A full kill switch: your real IP never shows
A VPN connection can drop for a second. Without a kill switch, apps keep talking in that second, with your real IP. CloakyVPN closes that gap in the system firewall itself.
What a kill switch does
A kill switch blocks the internet whenever the VPN is not protecting it, so nothing goes out with your real address. Many VPNs build it into the app, which means it fails exactly when the app crashes.
Why ours lives in the firewall
CloakyVPN writes its rules into the system firewall: Windows Firewall, the macOS packet filter or nftables on Linux. The rules stay in place even if the app crashes or is closed, and they are set before an old tunnel closes, so there is no gap.
Two levels of protection
Sensitive sites, which you list yourself, never open outside the VPN, even while you are disconnected. The full kill switch goes further: while you are connected and the server drops, no site at all opens until the VPN is back.
Disconnecting on purpose
When you disconnect yourself, your normal internet works again. The kill switch is for accidents, not for locking you out.
Questions
Does the kill switch work if the app crashes?
Yes. The rules are in the operating system's firewall, so they keep holding with the app crashed or closed.
Does it work on Android?
Turn on the full kill switch in the app, and in Android's VPN settings turn on Always-on VPN and Block connections without VPN.
How do I check that it works?
Connect, turn on the full kill switch, and run the browser check. The app's built-in leak test also checks your IP and DNS.
More from CloakyVPN
Take back your internet.
Download CloakyVPN and get 1 GB free every day. Upgrade only when you want more.
Download free