---
title: "ExpressVPN on Mac: check the VPN and fix connection problems · Kilobat Guides"
url: "https://kilobat.app/guides/expressvpn-mac"
description: "Check how ExpressVPN routes traffic on a Mac, investigate a failed connection, and find its relevant VPN settings."
---

VPN, proxy and filters

# ExpressVPN on Mac: check the VPN and fix connection problems

When ExpressVPN connects but a site does not load, check the VPN status, route and app settings before changing them.

Applies to: macOS and the current app version; managed Macs can have organization policies. · Checked: 2 November 2026

## Symptoms

- ExpressVPN says it is connected, but a site or app does not load.
- The Mac has no internet after the VPN changes state.

## Likely causes

- **Kill switch.** ExpressVPN says its Internet Kill Switch blocks traffic after an unexpected drop. The optional Enable at all times setting can also block internet when the VPN is off.
- **DNS.** ExpressVPN says its DNS servers are used by default when connected. It warns that security apps with their own DNS or filtering can interfere.
- **IPv6.** ExpressVPN says its Internet Kill Switch covers IPv6 during a connection drop. Its guide does not identify a separate Mac IPv6 protection switch.
- **Other possible causes.** A Wi-Fi sign-in page, DNS failure, another filter or an unavailable service can also interrupt a connection.

## How to check

1. Open ExpressVPN and check its connection state and any warning.
2. Check whether another website works. On public Wi-Fi, complete any required network sign-in.
3. On a managed Mac, ask your administrator before changing VPN or security settings.

## How to fix it

1. In ExpressVPN, open Profile, then Settings and Internet Kill Switch. Review Enable when connected and Enable at all times.
2. If the connection still fails, follow the provider support guide linked below.

## With Kilobat

1. Health > Where traffic leaves shows whether the default route uses a VPN. A split route does not mean every destination uses it.
2. With the VPN connected, choose Check for Leaks in Health > Where traffic leaves or Settings > Network.
3. The test checks DNS resolver paths, IPv6 routing and UDP using STUN. A skipped check is not a pass.
4. It contacts external services, which see your address. It cannot run a browser WebRTC test or prove every app is private.
5. Run the same test in Terminal.

   ```
   kilobat vpn leaks
   ```

## Questions

**Why is internet blocked with ExpressVPN off?**

The optional Enable at all times setting blocks internet unless the VPN is active.

**Does a VPN status prove all apps are private?**

No. A route or leak test describes the paths checked at that moment. It does not establish privacy for every app.

## Sources

- [ExpressVPN: setup and settings](https://www.expressvpn.com/support/vpn-setup/app-for-mac-os/)
- [ExpressVPN: DNS leaks on Mac](https://www.expressvpn.com/support/troubleshooting/dns-leaks-mac-app-antivirus/)
- [ExpressVPN: Internet Kill Switch](https://www.expressvpn.com/features/network-lock)
- [Kilobat docs: VPN leak test](https://kilobat.app/docs/vpn#leak-test)

Checked on 2 November 2026.

## Related guides

- [VPN connected but no internet on a Mac](https://kilobat.app/guides/vpn-connected-no-internet): A VPN sends traffic through a tunnel.
- [DNS queries go outside the VPN on a Mac](https://kilobat.app/guides/vpn-dns-leak-mac): With a VPN on, you usually want DNS queries to go to the VPN's servers.
- [Tailscale and another VPN conflict on a Mac](https://kilobat.app/guides/tailscale-vpn-routing-conflicts): Tailscale gives each device an address in 100.64.0.0/10.