iPhone VPN Keeps Turning On? Causes and Fixes

You flip the VPN switch off in Settings, and seconds later it's back on. Or the VPN icon sits in your status bar and won't leave. If your iPhone VPN keeps turning on by itself, you're not imagining it, and nothing is broken — iOS is doing exactly what something told it to do.

Short answer: the VPN re-enables itself because of a Connect On Demand rule or a configuration/MDM profile that instructs iOS to keep the tunnel up. Turning off the toggle in Settings is temporary; on-demand rules turn it right back on. To stop it for good, disable on-demand (or remove the profile), not just the switch.

Key takeaways

• The toggle in Settings only pauses the VPN; an on-demand rule or profile turns it back on.
• The real fix lives in Settings → General → VPN & Device Management, and in the VPN configuration's on-demand setting.
• A VPN you never installed showing up here is worth investigating — it can be an unwanted profile.
• "Always on" is usually a feature, not a fault. Decide whether you actually want it off before you fight it.

Why your iPhone VPN keeps turning on

There are only a few causes, and they're easy to tell apart.

1. Connect On Demand is enabled. Most iOS VPN setups include an on-demand rule so the tunnel comes back automatically whenever your phone uses the network. That's the feature working as designed — it's what keeps you protected after a Wi-Fi-to-cellular handover. The side effect is that the off switch won't stick.

2. A configuration or MDM profile is enforcing it. If your iPhone is managed by an employer or school, an Always-On VPN profile can require the tunnel and won't let you disable it from Settings at all. This is intentional and controlled by whoever manages the device.

3. The VPN app's own auto-connect setting. Some apps re-establish the connection on launch or when you join an untrusted network, based on a preference inside the app rather than in iOS.

4. A profile you don't recognize. Less commonly, a VPN configuration you didn't knowingly install can appear — bundled with another app, or left behind by one. If you see a VPN or management profile you can't account for, that's the one to look at first.

How to actually turn it off

Work through these in order. Stop when the VPN stays off.

1. Pause it (temporary): Settings → General → VPN & Device Management → VPN → toggle off. If it comes back, it's an on-demand rule or profile — keep going.
2. Disable Connect On Demand (the usual fix): Settings → General → VPN & Device Management → VPN → tap the (i) next to your VPN configuration → turn Connect On Demand off. Now the toggle will stay where you put it.
3. Check the VPN app's settings: open the app and turn off any "auto-connect", "connect on launch", or "trusted networks" option.
4. Remove an unwanted configuration: in the same VPN list, tap (i) → Delete VPN. Only delete configurations you recognize and no longer want.
5. Look for a management profile: still under VPN & Device Management, check for any MDM / Configuration Profile. If it's from your employer or school, that's expected — they control the VPN. If it's something you don't recognize and didn't authorize, removing it stops an enforced VPN (and is worth doing for other reasons).
6. Restart the iPhone. A reboot clears a stuck "Connecting…" or "Disabled" state that occasionally lingers after you change these settings.
7. Reinstall as a last resort. If a single app's tunnel is misbehaving, deleting and reinstalling it removes its configuration cleanly so you can set it up fresh — see setting up a VPN on iPhone.

Should you actually turn it off?

Worth a pause before you do. A VPN that stays on is protecting your traffic on every network you join, which is the whole point on public Wi-Fi. If it's draining battery or breaking a specific app, the better move is often split behavior or a quick reconnect rather than switching protection off entirely. If the reconnect itself is the worry, our explainer on what happens when the tunnel drops is here: VPN kill switches on iPhone.

If you do want it off in specific places — your trusted home network, say — on-demand rules can be configured to skip those networks instead of disabling the VPN everywhere.

Frequently asked questions

Why does my iPhone keep saying VPN in the status bar? The VPN icon means a tunnel is active or configured to reconnect on demand. It stays until you disable the on-demand rule or remove the configuration, not just when you toggle the switch.

How do I permanently turn off a VPN on iPhone? Disable Connect On Demand for the configuration, turn off auto-connect in the app, and, if you no longer want it, delete the VPN configuration under Settings → General → VPN & Device Management.

Why does my VPN keep turning on by itself? An on-demand rule or a profile is instructing iOS to re-establish it whenever the phone uses the network. That's a feature, but you can switch it off in the configuration's settings.

Is it bad if the VPN is always on? No — for privacy it's usually better. The trade-offs are minor battery use and the occasional app that dislikes a VPN. Leave it on unless you have a specific reason not to.

Bottom line

An iPhone VPN that keeps turning on is almost never a malfunction — it's an on-demand rule or a profile doing its job. The switch in Settings pauses it; the on-demand setting (or the profile) controls it. Turn that off and the VPN stays where you put it. And if a VPN you never set up appears in your settings, treat that as the first thing to investigate. For a broader sweep of iOS privacy settings worth auditing, see our checklist at our iPhone privacy checklist.

Snap VPN runs on WireGuard, doesn't ask for your email or an account, and doesn't keep traffic logs. It's on the App Store.