VPN not working in Russia: what to do, step by step (2026 checklist)

"My VPN isn't working" covers three different problems, and each has a different cure. One: the app spins on "Connecting" and times out. Two: it connects, the key icon is on, but there's no internet at all. Three: the internet works, but YouTube, Instagram or Discord still won't open. Below are nine steps in order, from the most common causes to the rare ones. Most cases are solved by step four, in about ten minutes.

Quick fix. If your VPN runs on WireGuard, OpenVPN or IKEv2, it may have broken not because of settings but because the carrier is cutting the protocol. Surok uses VLESS with Reality and XHTTP, which pass on MTS, Beeline, MegaFon and Tele2, including mobile data. Three days free, then from $2.99 a month.

First, work out which of the three problems you have

Step 1. Refresh the subscription and restart the app

Most modern VPNs get server addresses through a subscription link. If the service moved to another server and the app never refreshed, it keeps knocking on a dead address. In Happ, v2rayTun and Streisand pull the server list down to refresh; in the Surok app just tap "Connect" again and the address updates itself. If that doesn't help, delete the subscription and add it again from the bot: old links sometimes point to a domain your carrier no longer opens.

Also fully quit the app (not minimise, actually close it) and open it again. On Android, toggling airplane mode on and off often resets a hung tunnel.

Step 2. Change the server, then the protocol

A single server can be overloaded or blocked by address. Pick another one in the list. If none works, the protocol is the problem. Since 2024, carriers in Russia have been cutting WireGuard, OpenVPN and IKEv2 by traffic signature on Roskomnadzor's orders: the connection either never establishes or drops after a few seconds. The details are in WireGuard not working.

What passes: VLESS with Reality (traffic indistinguishable from ordinary HTTPS to a popular site), XHTTP and connections via a CDN. If your service only speaks WireGuard and OpenVPN, no setting will help; you need a different service. Protocols explained in plain words: which VPN protocol is best.

Step 3. Check whether it's the carrier

Switch from Wi-Fi to mobile data or back and try again. If it works on one and not the other, the network is at fault, not the VPN:

• Mobile data with whitelists. In a number of regions, during mobile internet shutdowns only whitelisted sites are reachable, and most VPNs don't come up at all. Which VPNs get through and why: how to bypass whitelists.
• Carrier quirks. Tele2 and MTS have DNS issues, Beeline blocks certain ports. A breakdown by carrier: VPN not working on MTS, Beeline, MegaFon and Tele2.
• Home router. Old routers sometimes drop UDP or hijack DNS. Connect the phone to another device's hotspot and compare.
• Corporate or public Wi-Fi. Offices, hotels and airports often ban VPNs by network policy. Nothing to do there except switch to mobile data.

Step 4. Turn off everything that intercepts traffic

Two VPNs can't run at once: the second one hijacks the first one's tunnel. Check that a browser's built-in VPN isn't on (Opera, extensions in Yandex Browser), that no corporate VPN profile is lingering in settings, and that "Private DNS" or a proxy isn't set. More in two VPNs on one phone.

• Android. Settings → Connections → More connection settings → Private DNS: set it to "Automatic". In the VPN section, disable everything except the one you need.
• iPhone. Settings → General → VPN & Device Management: remove foreign profiles. In the Wi-Fi settings, check that no proxy is configured for the network.
• Windows and Mac. Disable antivirus "network protection" (Kaspersky, Dr.Web and ESET intercept TLS), quit AdGuard, Radmin VPN and other tunnels, and check the system proxy settings.

Step 5. Connects but sites won't open: that's DNS

If the tunnel is up but pages don't load, or open only by IP, the VPN can't resolve site names. This happens when the app uses the carrier's DNS and the carrier returns a stub. In the app settings, route DNS through the tunnel (in Happ it's "Remote DNS", in v2rayTun "DNS: Remote") or set 1.1.1.1 and 8.8.8.8. Then open the IP check page: both the address and the DNS should be foreign. How to read the result: IP and DNS leaks: how to check.

Step 6. Update the app itself

VPN clients get updated often in 2026, and old versions stop understanding new subscription formats. Happ 6 rejects some settings that older links used to deliver, and last year's v2rayTun builds don't support XHTTP. Update the app, then delete and re-add the subscription once more. On an iPhone with a Russian Apple ID, many clients have disappeared from the App Store; the workaround is in VPN not working on iPhone.

Step 7. Battery, device limit and autostart

A VPN that "disconnects by itself" is almost always killed by the system. On Android, add the app to battery-saver exceptions (on Samsung it's "Never sleeping apps", on Xiaomi "Autostart" plus "No restrictions" in battery, on Huawei "Manage manually" in app launch). On iPhone, enable "Connect on demand" if the client supports it. On Windows, make sure the VPN service starts with the system. The full breakdown: VPN disconnects by itself.

The other option: your plan has a device limit and a new device kicked the old one out. Check in your account or the bot how many devices are linked and unlink the extras.

Step 8. Is it everyone or just me?

Before reconfiguring everything, check whether the service itself is down. A decent VPN has a status channel or page; for Surok it's the bot and the Telegram channel. Look at Downdetector: if complaints are massive, waiting is faster than fixing. How to tell a server outage from a block in five minutes: why the VPN isn't working today.

Step 9. Write to support properly

If you've reached this step, the problem is non-standard, and support will solve it faster if you say up front: device and OS version, app and its version, carrier and network type (Wi-Fi or mobile), which symptom from the table above, and what you've already tried. A screenshot of the error halves the response time. Surok's support answers right in the bot.

FAQ

The VPN fails on one site only; everything else opens. Check that the site isn't excluded from the tunnel in split-tunnelling settings, and route DNS through the tunnel (step 5). If it's YouTube, the cause may be YouTube itself: why YouTube is slow.

My free VPN stopped working. Will a paid one help? If the free one ran on WireGuard or OpenVPN, any VPN on VLESS with Reality will help, paid or not. Free ones on modern protocols are almost extinct: free VPN in Russia.

Is it even legal to fix a VPN? Yes. Using a VPN isn't banned in Russia and there are no fines for individuals: is VPN banned in Russia.

How long should I wait if it's a protocol block? You don't wait blocks out. Once a carrier starts cutting a protocol, it doesn't stop. Change the protocol or the service.

Does changing DNS without a VPN help? Not for YouTube and Instagram: they're restricted on carrier equipment, not just via DNS. For sites that fail because of a carrier DNS stub, sometimes it does.

In short

Refresh the subscription, change the server, then the protocol. Compare Wi-Fi and mobile data, turn off a second VPN, antivirus and private DNS. If the tunnel comes up but sites don't load, route DNS through the tunnel. A VPN that drops by itself is saved by a battery-saver exception. If your service only speaks WireGuard and OpenVPN, in 2026 it's easier to install Surok: three days free, VLESS with Reality and XHTTP, works on mobile data.