “Connected” is only a status about the tunnel itself. It does not guarantee that apps can resolve domains, reach the outside network, or recover cleanly after WiFi changes.
This guide is built to shorten that diagnosis. Start with the one-minute checks, then move to the section that matches the exact symptom instead of changing five settings at once.
Quick answer
- First: Make sure internet works WITHOUT the VPN. If not, fix your WiFi, not the VPN.
- Time matters: Check your phone’s date and time. If the clock is wrong, secure connections will fail.
- The usual suspect: Go to Android settings and disable Private DNS. It often clashes with the VPN.
- In hotels: Log in via the browser first (enter your room number, etc.), and ONLY THEN turn on the VPN.
- Blocks: If normal mode doesn’t work, switch from WireGuard to XRay (VLESS).
- Only one app fails? Don’t break your whole network, exclude that app from the VPN using Split Tunneling.
- The old reliable: Toggling Airplane Mode or restarting the phone fixes 80% of cases.
Quick routing: which guide should you open next?
- If you want a symptom-first map of the whole troubleshooting cluster, open the Android VPN troubleshooting hub first.
- If the same problem appears only on WiFi and not on mobile data, compare this page with VPN not working on WiFi on Android.
- If the network is a hotel, airport, or cafe login page, go straight to VPN for hotel WiFi on Android and the captive portal fix guide.
- If one app fails while others work, read what split tunneling means on Android before changing the whole VPN setup.
- If the issue starts right after WiFi to mobile handoffs, compare it with VPN disconnects during Android network switches.
- If the network feels filtered or restrictive, use this page together with WireGuard vs XRay (VLESS/Reality) on Android.
Why the VPN says “Connected” even when nothing loads
A VPN connection has two parts:
- The tunnel: The app reaches the server (The green light turns on).
- The traffic: Data starts flowing inside the tunnel.
“Connected” only means part 1 succeeded. But part 2 can fail if the phone doesn’t know how to translate google.com to an IP (DNS issue) or if the network blocks encrypted packets.
In short: the pipe is connected, but the water isn’t flowing.
Quick Diagnosis (1-Minute Test)
Before you go crazy, try this:
-
Turn off the VPN.
Open Chrome and go to any website. Doesn’t load? Then you don’t have internet (you forgot to pay, router crashed). The VPN is not to blame. -
Turn the VPN back on.
Try to open the website. -
Try two different apps.
The browser and, for example, Telegram. If Telegram works but the browser doesn’t, it’s a DNS issue or specific to that app. -
Switch networks.
Switch from WiFi to mobile data. If it flies on 4G and is dead on WiFi, the WiFi is limiting you (or requires a login).
Solving Typical Problems
1. Wrong time and date
Cryptography hates time travelers. If your phone says it’s 2026 and the server thinks it’s 2025, it will drop the connection for security.
Fix:
- Settings -> System -> Date and time.
- Enable “Set time automatically” and “Set time zone automatically”.
- Restart the phone.
Protocol to try: WireGuard.
2. Private DNS conflicts
When Android’s Private DNS setting overrides your VPN’s secure DNS, the tunnel can stay up while websites stop resolving entirely. This is one of the most common reasons why a VPN looks connected but browsers, messengers, or app logins just spin.
The quick test is simple: temporarily disable Private DNS in Android settings, reconnect the VPN, and check whether pages start loading again. Read our dedicated guide to fixing Private DNS conflicts with Android VPNs.
If this fixes the issue, keep the rest of the troubleshooting simple for one test cycle. Do not change server, protocol, and split tunneling rules at the same time, or you will lose the signal of what actually solved the problem.
3. The hotel WiFi trap (Captive Portal)
Public Wi-Fi networks often trap your traffic on a login page, which can completely dead-lock an active VPN connection. You may see the VPN say “Connected” even though the network still expects a browser login before it allows normal traffic.
The practical rule is: clear the hotel or cafe login page first, confirm the internet works normally, and only then reconnect the VPN. Read our dedicated guide on fixing Captive Portal VPN locks here.
This same pattern shows up on airport WiFi, dorm guest networks, and some office visitor networks. If the browser login page never appeared, Android may still be sitting behind the captive portal even while the VPN status light looks healthy.
4. Network with strong restrictions
School or office WiFi. The admins are not stupid and block VPN ports. The tunnel goes up, but the firewall cuts the data.
Fix:
- Urgently switch to the XRay (VLESS) protocol.
- Try a server in another country (neighboring if possible).
- See if it works by tethering data from another phone.
- If this keeps happening on managed Wi-Fi, see our school & office WiFi guide.
5. Server issue
Even the best servers go down or get saturated. Or the route to Amsterdam is bad today.
Fix:
- Choose a neighboring location (e.g., France instead of Germany).
- Don’t go to the other side of the world (USA or Australia) unless necessary.
- Always hit “Reconnect” after changing.
6. Wrong protocol
Sometimes the internet provider doesn’t play well with a specific protocol.
Fix:
- Were you on
WireGuard? Switch toXRay. - Were you on
XRay? Go back toWireGuard. - Only change one thing at a time!
Tip: WireGuard for speed, XRay to bypass walls.
7. Only one app fails
Everything works fine, but the Bank app or Netflix gets stuck loading.
Fix:
- Don’t torture the VPN.
- Go to VPN settings -> Split Tunneling.
- Add the problematic app to Exclude.
- Clear the cache of that app in Android settings.
If you want the product-side setup rather than the troubleshooting angle, open the NimbusVPN Split Tunneling feature page.
8. The router filters traffic
Home routers sometimes go crazy, especially with “Parental Control” or antivirus enabled.
Fix:
- Restart the router (unplug it).
- Disable Private DNS on the phone.
9. Battery saver killing the VPN
Android sees an app draining battery in the background and cuts its internet access.
Fix:
- Settings -> Apps -> Your VPN -> Battery.
- Set it to “Unrestricted”.
- Check again.
10. Network state bugs (Wi-Fi to Mobile)
Android networking can sometimes stall during handoffs, especially when moving between Wi-Fi and mobile data. In that state, the VPN icon may remain active while apps are still tied to the old route or waiting for the new path to recover.
The quick test is to reconnect once after the handoff and see whether the issue is just stale network state. Read our dedicated guide to fixing VPN disconnects during network switches here.
If the issue appears only on one managed network, widen the diagnosis before blaming the app. School or office Wi-Fi can combine handoff quirks with filtering rules, which is why it also helps to compare the same workflow against our restrictive Wi-Fi troubleshooting guide.
WireGuard vs XRay: Which to choose?
Changing protocols is like changing cars. If one doesn’t go up the dirt road, you take the 4x4.
When to switch:
- The VPN says “Connected” but traffic is 0 KB/s.
- It disconnects constantly.
- You are on a network with heavy censorship.
Algorithm:
- Fix the time.
- Disable Private DNS.
- Pass the WiFi login.
- Now, change protocol.
In NimbusVPN you have both WireGuard and XRay (VLESS), so you don’t have to go far.
When Split Tunneling saves you
It is for when the “patient” is just one app.
Examples:
- The bank doesn’t let you log in from abroad. (Fix: Exclude it from the VPN).
- Uber can’t find a car. (Fix: Exclude it).
- Only want VPN for Instagram? (Fix:
Includemode, select only Instagram).
It is much more convenient than turning the VPN on and off all the time.
What if it happens on TV? (Android TV)
Android TV is the same as the phone, but with a remote. The problems are the same:
- The hotel WiFi trap (hard to open a browser on TV, but necessary).
- Disable Private DNS if you find it (sometimes hidden).
- Restart the TV Box from the menu (not just the power button!).
If the TV-specific flow itself is the issue, use VPN for Android TV: Setup & Split Tunneling and VPN for Android TV: Troubleshooting Guide.
Frequently Asked Questions (FAQ)
Why does it say “Connected” but I have no internet?
Because the tunnel is built, but packets aren’t traveling. It’s usually a DNS conflict, network block, or wrong time.
Why does it work on 4G but not on WiFi?
The WiFi admin might have blocked the VPN. Or the router is glitching. Or you haven’t logged into the hotel page.
Does Private DNS bother the VPN?
Very much! It tries to send requests outside the tunnel. To diagnose, always turn it off.
Does changing the protocol help?
Yes, if the network “hates” standard WireGuard. XRay knows how to disguise itself as normal traffic.
Does restarting the phone do anything?
Yes. It clears the network cache and fixes most invisible gremlins.
How NimbusVPN helps
If you are tired of diving into settings, NimbusVPN gives you ready-made tools:
- Two engines: WireGuard for speed and XRay for difficult cases.
- Smart Split Tunneling: Exclude the bank or taxi easily.
- Human interface: No need to be a hacker to change protocols.
- Works on everything: Mobile and TV.
If you need a VPN that simply works and gives you tools to fix it when something fails, try us.