Avast SecureLine VPN is a subscription VPN for Windows, macOS, Android and iOS. It routes internet traffic through encrypted connections to Avast servers, replacing the public IP address seen by websites with the server’s address. You can select a location, set connection rules and control which traffic uses the VPN.
The Multi-Device subscription covers up to ten devices simultaneously across the supported platforms; the allowance depends on the subscription purchased. Avast Premium Security alone does not activate SecureLine VPN. SecureLine is available as a standalone application, while Avast One provides VPN access within its shared interface.
Connecting through VPN servers
Avast SecureLine VPN uses an existing wired or wireless internet connection to reach its servers. Once connected, traffic travels through the encrypted tunnel, and the application shows its connection status.
Location selection offers countries and, where available, individual cities. Choosing another location reconnects the VPN there and updates the country and city shown in the application. Peer-to-peer traffic uses designated server locations, including Prague, Frankfurt, Amsterdam and several US cities.
Protocol selection
A VPN protocol determines how the device establishes its connection to the server. You can leave protocol selection on Automatic or choose an available protocol yourself. Automatic selection tries its initial protocol and switches to Mimic if that connection fails.
| Platform | Selectable protocols | Automatic connection |
|---|---|---|
| Windows and Android | OpenVPN, WireGuard and Mimic | OpenVPN, then Mimic if needed |
| macOS | IPsec, WireGuard and Mimic | IPsec, then Mimic if needed |
| iOS | IPsec and Mimic | IPsec, then Mimic if needed |
Mimic is intended for networks that restrict recognizable VPN connections. The protocol choice changes the connection method rather than the country selected for the server. IPsec connections can also depend on the router allowing VPN passthrough.
Automatic connection rules
Smart VPN on desktop
Smart VPN connects and disconnects according to selected activity rules. On Windows and macOS, these can respond to public or untrusted networks, banking sites, torrent activity and video streaming. The rules determine when the tunnel is active instead of keeping every session connected manually.
You can add specific websites as connection triggers and assign a server location to each one. Without an assigned location, Smart VPN uses the fastest available server. Trusted-site exclusions leave selected sites outside those automatic connection rules.
Network rules and Android Wi-Fi checks
Auto-connect can turn on the VPN when the device joins a network. Trusted or private networks can be excluded, and Windows allows a network to be classified manually as public or private when its automatic classification needs changing.
Android offers triggers for unsecured Wi-Fi, any Wi-Fi, or Wi-Fi and cellular data. Its Wi-Fi Threat Shield takes a different approach: while the VPN is off, it checks the connected Wi-Fi network and turns on the VPN if it detects a threat.
Controlling traffic and interrupted connections
App exclusions and local devices
Split tunneling on Windows and Android keeps selected applications outside the VPN. Windows uses an application exclusion list and can also exclude software-update traffic. Android lets you remove individual apps from VPN coverage; their connections then use the ordinary network without VPN encryption.
Android’s Local Network Bypass allows access to devices such as printers and Chromecast while the VPN remains connected. Those local connections travel outside the encrypted tunnel. This control addresses local device access separately from excluding an application’s internet traffic.
Kill Switch and temporary pauses
Kill Switch blocks internet traffic if the VPN connection unexpectedly drops. It prevents the device from continuing through its ordinary connection after the tunnel fails. Desktop editions provide this control, and Android availability depends on the device.
On Android, Kill Switch also blocks apps excluded through split tunneling. It can block internet access when a trusted-network rule disconnects the VPN, or when Wi-Fi-only auto-connect stops at a switch to cellular data. Access returns when the VPN reconnects or Kill Switch is disabled.
A temporary pause on desktop or Android suspends the VPN for a selected interval and reconnects it afterward. The available intervals are fifteen, thirty or sixty minutes. Resume reconnects before the chosen interval ends.
Advanced servers and tracking controls
IP Rotation and Double VPN
IP Rotation servers change the connection’s public IP address regularly. Double VPN instead sends traffic through two different VPN locations. Both advanced server modes use WireGuard and are available through the server selector on desktop and mobile; either can reduce connection speed.
An ordinary server connection also allows a manual IP refresh from the dashboard. That refresh control is unavailable while connected to IP Rotation or Double VPN servers, where address handling follows the selected advanced mode.
Tracker Blocker and connection records
Tracker Blocker blocks advertiser tracking technologies across the supported platforms. It can be switched off for websites that require it to be disabled before they work. This setting changes tracking protection separately from server location and protocol selection.
Avast SecureLine VPN does not record visited websites, transferred data or accessed IP addresses in its activity logs. It retains connection records such as connection times, session duration and bandwidth usage for diagnostics and abuse prevention.
