Security is active when the VPN status says Protected and the VPN indicator is visible in the status bar. |
What KlarVPN protects
KlarVPN is designed to protect traffic as it leaves your device. Once the VPN tunnel is active, your internet traffic is routed through the selected KlarVPN location instead of going directly through your regular network.
Private VPN tunnel: Your device receives its own tunnel configuration instead of relying on a crowded shared setup.
Encrypted routing: Traffic is carried through the VPN tunnel before it reaches the public internet.
Dedicated connection identity: The app shows the VPN location and visible VPN IP so users can confirm the active connection.
Leak protection: DNS requests are routed through the tunnel so your regular network should not see the sites you look up.
Diagnostics without browsing history: Logs and diagnostic details help troubleshoot the tunnel without storing websites, DNS queries, or packet content.
Set up the secure VPN configuration
Before KlarVPN can protect traffic, the device must allow the app to create a VPN connection. This permission is required for any VPN app that routes traffic through a device-level tunnel.
1. Open KlarVPN and complete the first-time setup flow.
2. When the Set Up Your VPN screen appears, tap OK.
3. Approve the VPN permission prompt by choosing Always Allow.
4. Return to the KlarVPN Home screen and connect from the power button.
Set Up Your VPN permission step
Approve the VPN request
The permission prompt warns that a VPN can monitor network traffic. This is a standard system warning. KlarVPN needs this permission to route traffic through the encrypted tunnel.
Only approve the prompt when you intentionally installed KlarVPN and are signing in through the official app. After approval, it can show a VPN icon while protection is active.
VPN connection permission prompt
Confirm the secure tunnel is active
Tap the power button on the VPN Home screen to connect. KlarVPN will request a tunnel, prepare the private connection, and bring the tunnel online. The connection is ready when the status changes to Protected.
Protected: The tunnel is active and traffic is routed through KlarVPN.
VPN icon: The device shows a VPN indicator in the status bar while the device is protected.
VPN IP: The map card updates to the selected VPN location and visible VPN IP.
Stop button: The power button changes to a stop button while protection is active.
Protected status on the VPN Home screen
Use Auto-connect for automatic reconnection
Auto-connect helps KlarVPN reconnect to the last region shortly after the device finishes booting. This is useful for users who want the VPN to come back without opening the app manually after a restart.
1. Open the Profile tab.
2. Tap Auto-connect.
3. Turn on When the device starts up.
4. Keep an active subscription so Auto-connect can reconnect after startup.
Auto-connect is best for convenience and recovery after restarts. If a connection attempt fails, open KlarVPN and connect again from the VPN tab.
Auto-connect enabled for device startup
Control access to local network devices
KlarVPN can allow access to devices on the same local network while the VPN is connected. This is helpful for printers, media devices, routers, smart TVs, and other nearby devices that use the same Wi-Fi network.
Turn it on: Use this when you need to reach local devices while still using the VPN for internet traffic.
Turn it off: Use this when you want stricter separation from nearby devices on the local network.
Troubleshooting tip: If a printer, router page, or local device stops responding while connected, check this setting first.
Local network access setting
Check DNS and WebRTC leak protection
A DNS leak happens when a device sends DNS lookups outside the VPN tunnel. A WebRTC leak can expose the real IP address through browser peer-to-peer APIs. KlarVPN is designed to route DNS through the tunnel and prevent IPv6 and split-tunnel leaks by default.
1. Connect KlarVPN and wait until the status says Protected.
2. Open a browser on the same device.
3. Visit klarvpn.com/leak-test.
4. Check that the visible IP and DNS servers belong to KlarVPN infrastructure.
If the leak test shows the original ISP IP or non-Klar DNS servers, reconnect KlarVPN and test again. If the result repeats, collect the device model, selected location, time of test, and a screenshot of the result for support.
DNS & WebRTC leak test guidance in Help
Use logs and diagnostics safely
The Logs tab is for technical tunnel output. It can help support understand whether the tunnel started, which interface was created, and whether routing rules were applied. It is not browsing history.
Logs may include: tunnel startup messages, interface names, routing status, and service output.
Logs should not include: websites visited, search history, DNS queries, packet contents, or personal browsing activity.
Support use: Send logs only when support asks for them during a connection or security troubleshooting case.
Technical tunnel logs after the VPN tunnel starts
Diagnostic information
Diagnostic information is limited to what support needs for troubleshooting: app version, operating system, current tunnel status, and the identifier of the tunnel configuration assigned to the account.
KlarVPN does not use diagnostics to store browsing destinations, DNS queries, packet contents, or website history.
Diagnostic information help article
Security best practices
Connect before using public Wi-Fi, hotel Wi-Fi, airport Wi-Fi, or any network you do not fully trust.
Use Fastest Location when you do not need a specific country or city. It chooses a healthy low-latency route from your device.
Keep the app updated so tunnel handling, server selection, and security behavior stay current.
Never share your password or reset link with anyone, including support.
Use the same KlarVPN account only on your own personal devices.
Run the leak test after changing browsers, networks, or device settings that may affect DNS or WebRTC behavior.
Security Features FAQ
Is KlarVPN encrypted?
Yes. KlarVPN creates a secure VPN tunnel on the device. When the app says Protected, traffic is routed through the selected KlarVPN location.
Why does the device ask to create a VPN connection?
The device requires permission before any app can create a device-level VPN connection. KlarVPN needs this to route traffic through the secure tunnel.
How do I know I am protected?
The Home screen says Protected, the device status bar shows the VPN icon, and the map/IP card shows the selected VPN location.
Can I still use local devices while connected?
Yes, when local network access is enabled. This helps with printers, routers, smart TVs, and other devices on the same Wi-Fi network.
What should I do if a leak test fails?
Reconnect KlarVPN, test again, and switch locations if needed. If the issue repeats, contact support with the device model, selected location, time of the test, and a screenshot.
Do technical logs show websites?
No. Technical logs show tunnel and service output. They are not a record of websites, destinations, DNS queries, or packet content.