Two VPNs on one phone: why the second one fails and how to switch

A typical story: someone installs Surok, presses the button, the app thinks for a while and reports a timeout. In half of these cases the cause is the same: another VPN is already running on the phone. Here is why, and what to do.

One tunnel per device

Android and iOS work the same way: the system has a single "slot" for a VPN. The app that holds it gets all the device's traffic. A second app can either push the first one out or get no access at all if the first is set as "always-on". Two tunnels at once is not something the system does; it is not a limitation of any particular service.

Computers are more lenient: Windows and macOS allow several network interfaces, but two VPNs start fighting over routes and the result is unpredictable: some sites go through one, some through the other, some nowhere.

What it looks like

• A key or "VPN" icon is already in the status bar before you turned Surok on.
• Our app or Happ sits on "Connecting…" and ends with a timeout.
• The subscription refreshed, but the list has no 🇷🇺 servers: the server saw you abroad because the other VPN replaced your address.
• Sites open "from the Netherlands" though you turned nothing on: someone else's tunnel is at work.

Who takes the slot quietly

Not only VPN apps. The VPN slot is used by antiviruses with "Wi-Fi protection", ad blockers like AdGuard in local VPN mode, corporate profiles from work, the "secure DNS" of some apps, the private mode of some browsers. If you don't remember installing a VPN but the icon is there, look among those.

How to switch

Android. Settings → Network & internet → VPN. This lists every app with a slot. Tap the gear next to the active one and turn off "Always-on VPN" and "Block connections without VPN", otherwise another service can't replace it. Then just turn on the one you need: the system disconnects the previous one.

iPhone. Settings → VPN. The active one has a checkmark. Switch to the one you need. If a service installed an "on demand" profile, it will turn itself on whenever you go online: disable the rule in its app or remove the profile in Settings → General → VPN & Device Management.

Windows and macOS. Quit the other service fully, not just "disconnect" in its window: some clients leave the driver and routes in place. A network restart or a reboot afterwards doesn't hurt.

What Surok does

Surok's Android app checks whether the slot is taken before connecting and, instead of a mysterious timeout, shows "Another VPN is on" with a button to the system settings. In the subscription for third-party apps we show the same warning when we see you refreshing it from under someone else's tunnel.

Do you need two VPNs at all

Usually not. If one service is needed for work and another for everything else, better split them across devices or use them in turn. Split routing inside one app solves most such needs: with Surok, local sites go direct anyway and only what needs the tunnel goes through it.