In short: if a VPN works fine at home over Wi-Fi but will not connect on mobile data, or drops out, the problem is neither the app nor the subscription - mobile networks treat VPN traffic more strictly than home ones. The cure is not reinstalling, it is switching to the kind of connection that still gets through a fussy network. Below: why that happens, what actually helps, and a breakdown by operator - Beeline, MegaFon, MTS, Tele2.
Auto-key: connect once
The service keeps you on whichever protocol and server get through on your network right now.
One option stops working - the connection moves to a working one by itself.
No picking protocols by hand.
The first 7 days are free with no card - try it on your own operator.
Why it works on Wi-Fi but not on mobile data
This is the most common and the most confusing symptom: at home everything is fine, you step outside and the VPN stops connecting. The reason is the difference between a home network and a mobile one.
Home internet passes traffic as it is. Mobile operators handle traffic more carefully: a connection has a recognisable “pattern”, and when a network is fussy about that kind of traffic, the connection either never comes up or comes up and goes quiet a minute later. Simple, older kinds of connection are recognised first - which is why they are the ones that fail on mobile data while still working over Wi-Fi.
The practical conclusion that shapes the whole fix: the issue is not that “the VPN is broken” but that one particular kind of connection has stopped getting through on the mobile network. Connections with masking - where the traffic looks like an ordinary secure visit to a website - are far harder to recognise, so they hold up where the simple ones have already given out.
What helps: three steps that work
In order, most effective first:
- Switch to a protocol with masking. This is the main one. Plain WireGuard and OpenVPN are unstable on mobile data, while connections with masking look like ordinary traffic and hold up noticeably better. If your app lets you pick the kind of connection, switch to it. What masking is and how it works - in the breakdown of VLESS and Reality.
- Change the server. Sometimes it is not the protocol but one overloaded server - pick another one in the app, preferably a lightly loaded one.
- Check Private DNS. On Android, a third-party Private DNS that is switched on (Settings → Network → Private DNS) sometimes gets in the way of a VPN on mobile data - set it to “Automatic” and try again. On iPhone, “Private Relay” behaves similarly - worth turning it off for the duration of the test.
If the VPN connects but there is no internet - a separate case that is especially common on mobile data - turn on “local DNS” in the app (in Happ it is “Use local DNS”, other clients word it similarly; the rest of that client’s errors are collected in the breakdown of Happ errors). If that does not help, lower the MTU in the connection settings to 1280: on mobile networks that sometimes fixes “connected, but no pages”.
If nothing helped and the VPN will not come up anywhere, not just on mobile data, that is a different case: why a VPN is not working - diagnostics by symptom covers the remaining causes.
An important caveat about your region
One honest detail that often goes unmentioned: the result depends on the region. The same protocol gets through without trouble in one city and is unstable in the next one, because mobile networks are configured differently from place to place. So there is no universal “this protocol always works on mobile data” - the working option is picked to match your network. It helps when a service has several protocols you can switch between: one does not fit, you try another without changing subscription.
If you are setting a VPN up on a phone from scratch rather than fixing one, that is a separate topic: the full guide to VPN on a smartphone covers installation, battery drain and the Android and iOS settings.
Tainet - a stable connection with no complicated setup. Sign up through the Telegram bot or in your account on this site, support is real people, from $0.10 a day.
Try it →Beeline: VPN not working on mobile data
If a VPN will not work on Beeline mobile data while Wi-Fi is fine, the cause is the kind of connection: plain WireGuard is often unstable on Beeline’s mobile network, while connections with masking hold up better.
What to do, in order:
- Switch the protocol to a masking one - VLESS+Reality.
- If that did not help, change the server.
- Check Private DNS: set it to “Automatic”.
The simplest route is the auto-key: you connect once and the service keeps you on whatever connection gets through on Beeline right now, with no manual picking.
With Tainet this works out of the box - 7 days free with no card, to check on your own network.
MegaFon: VPN not working on mobile data
On MegaFon, home Wi-Fi passes the VPN while the mobile network is fussy - a simple protocol does not hold there. The same goes for Yota: it runs on MegaFon’s network, so the fix is identical.
What to do:
- Switch the protocol to a masking one - VLESS+Reality.
- Change the server if needed.
- Check Private DNS.
To avoid watching over it by hand, use the auto-key: you connect once, and if one protocol starts failing on MegaFon the connection moves to a working one without dropping.
Try it with Tainet - 7 days free with no card.
MTS: VPN not working on mobile data
On MTS the problem is almost always only on the mobile network - on home internet the VPN works. The reason is the same: a simple protocol does not get through on mobile data, a masking one holds.
What to do:
- Switch the protocol to a masking one - VLESS+Reality.
- Change the server.
- Check Private DNS.
The easiest way is the auto-key: you connect once, and the service picks whichever connection gets through on MTS at that moment and stays on it.
Tainet includes the auto-key in every subscription - 7 days free with no card, to check on your own network.
Tele2: VPN not working on mobile data
On Tele2 mobile data, simple protocols get through unreliably while masking ones hold - over home Wi-Fi there is usually no problem at all.
What to do:
- Switch the protocol to a masking one - VLESS+Reality.
- Change the server.
- Check Private DNS.
Or go straight to the auto-key - it works through these options for you and stays on whichever one works on Tele2.
With Tainet - 7 days free with no card, to check on your own network.
To just have it work
So you never have to pick protocols by hand
Everything described above can be left undone.
Tainet has an auto-key: you connect once - and from then on the service keeps you on the protocol and server that work on your network right now.
One option stops getting through on your operator - the connection switches to a working one by itself, without dropping.
One subscription holds several protocols with masking (VLESS+Reality among them) that hold up on mobile data.
The first 7 days are free with no card - to see how it works on your own network.
FAQ
Why does a VPN work over Wi-Fi but not on mobile data?
Mobile networks treat VPN traffic more strictly than home ones, and simple kinds of connection get through unreliably there. A protocol with masking helps (VLESS+Reality, for example), because it looks like ordinary traffic.
What should I do if a VPN will not work on MTS, Beeline or MegaFon?
The steps are the same for every operator: first switch the protocol to a masking one, then change the server, then check Private DNS on Android. The details are in the section for your operator above.
A VPN works in one city but not in another - why?
Mobile networks are configured differently from region to region, so one protocol gets through in some places and not in others. The answer is to have several protocols you can switch between and to pick the one that works on your network.
Will reinstalling the app help?
Usually not: the problem is not the app but the kind of connection. Reinstalling does not change the protocol - and on mobile data it is the protocol that decides.
Which protocol is best for mobile data?
One with masking - VLESS+Reality, for example. Plain WireGuard and OpenVPN get through worse on mobile data. Which one suits you depends on the network, so it is handy to have several to choose from.
Summary
Why it happens. Mobile networks treat VPN traffic more strictly than home ones, and a simple protocol does not get through there. That is why it works on Wi-Fi and not on mobile data.
What fixes it. Switching to a connection with masking: VLESS+Reality instead of plain WireGuard or OpenVPN. If that did not help - another server, and Private DNS set to “Automatic”.
What to test it with. Tainet has several protocols with masking in one subscription and an auto-key that stays on the working one - the first 7 days free with no card, so you can check on your own network.
Questions go to support.
