Settings
Connect automatically
The tunnel comes up on its own whenever a network appears, even if the app is closed. If you disconnect manually, auto-connect pauses until you connect again — otherwise the system would bring the tunnel straight back.
Block traffic without VPN
A kill switch: while the tunnel is down, there is no internet at all. It is reliable, but AirDrop and AirPlay stop working. On some iOS versions the system does not honour the route to the server itself, and the tunnel cannot start — if connecting fails after turning this on, turn it off.
Local network direct
Printers, speakers and your router's web page stay reachable outside the tunnel. Keep it on unless you know why you need otherwise.
Diagnostics mode
The tunnel checks its own chain periodically and writes a detailed log. It uses more battery and contacts an external IP-check service, so it is off by default. Turn it on only while troubleshooting; Show log lets you copy the log and send it to support.
Changes to these settings apply on the next connection.