Leave Your VPN On Unless It Breaks Something
The easiest VPN habit is also the boring one: turn it on and stop thinking about it.
Most people use a VPN like an umbrella. They wait until the airport WiFi looks sketchy, then they remember to open the app. That is better than nothing, but it depends on you noticing the risky moment before your phone or laptop starts talking.
Your apps do not wait. Mail syncs. Messaging apps reconnect. Photos back up. DNS lookups happen in the background. By the time you remember to turn on a VPN, your device may already have told the network a lot about what services you use.
So the practical answer is simple: yes, you should usually leave your VPN on all the time. Not because every second online is dangerous. Because remembering is the weakest part of the system.
What always-on VPN actually protects
A VPN does not make you invisible. Websites can still track logins, cookies, browser fingerprints, and account activity. If you sign into Instagram, Instagram knows it is you.
What a VPN changes is the first hop of your connection. Without it, your internet provider, coffee shop WiFi, hotel network, school network, mobile carrier, or apartment building network can see a lot of connection metadata. They may not see the contents of HTTPS pages, but domains, DNS requests, timing, data volume, and app patterns can still tell a story.
With a VPN on, that local network mostly sees one thing: encrypted traffic between your device and a VPN server. That is not magic privacy. It is just a cleaner boundary. The network you happen to be using does not get an easy list of every site and app your device is reaching.
What about speed and battery?
This is where old VPN advice gets stale. Years ago, leaving a VPN on could mean slower browsing, messy reconnects, and extra battery drain. That still can happen with heavy older protocols or overloaded servers.
WireGuard is different. It is designed to be small, modern, and quiet when it is not moving traffic. On phones, that matters. A VPN that reconnects quickly and does not constantly chatter in the background is much easier to leave on all day.
You may still notice a little overhead. Any VPN adds another stop between you and the site or app you are using. If the VPN server is far away, your ping can rise. If a service blocks VPN IP addresses, you may see captchas or login checks. Some banking apps, streaming services, smart home devices, and local printers may complain.
That does not mean always-on VPN is a bad default. It means the default should be "on," with permission to pause it when a specific thing breaks.
When to pause it
There are a few normal times to turn a VPN off for a minute:
- A website blocks the connection. Some banks, ticket sites, and streaming apps are aggressive about VPN traffic.
- You need a local device. Printers, TVs, and smart home gear sometimes expect you to be directly visible on the local network.
- You are testing speed or lag. If a game or video call feels off, compare with the VPN on and off.
- You are on a trusted network and need maximum performance. Downloading a huge file at home is a reasonable time to pause.
The key is to make pausing temporary. Turn it off for the broken task, then turn it back on. If your VPN app has auto-connect or on-demand settings, use them. Let the device handle the habit so you do not have to.
For public WiFi, travel, coworking spaces, airports, hotels, schools, and mobile data, I would rather leave it on by default. The downside is usually tiny. The upside is that you do not accidentally browse naked on the one network where it mattered.
If you want a simple always-on VPN that is built around WireGuard and does not cost more than it needs to, 99¢ VPN is $11.88/year for one device. Turn it on, leave it on, and pause it only when something complains.
Written by the person who runs 99¢ VPN. Not a security researcher. Just someone who thinks privacy tools should be cheap enough to leave on.