Protection status
Read the Guard status and know why iOS sometimes pauses protection.
How do I know protection is on?
Open Guard, which is home base for your status: it shows whether protection is on or off, the active DNS resolver, and whether your local filters are configured. After a system update or a network change, reopen the app and check Guard to confirm Lava is still on.
Why did protection turn off by itself?
iOS can pause or restart Lava's on-device network extension during system updates, VPN profile changes, or network switches, so protection may quietly stop until the app is reopened. Open Guard on a stable network to check the live status and turn protection back on if needed.
What does "Protected" actually mean?
Protected means Lava's local network extension is running and domain decisions are being checked against the rules and blocklists stored on your iPhone, using Apple's on-device network extension rather than routing your everyday traffic through Lava servers. The app does still reach out periodically to fetch catalog, blocklist, and safety-guardrail updates, but Lava Security is designed so that Lava Security LLC does not receive your routine browsing history or a live stream of the domains your device contacts.
Why does iOS show a VPN profile when protection is on?
Lava uses Apple's local network extension to check domain names right on your phone, so iOS may label it as a VPN profile; that is expected, and the profile stays on-device rather than tunneling your everyday traffic to a Lava server. You can confirm protection from Guard.
Guard says protection is on, but a site that should be blocked still loads. What now?
Refresh your blocklists from Filters on a stable network, then restart protection from Guard; you can also check Activity to see the recent DNS decisions made on your phone. If it still misbehaves, email support@lavasecurity.app with your app version, iOS version, and device model.