On-Demand VPN
On-demand VPN automatically connects or disconnects a VPN tunnel based on the type of network you are on. Once configured, the VPN stays active whenever the chosen conditions are met — no manual intervention required.
Once you enable on-demand, you must use this app to turn the VPN on or off. The standard iOS or macOS VPN toggle in the system settings will no longer control the VPN. Turning this feature off will restore normal behavior.
Enabling On-Demand
Toggle the on-demand enabled switch at the top of the screen to turn the feature on or off for this VPN. When disabled, the VPN behaves as a standard manually-controlled tunnel.
Connection Types
Choose which network types should trigger an automatic VPN connection:
- Wi-Fi — connect the VPN whenever the device joins any Wi-Fi network
- Cellular — connect the VPN on cellular data (iOS only)
- Ethernet — connect the VPN when plugged into a wired network (macOS only)
You can select multiple connection types. For example, checking both Wi-Fi and Cellular means the VPN will connect on either network type.
Trusted Wi-Fi Networks
If you trust certain Wi-Fi networks — such as your home or office — you can add them as exceptions. When the device connects to a trusted network, the VPN will disconnect automatically even if Wi-Fi is otherwise selected as a connection type.
To add a trusted network:
- Check the disable for trusted wi-fi networks checkbox.
- Type a network name (SSID) in the add wi-fi network field, or select one from the dropdown if you have previously added networks.
- Tap the + button to add it to the list.
To remove a trusted network, tap the delete icon next to it in the list.
When you check the Wi-Fi connection type, the app automatically pre-fills the current network name into the trusted networks field as a convenience.
Rule Preview
The green rule box at the bottom of the screen shows the on-demand rule string that will be saved to the VPN configuration. It updates in real time as you change the settings, so you can verify the configuration before saving.
Saving Changes
Tap save to apply the on-demand configuration. The settings are saved to the VPN configuration and take effect immediately. Tap cancel to discard any changes and return to the main screen.