How this article was prepared
VPNScout reviews official documentation and public security guidance, then checks material claims during editorial updates. We do not describe a product as hands-on tested unless the article includes the test conditions and results.
If your VPN is not working on mobile data but works on Wi-Fi, first disconnect the VPN and confirm that cellular internet works by itself. If normal mobile data works, the most likely causes are a blocked or incompatible VPN protocol, disabled cellular permission, an always-on or kill-switch conflict, battery restrictions, custom DNS, another VPN profile, or a carrier-specific network issue.
Try the fixes below in order. Test after every step and stop when the VPN connects. Avoid resetting network or APN settings until the lower-impact checks fail.
Use the symptom to narrow the next step: if the VPN repeatedly drops on Android, follow our Android disconnection guide; if it stays connected but pages will not load, use the VPN connected but no internet guide; and if it fails only after the phone locks, check the screen-off VPN fixes.
Turn off Wi-Fi and disconnect the VPN. Open two trusted websites or apps using mobile data. This simple test separates a VPN problem from a cellular-service problem.
| What happens | What it usually indicates |
|---|---|
| Nothing works without the VPN | Mobile signal, data allowance, SIM/eSIM, roaming, outage, or carrier settings |
| Mobile data works until the VPN connects | VPN protocol, server, app permission, DNS, or security-setting conflict |
| Only one app fails | That app's cellular permission, filtering, cache, or access policy |
| The VPN connects but no pages load | DNS, kill switch, routing, or server problem |
| It works on one mobile carrier but not another | Carrier routing, IPv6, filtering, or protocol compatibility |
Google recommends switching between Wi-Fi and mobile data when diagnosing Android connectivity. Apple similarly separates cellular-service settings from VPN and third-party security software. Start with evidence from your own phone rather than changing several settings at once.
With the VPN disconnected:
If mobile data does not work without the VPN, the VPN is not the immediate cause. Restart the phone, check the carrier's outage information, and contact the carrier if necessary. Do not repeatedly reinstall the VPN to fix a broken cellular service.
An app can work on Wi-Fi while being prohibited from using cellular data.
Open Settings > Cellular, find the VPN app, and make sure cellular access is enabled. Apple documents that individual apps can be restricted to Wi-Fi from this screen. On a dual-SIM iPhone, also confirm the active cellular-data line.
Open the VPN app's system information page and look for Mobile data & Wi-Fi, Data usage, or a similarly named menu. Allow mobile or background data where appropriate. Menu names vary by phone manufacturer and Android version.
If the phone belongs to an employer or school, device-management policy may control these settings. Contact the administrator rather than removing a required profile.
Airplane mode forces the phone to disconnect from and re-register with the mobile network.
This can clear a temporary carrier route or radio state without deleting saved networks or VPN settings.
A VPN application depends on operating-system networking interfaces. Compatibility problems can appear after an OS update, while an outdated VPN app may lack current protocol or carrier-network fixes.
Install the latest stable iOS or Android update supported by the phone, then update the VPN app through the Apple App Store, Google Play, Samsung Galaxy Store, or the provider's verified distribution channel. Restart the device afterward.
Avoid third-party websites offering modified premium VPN apps. They can remove security updates, alter traffic handling, or steal credentials.
The first selected server may be unavailable or have a routing problem with the mobile carrier. Choose another nearby server or a different server in the same country. If the app normally chooses automatically, manually select two or three specific locations for comparison.
A nearby server is a sensible first choice because it generally reduces distance-related latency. It does not guarantee a faster connection; congestion, signal quality, carrier routing, and server load also matter.
This is one of the most useful fixes when a VPN works on Wi-Fi but fails on cellular. A protocol that works through a home router may interact differently with a carrier's IPv6, NAT, firewall, or traffic-management configuration.
Start with the provider's Automatic or recommended setting. Then try each supported protocol one at a time. NordVPN users can compare NordLynx, NordWhisper, OpenVPN TCP, and OpenVPN UDP where those choices are available on the platform.
TCP-based or restrictive-network options can sometimes work where another protocol does not, but the best choice depends on the network. Do not assume one protocol is universally fastest or most reliable.
Privacy controls can intentionally block all traffic when the VPN cannot establish a tunnel. This can look like a mobile-data failure.
Open Settings > Network & internet > VPN, select the relevant VPN, and review Always-on VPN and Block connections without VPN. Google documents that the blocking option prevents traffic outside the selected VPN. Temporarily turn it off only to diagnose the connection, then restore the protection if you rely on it.
Also confirm that the correct VPN app is selected. An old or uninstalled VPN profile combined with blocking can leave the phone offline.
Consumer VPN apps manage connection protection differently. Review the VPN app's auto-connect and protection settings. If a work or school profile enforces an always-on connection, contact its administrator.
Disabling a kill switch or blocking mode can expose traffic through the normal mobile connection. Avoid sensitive activity during the test.
VPNs must maintain a background tunnel. Aggressive power or data controls can suspend the app when the phone changes network, locks, or enters a low-power state.
On Android, open the VPN app's battery settings and allow appropriate background operation. Also check Battery Saver, Data Saver, manufacturer-specific sleeping-app lists, and third-party cleaner applications. Do not grant unrelated permissions; the goal is to prevent the VPN process from being suspended.
On iPhone, temporarily test with Low Power Mode and Low Data Mode disabled. If that changes the result, restore the settings one at a time to identify the conflict. Leaving every power-saving feature disabled permanently is not automatically necessary.
Phones generally cannot run two full VPN tunnels through the same operating-system interface. A firewall, antivirus web filter, ad blocker, work profile, or second VPN may compete with the primary VPN app.
Do not remove an employer, school, or family-safety profile without authorization. Do not leave security software disabled as a permanent workaround; update both applications or use documented exclusions.
A damaged or stale VPN profile can retain settings that work on Wi-Fi but fail when the network changes. If the app offers Reset VPN Profile, use that before resetting the phone's entire network configuration. You may need to approve the operating system's VPN request again.
If there is no profile-reset option:
On iPhone, Apple recommends searching Settings for VPN, profile, firewall, and filter when third-party networking software causes connectivity problems. Remove only unmanaged profiles you recognize and no longer need.
A network reset is more disruptive than the earlier fixes. Apple states that resetting network settings removes saved network configuration and VPN settings that were not installed through management. It can also reset cellular and APN settings. NordVPN gives a similar warning for Android network resets.
Before proceeding:
Go to Settings > General > Transfer or Reset iPhone > Reset > Reset Network Settings. Read the confirmation carefully.
The menu varies, but it may be called Reset Wi-Fi, mobile & Bluetooth or Reset network settings. Use the Settings search if necessary. Restart the phone, reconnect to mobile data, and reinstall or authorize the VPN if required.
If normal cellular data fails after the reset, contact the carrier. Do not guess APN values from a forum. Incorrect APN settings can break connectivity or lead to unexpected charges; use only the carrier's official values.
For NordVPN, use this order:
NordVPN is our top recommendation for most mobile users because it provides native iPhone and Android apps, multiple protocols, auto-connect controls, split tunneling on supported platforms, and detailed mobile troubleshooting documentation. Features vary between iOS and Android, so verify the controls available on your phone.
Contact the mobile carrier when:
Contact the VPN provider when:
Send diagnostic logs only through the provider's official support channel. They can contain technical device and connection information, so do not publish them in a forum.
The mobile carrier and Wi-Fi network use different routing, DNS, IPv6, firewall, and address-translation systems. The VPN app may also lack cellular permission or be restricted by battery, data-saver, always-on, or security settings.
A carrier can technically restrict ports, protocols, or traffic patterns on its network. A failure does not automatically prove intentional blocking; routing and compatibility problems can produce the same symptom. Try another supported protocol and ask the carrier about its policy.
The tunnel may be established while DNS or traffic routing fails. A kill switch may also block traffic because the app considers the connection unstable. Change server and protocol first, then review DNS and blocking settings.
Not without instructions from the mobile carrier. Incorrect APN values can disable data or cause unexpected charges. Reset to carrier defaults or obtain the exact settings from the carrier rather than copying values from an unrelated device.
Yes, VPN applications can operate over mobile data as well as Wi-Fi. Actual compatibility and performance depend on the phone, carrier, protocol, signal, and VPN service.
Yes. VPN traffic still travels through the mobile plan, and encryption adds some protocol overhead. Video, downloads, backups, and other activity continue to count according to the carrier's rules.
Possible causes include the selected protocol, carrier IPv6 or routing behavior, app cellular permission, battery restrictions, custom DNS, or an unstable server route. Update the app, change server and protocol, and test whether the issue also occurs on LTE.
A network-settings reset should not erase photos or general media, but it removes or resets saved network, VPN, cellular, and APN configuration. Carefully choose Reset Network Settings, not Erase All Content and Settings, and back up important information first.
Only for a brief diagnostic test when the privacy risk is acceptable. Traffic may use the ordinary mobile connection while blocking is off. Turn it back on afterward if it is part of your privacy setup.
When a VPN works on Wi-Fi but not mobile data, confirm cellular service first and then check app permission, server, protocol, always-on settings, battery controls, DNS, and conflicting network software. Most cases should be diagnosed before a complete network reset.
Make one change at a time, keep a note of what you tested, and use official Apple, Google, carrier, and VPN documentation. If the problem follows one carrier but not another, provide that evidence to both the carrier and VPN support team.
