VPN, proxy and filters

ExpressVPN on Mac: check the VPN and fix connection problems

When ExpressVPN connects but a site does not load, check the VPN status, route and app settings before changing them.

Applies to: macOS and the current app version; managed Macs can have organization policies.Checked: 2 November 2026

Symptoms

  • ExpressVPN says it is connected, but a site or app does not load.
  • The Mac has no internet after the VPN changes state.

Likely causes

  • Kill switch. ExpressVPN says its Internet Kill Switch blocks traffic after an unexpected drop. The optional Enable at all times setting can also block internet when the VPN is off.
  • DNS. ExpressVPN says its DNS servers are used by default when connected. It warns that security apps with their own DNS or filtering can interfere.
  • IPv6. ExpressVPN says its Internet Kill Switch covers IPv6 during a connection drop. Its guide does not identify a separate Mac IPv6 protection switch.
  • Other possible causes. A Wi-Fi sign-in page, DNS failure, another filter or an unavailable service can also interrupt a connection.

How to check

  1. Open ExpressVPN and check its connection state and any warning.

  2. Check whether another website works. On public Wi-Fi, complete any required network sign-in.

  3. On a managed Mac, ask your administrator before changing VPN or security settings.

How to fix it

  1. In ExpressVPN, open Profile, then Settings and Internet Kill Switch. Review Enable when connected and Enable at all times.

  2. If the connection still fails, follow the provider support guide linked below.

With Kilobat

  1. Health > Where traffic leaves shows whether the default route uses a VPN. A split route does not mean every destination uses it.

  2. With the VPN connected, choose Check for Leaks in Health > Where traffic leaves or Settings > Network.

  3. The test checks DNS resolver paths, IPv6 routing and UDP using STUN. A skipped check is not a pass.

  4. It contacts external services, which see your address. It cannot run a browser WebRTC test or prove every app is private.

  5. Run the same test in Terminal.

    kilobat vpn leaks

Questions

Why is internet blocked with ExpressVPN off?

The optional Enable at all times setting blocks internet unless the VPN is active.

Does a VPN status prove all apps are private?

No. A route or leak test describes the paths checked at that moment. It does not establish privacy for every app.

Sources

Checked on 2 November 2026.