The kill switch: if our tunnel ever disconnects unexpectedly, your traffic stops the same instant. No leak window. No accidental cleartext on public WiFi.
🤖 Get The Free AppTunnel hiccups (cell handoff, server restart, app crash) = your phone silently falls back to the regular network. Your real IP, DNS, and traffic leak until you notice and reconnect. On public WiFi, this is exactly the worst case.
Tunnel hiccups = all traffic blocked at the OS level. Apps see "no internet" for ~3-5 seconds while reconnection happens. Then normal service. Zero leak window. No silent failures.
Built into the ClownVPN app. Detects tunnel drops in milliseconds, blocks traffic via Android's VPN service API.
One toggle in Android Settings → "Block connections without VPN". Now all traffic is blocked OS-wide even if the ClownVPN app gets killed by Android's task killer.
DNS queries are pushed through the tunnel, not your ISP's resolver. Even if a process tries to query DNS directly, it's blocked by the kill switch logic.
| Scenario | What happens | Recovery time |
|---|---|---|
| WiFi to cellular handoff | Brief block during tunnel reconnect | ~2-5s |
| Tunnel server restarts | Block until reconnect to nearest server | ~5-10s |
| Phone wakes from deep sleep | Block until tunnel re-establishes | ~3-5s |
| ClownVPN app force-closed | Block holds via Always-On VPN | Until you tap reconnect |
| Network outage | Nothing to leak — no network | — |
| You manually disconnect | Normal traffic resumes | Instant |
ClownVPN's app-level kill switch is on by default. For paranoid coverage, enable Android's system-level Always-On VPN:
Android Settings → Network & internet → VPN
You'll see two toggles: Always-on VPN, and Block connections without VPN.
Now nothing on your phone can reach the internet without going through ClownVPN. Maximum coverage.