Last updated:

Get started with ExpressVPN.
What can a VPN do?
Show Me
Learn about five ways to use ExpressVPN.
5 ways to use your VPN
See Them Now

Network Lock is ExpressVPN’s kill switch. If your VPN connection unexpectedly drops, Network Lock blocks all internet traffic, keeping your data safe.

Network Lock is available in the ExpressVPN app for Windows, Mac, Linux, and routers.

Note: In the ExpressVPN app for Android or iOS, Network Lock is known as network protection. You can find instructions on using network protection for Android and iOS respectively.

Jump to…

How does Network Lock work?
When is Network Lock active?
How to enable or disable Network Lock?
Unable to apply changes to Network Lock
Allow (or deny) access to local network devices
Allow (or deny) Apple Services to bypass the VPN so iMessage and other apps work better (on macOS 15 Sequoia only)

How does Network Lock work?

When you are not connected to the VPN, your internet traffic may be vulnerable to third-party tampering. To keep your data safe and secure, in case your VPN unexpectedly disconnects, Network Lock is activated and blocks all internet traffic until your VPN connection is restored. Learn more about Network Lock.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

When is Network Lock active?

Network Lock is enabled by default. When enabled, Network Lock is active as soon as you are connected to the VPN and when the app is in other connection states. If you disconnect from the VPN manually, Network Lock will not be active although it is enabled in the app settings.

The following table summarizes when Network Lock is active (or inactive) in different VPN connection states.

This table shows a summary of when Network Lock is active or inactive.

Note: When the VPN is connecting, it may take a few seconds for Network Lock to become active.

If your VPN unexpectedly disconnects, Network Lock is activated and blocks any internet traffic entering or leaving your device until the connection is restored.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

How to enable (or disable) Network Lock

Important: You cannot disable Network Lock in the ExpressVPN router app.

Network Lock is enabled by default. If you disabled Network Lock previously, you can go into the app settings to re-enable it.

If Network Lock is disabled:

  • You will be able to browse the internet if your VPN unexpectedly disconnects.
  • Your traffic will not be encrypted and secure.

Enable (or disable) Network Lock

In the ExpressVPN apps for Windows or Mac, the Network Lock setting is indicated by a checkbox for Stop all internet traffic if the VPN disconnects unexpectedly:

  • When checked: Network Lock is enabled.
  • When unchecked: Network Lock is disabled.

Follow the instructions corresponding to your device:

Important: Before changing your Network Lock setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click Menu icon. > Options.
    Click "Options."
  2. In the General tab, check or uncheck the box for Stop all internet traffic if the VPN disconnects unexpectedly.
    Uncheck "Stop all internet traffic if the VPN disconnects unexpectedly."
  3. Click OK.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Important: Before changing your Network Lock setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click Menu icon. > Preferences…
    Click "Preferences."
  2. In the General tab, check or uncheck the box for Stop all internet traffic if the VPN disconnects unexpectedly.
    Uncheck "Stop all internet traffic if the VPN disconnects unexpectedly."
  3. Close the window.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

  1. Open Terminal.
  2. Disconnect from the VPN before changing your setting. Enter the following command: expressvpn disconnect
  3. To disable Network Lock, enter the following command:
    expressvpn preferences set network_lock off To enable Network Lock, enter the following command:
    expressvpn preferences set network_lock default

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Unable to apply changes to Network Lock

If you are unable to apply changes to Network Lock:

  1. Restart your device.
  2. Restart the ExpressVPN app.

If the issue persists, follow these instructions specific to your device:

  1. Press Ctrl + Alt + Delete.
  2. Select Task Manager. Click Yes to allow changes made to your device.
  3. Click More details.
  4. Select Services.
  5. Right-click ExpressVpnService.
  6. Click Stop.
  7. Right-click ExpressVpnService.
  8. Click Start.
  9. Relaunch ExpressVPN.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

  1. Use Spotlight Search to find Activity Monitor.
  2. Select ExpressVPN.
  3. Click the Force Quit icon at the upper-left corner of the screen.
  4. Relaunch ExpressVPN.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Allow (or deny) access to local network devices

When Network Lock is enabled, you are still able to access your local network devices by default. In the app settings, you can change access to your local network devices by allowing or denying access to them.

In the ExpressVPN apps for Windows or Mac, access to local network devices is indicated by a checkbox for Allow access to devices on a local network (such as printers or file servers):

  • When checked: Access to local network devices is allowed.
  • When unchecked: Access to local network devices is denied.

Important: Before changing your Network Lock setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click Menu icon. > Options.
  2. In the General tab, check (or uncheck) the box for Allow access to local network devices such as network shares or printers.
    Check "Stop all internet traffic if the VPN disconnects unexpectedly" and "Allow access to devices on the local network (such as printers or file servers)".
  3. Click OK.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Important: Before changing your Network Lock setting, make sure you are disconnected from the VPN.
  1. In the ExpressVPN app, click Menu icon. > Preferences…
  2. In the General tab, check (or uncheck) the box for Allow access to devices on the local network (such as printers or file servers).
    Check "Stop all internet traffic if the VPN disconnects unexpectedly" and "Allow access to devices on the local network (such as printers or file servers)".
  3. Close the window.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Allow (or deny) Apple Services to bypass the VPN so iMessage and other apps work better (on macOS 15 Sequoia only)

If you are running macOS 15 Sequoia, you will see a checkbox for Allow Apple Services to bypass the VPN so iMessage and other apps work better. This is in response to changes made by Apple that are causing issues with apps like iMessage when the VPN is connected and Network Lock is enabled.

Network Lock setting that allows Apple Services to bypass the VPN

  • When checked: Apple Services traffic will not go through the VPN tunnel, and Apple push notifications will be sent outside of it. If you are having issues with iMessage and other apps while the VPN is connected, this should improve your experience with these services although full functionality might not be available.
  • When unchecked: Apple Services traffic will go through the VPN tunnel, but you might experience issues with services like iMessage.

Need help? Contact the ExpressVPN Support Team for immediate assistance.

Back to top

Was this article helpful?

We're sorry to hear that. Let us know how we can improve.

A member of our Support Team will follow up on your issue.