The app gives each connection attempt 20 seconds to establish a tunnel. If it doesn't connect in that window, you'll see an error and stay disconnected. There's no automatic retry — you reconnect manually.
Quick checks first
- Is your internet working without the VPN? Open any website. If nothing loads, fix the network first.
- Are you signed in? Open the app — if it shows the login screen, sign in and try again.
- Is your subscription active? Open Profile → Subscription. If it's expired, the connect button won't work.
Common errors
"VPN connection timed out"
The tunnel didn't come up within 20 seconds. Causes:
- Server is overloaded or down → switch server (see change server)
- Your provider is blocking the protocol → switch protocol (see change protocol)
- Weak network signal → reconnect to Wi-Fi or switch to mobile data
"VPN permission" / "PREPARE_FAILED" / "Save preferences failed"
The OS-level VPN permission was not granted.
iOS / macOS — Settings → General → VPN & Device Management → allow Kryon VPN profile. On macOS you may also need to allow the system extension in System Settings → Privacy & Security.
Android — when you tap connect for the first time, Android shows a connection request popup. Tap OK. If you tapped Cancel, force-quit the app and try again.
Windows — the first connect installs the TUN driver. Approve the driver installation prompt.
"SYSEXT_REQUIRED" (macOS)
The macOS system extension for the VPN wasn't approved. Open System Settings → Privacy & Security, scroll down, and click Allow on the Kryon system extension prompt. Then reconnect.
Connection succeeds but no internet
The tunnel is up but traffic isn't flowing. Try:
- Disconnect and reconnect
- Switch to a different server
- Switch protocol — some networks let the handshake through but throttle the traffic
Still not working
If multiple servers and protocols all fail, the issue is most likely on your network:
- Corporate or campus networks often block VPN traffic
- Some hotel and airport Wi-Fi blocks all non-HTTP traffic
- In some regions, deep packet inspection may target specific protocols — try a different protocol or transport (see change protocol)
Open in-app chat support with: which server you tried, which protocol, what error message appeared, and your country.