How to Disconnect and Replace a Compromised VPN

It can be confronting to learn your Virtual Private Network (VPN) might be compromised. But don't worry, taking a few calm, practical steps can help you regain control and protect your online privacy.

Recognising a Compromised VPN

It's not always obvious when your VPN has been compromised. However, there are some tell-tale signs that something might be wrong. Being aware of these can help you identify a problem early.

• Unexpected disconnections or difficulty connecting to the VPN service.
• Receiving alerts from your VPN provider about unusual activity on your account.
• Seeing unfamiliar devices connected to your VPN account.
• Changes to your VPN settings that you didn't make.
• Slower-than-usual internet speeds that persist even after troubleshooting your local network.

Disconnecting Immediately

The first and most important step is to disconnect from the potentially compromised VPN. This breaks any active connection that an unauthorised party might be using.

• On your computer, open your VPN application and look for a 'Disconnect' or 'Turn Off' button.
• On your phone or tablet, open the VPN app and tap the disconnect option. You can also go to your device's Settings > Network & internet > VPN and toggle it off.
• If you use a VPN on your router, access your router's administration page (usually by typing its IP address into a web browser) and disable the VPN client or feature.

Changing Your VPN Account Password

If your VPN account has been accessed without your permission, your password is no longer safe. You need to change it immediately to prevent further unauthorised access.

• Go to your VPN provider's website and log in to your account.
• Navigate to your account settings or security section (often labelled 'Settings', 'Profile', or 'Security').
• Look for an option to change your password. Choose a strong, unique password that you don't use for any other accounts.

Revoking Device Access and Signing Out Everywhere

Even after changing your password, old connections might still be active. It’s crucial to revoke access for any unfamiliar devices and sign out of all active sessions.

• Within your VPN account settings on their website, look for a section like 'Active Sessions', 'Connected Devices', or 'Security'.
• Review the list of connected devices. If you see any devices you don't recognise, revoke their access.
• Look for an option to 'Sign Out Of All Devices' or 'End All Sessions' and use it.

Setting Up Multi-Factor Authentication (MFA)

Multi-Factor Authentication adds an extra layer of security to your account. Even if someone has your password, they won't be able to log in without the second authentication factor, like a code from your phone.

• In your VPN account's security settings, look for 'Multi-Factor Authentication' or 'Two-Factor Authentication' (2FA).
• Follow the instructions to enable it, usually by linking an authenticator app (like Google Authenticator) or your phone number for SMS codes.
• Ensure this is set up on all your critical online accounts, not just your VPN.

Choosing a New, Reputable VPN Provider

If you've lost trust in your current VPN provider due to a compromise, it might be time to switch. Research a new provider carefully to ensure they meet high security standards.

• Look for VPNs with strong encryption, a strict no-logs policy, and a good reputation for security practices.
• Read independent reviews and privacy audits.
• Consider features like a 'kill switch' (which blocks internet access if the VPN connection drops) and DNS leak protection.

Key takeaway

Dealing with a compromised VPN can feel overwhelming, but by following these steps, you can secure your digital life. Staying vigilant and practicing good online hygiene are your best defences.