IPVanish Privacy & Security Settings to Change

Updated 4 November 2026 · Standard formula, shown below

To get the strongest protection from IPVanish, you should change several default settings: enable the Kill Switch, select the WireGuard protocol, turn on DNS leak protection, and disable IPv6. These adjustments close common privacy gaps that leave your real IP address and online activity exposed even while the VPN is connected.

Why Default Settings Aren’t Enough

IPVanish, like most VPN apps, ships with settings that prioritize ease of use over maximum privacy. The defaults are safe for casual browsing, but they don’t address every way your traffic can leak. For example, the default protocol may be automatic, which can fall back to older, slower protocols. IPv6 traffic often bypasses the VPN tunnel entirely, and without a kill switch, a dropped connection instantly exposes your real IP. Understanding what each setting does is the first step to locking down your connection.

Key Privacy Settings to Change

Open the IPVanish app and navigate to the Settings menu (gear icon). Here are the specific changes to make, in order of importance:

Enable the Kill Switch: This is the single most important setting. It blocks all internet traffic if the VPN connection drops. Without it, your device reconnects to the internet directly, revealing your IP address and unencrypted data. Turn it on in the “Connection” or “General” section.
Select WireGuard Protocol: Under “Protocol,” choose WireGuard instead of OpenVPN or IKEv2. WireGuard is faster and more secure due to its modern cryptography. It also has a smaller codebase, which means fewer potential bugs. IPVanish supports WireGuard on all major platforms.
Disable IPv6: IPVanish does not fully support IPv6. If your network uses IPv6, your traffic can leak outside the VPN tunnel. In the settings, find the IPv6 option and turn it off. This forces all traffic through the IPv4 tunnel.
Enable DNS Leak Protection: This setting ensures that your DNS requests (the lookups that translate domain names to IP addresses) go through the VPN’s DNS servers, not your ISP’s. It is usually on by default, but verify it is enabled under “Advanced” or “Network” settings.
Turn on Automatic Reconnect: This is different from the kill switch. It automatically reconnects the VPN after a network change (e.g., switching from Wi-Fi to cellular). It reduces the window where you are unprotected, but it is not a substitute for the kill switch.

How to Verify Your Changes Work

After changing settings, you should verify that no leaks exist. Visit a website like ipleak.net or dnsleaktest.com while connected to IPVanish. Check the following:

IP Address: The displayed IP should be in the country of the server you selected, not your real location.
DNS Servers: The listed DNS servers should belong to IPVanish, not your ISP.
IPv6: The site should not show any IPv6 address. If it does, your IPv6 is still leaking.
WebRTC: In your browser, WebRTC can leak your real IP even through a VPN. Use a WebRTC leak test site and consider installing a browser extension to block WebRTC.

Run these tests while connected to a few different servers to confirm consistency.

Common Mistakes and Misconceptions

One common mistake is confusing the kill switch with the automatic reconnect feature. They are different: the kill switch blocks traffic, while auto-reconnect tries to restore the VPN. Another misconception is that the “Obfuscation” setting (if available) is for everyone. Obfuscation is designed to hide the fact that you are using a VPN, which is useful in countries with heavy censorship, but it slows down your connection and is not needed for general privacy. Also, many users assume that a VPN protects them from malware or phishing. It does not. IPVanish has a threat protection feature, but it is not a full antivirus solution.

Comparing IPVanish to Other VPNs

IPVanish’s settings are similar to those of other leading VPNs like NordVPN and ExpressVPN. All three offer kill switches and protocol selection. However, IPVanish’s key differentiator is its ownership of its server infrastructure, which means no third-party server providers. In terms of privacy settings, IPVanish’s kill switch is system-wide, whereas some VPNs only offer app-specific kill switches. The WireGuard protocol is now standard across most top VPNs, so the main difference is how easily you can access and configure these settings. IPVanish’s interface is straightforward, but it lacks some advanced options like split tunneling on all platforms (it is available on Android and Windows).

Cost and Subscription Considerations

IPVanish is a paid service. Pricing varies by subscription length, with longer plans offering a lower monthly rate. There is no permanent free tier, but they do offer a money-back guarantee, typically for 30 days. When evaluating cost, consider that the cheapest plan often locks you into a multi-year commitment. Also, IPVanish allows unlimited simultaneous connections, which is a significant value if you have many devices. Be aware that the price may increase upon renewal, so read the terms carefully before subscribing.

Limitations and What a VPN Can’t Do

Even with perfect settings, a VPN has limits. It does not make you anonymous; it makes you pseudonymous. The VPN provider can see your traffic unless they have a strict no-logs policy. IPVanish states it keeps no logs of your activity, but you must trust that claim. Additionally, a VPN does not protect you from:

Cookies and trackers: Websites can still track you via browser cookies.
Malware: A VPN does not scan or block malicious files.
Phishing: You can still be tricked into entering your password on a fake site.
Your own accounts: If you log into Google or Facebook, those services can link your VPN IP to your identity.

For high-stakes privacy, combine a VPN with a privacy-focused browser, a good ad blocker, and careful account hygiene.

Frequently Asked Questions

Does IPVanish keep logs?

IPVanish states it does not log your browsing activity, connection timestamps, or traffic data. However, it does collect your email address and payment information for your account. For a truly anonymous experience, pay with a gift card or cryptocurrency if available, but know that your IP address may still be logged during account creation.

What is the best protocol to use with IPVanish?

WireGuard is the best choice for most users due to its speed and modern security. OpenVPN is a good alternative if you need maximum compatibility or are on an older device. IKEv2 is useful for mobile devices because it handles network changes well, but it is less private than WireGuard.

Can I use IPVanish on my router?

Yes, IPVanish provides setup guides for certain routers. Installing the VPN on your router protects every device on your network, including smart TVs and game consoles that don’t support VPN apps. However, the router’s performance may limit your speed, and the settings you change in the app won’t apply to the router configuration.

Why is my IPVanish connection slow?

Slowness can be caused by distance to the server, server load, or your ISP throttling VPN traffic. Try connecting to a server closer to you, or use the WireGuard protocol if you haven’t already. Also, disable any background downloads or streaming on other devices. Sometimes, simply switching servers resolves the issue.

Does IPVanish work in China?

IPVanish may not work reliably in China due to the Great Firewall’s sophisticated blocking. The obfuscation feature, if available, can help disguise VPN traffic, but there is no guarantee. For travel to China, research current VPN options and consider using a dedicated obfuscation service.

How do I change my IPVanish password?

Log into the IPVanish account portal on their website, go to Account Settings, and select Change Password. You will need your current password. After changing it, you must re-enter the new password in the app on all your devices.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.