Family VPN on Five Devices

A device is an active VPN session. Phone connected = 1. Laptop connected = 1. Tablet sleeping with auto-connect still holding a session = still 1. You will get burned by that last one. I have been burned by that last one.

Install is free of the counter. Connect is not. If you hit the cap, disconnect something you are not using, or remove it from the portal so it cannot sneak back. Do not share passwords with a neighbor to "make six." That is how you get a stranger's traffic on your account and a support night you will not enjoy.

Five is enough for a lot of families if the TV is not greedy and the old phone is actually retired. Five is tight if everyone streams on a unique smart TV plus a console plus three phones. Then you are in router territory or you are paying for a second account, which I rarely recommend. One household, one account, one seating chart.

Klox does not sell unlimited devices. Some consumer brands do, with other tradeoffs. If unlimited is the only thing you care about, read those homepages. If you care about a clear limit and a price that is not a trick, five is the product. Live inside it.

Two phones, one shared homework laptop, one adult laptop, one tablet. That is five. The TV uses the house WiFi without a tunnel, or you put the router in the slot and drop two personal apps if you must. I prefer phones-first because they roam. TVs do not go to airports.

Another mix: one adult, one kid, two phones, two tablets, one laptop. You are already over. The tablet that only watches downloaded shows does not need a live tunnel. Be ruthless. A slot is for traffic that leaves the house or for the person who does sensitive things.

Shift workers who share a laptop can share a slot in time. Simultaneous is the word. Morning person disconnects, night person connects. This requires a household that can talk. If you cannot talk, buy fewer gadgets. I am only half joking.

Write the list on paper once. Names, devices, roam yes/no. If roam is yes, they get an app. If roam is no, they are candidates for a router hop. Paper beats a fight in the departure lounge.

Phones join airport networks, mall networks, and the in-laws' ancient router. That is the textbook VPN case. Install the app, sign in, turn on auto-connect for untrusted WiFi, leave the kill switch on. WireGuard unless it fails. Then OpenVPN.

Android and iPhone both count as one each. A work profile or a second user can get confusing; if you see double connections, you probably installed twice or you have Always-on VPN holding a session you forgot. Check the OS VPN settings, not just the app home screen.

Battery anxiety is real. Modern protocols are lighter than the stories people tell. If a phone is hot, it may be the camera or a bad cell, not Klox. Still: do not run a speed test loop. That is you, not us.

Set this up before the trip. App store logins, OS permissions, the first successful connect on home WiFi. Hotels are a bad helpdesk. The 7-day money-back window is for whether the product fits, not for debugging notifications at the gate.

Laptops handle the logins that hurt when they go wrong: email, banks, school portals, work-adjacent stuff you should not do on cafe WiFi raw. Give them a slot if they travel. A desktop that never leaves a locked apartment is a weaker claim. Still valid if you care about ISP visibility. Optional if you do not.

Split tunneling exists in some setups so only the browser uses the VPN. Klox's simpler mental model for families is: whole device on, unless you are debugging a site that hates VPN IPs. Then pause, do the thing, turn it back on. Teach that pause. Do not teach a permanent off.

Windows will fight you with other VPN adapters from work. macOS will fight you with leftover profiles. One app at a time. If a work VPN must win, let it win on that machine and spend the Klox slot elsewhere.

Updates: set the app to update. Old clients are how weird failures survive. You do not need a family IT person. You need "install updates" as a household rule next to "charge the tablet."

Tablets sleep. Apps keep VPN sessions. Kids do not disconnect. You will think you have a free slot and you will not. Make it a rule: tablets disconnect at the charger, or tablets do not auto-connect, or tablets live behind the router and do not get an app.

A tablet that only watches locally downloaded shows does not need a tunnel at rest. A tablet that is the kid's only browser on trips does. Be honest about which tablet you own. The Disney-download brick is not a travel browser.

iPad OS VPN profiles have the same leftover issue as iPhone. Android tablets copy the phone instructions. Fire tablets and odd Android forks can be miserable. If the store does not have a real app, do not sideload junk. Use a router hop or skip the device.

I would rather a kid tablet skip the VPN than a parent phone skip it. The parent phone is in the airport. The kid tablet is on the couch. Rank by hostility of the network, not by who complains first.

TV app: one slot, one living room, streaming apps may sulk, you can turn it off with a remote. Router: one slot, whole house, including smart speakers and the fridge if you like overkill, harder to exempt the console, captive portals on travel routers get weird.

I pick TV app when the only problem is "the streaming stick should not shout our ISP our watching habits" and you still have a spare slot. I pick router when you have gadgets with no app, or you are tired of installing things, or five personal devices already fill the plan and you are willing to put the house on one hop instead.

You usually should not do both. TV app plus router is two ways to cover the same couch and two ways to break Netflix. Pick. Write it on the paper list.

Router setup is a project: compatible firmware, WireGuard or OpenVPN profile, a reboot plan, a way to disable when something breaks. Our router tips article exists because this is where families get stuck. If nobody in the house wants that project, do not start it the night before a trip. Use apps. Travelers needed apps anyway.

Rank: (1) phones that leave home, (2) laptops that leave home or handle money, (3) the homework device, (4) tablet that actually browses, (5) either a spare travel device or the router/TV choice. Everything else waits.

Couples will argue about the TV. The TV is furniture. The phone is a street computer. I am on the phone's side. If that ruins movie night once a year when a streaming app gets picky, you still made the right rank. Pause the tunnel on the TV app. Movie happens. Tunnel returns.

Teenagers will argue they need a sixth. They need a disconnect habit. If they have a job and want their own account, they can buy one. Yearly from $2.83/month is not a mortgage. I would rather a teen own their five than sit on yours and kick you during a flight.

Elderly parents on your plan: install, auto-connect, never mention OpenVPN. You own the seating chart for them. Put their phone on the list. Do not put their smart TV on the list unless slots are empty.

New phone: install, sign in, connect, confirm, then remove the old phone in the portal. Not the other order if you still need the old phone as a 2FA brick for a day. Hold both briefly, then cut the old session.

Hit the cap: disconnect the tablet first. Tablets are the usual extra. If that fails, disconnect the TV. If that fails, you have five real people online and you need a router philosophy or a second account.

Name devices in the portal if the UI lets you. "Dad Pixel" beats "Android 3." You cannot manage what you cannot recognize at 6am.

Do this when everyone is home, not when one person is already in a taxi. The 7-day money-back is a product trial, not a substitute for a seating change. Seating changes are free. Use them.

You are the adult on the billing. You own refunds, chargebacks, and the 7-day window. Kids do not. Explain that a VPN does not mean "anonymous on the school forum." We published the cannot-list. Make them hear the phishing part. The tunnel will not save a bad click.

Guests: cafe rules. Your WiFi can stay on the router VPN if you chose that life. Their phones can use their own apps. Mixing guests onto your five seats is how you meet a cap during your own trip.

If a kid needs offboarding — lost tablet, broken trust — revoke in the portal. Do not just hide the icon. The session is the seat.

Streaming household profiles are separate from VPN seats. Four Netflix screens is not five Klox devices. People mash those numbers together. They are different companies. Different limits. Different receipts.

Night 1: buy the plan, install on the two phones, connect on home WiFi, confirm the IP changed with a leak test you trust, turn on auto-connect and kill switch. Night 2: laptops. Night 3: tablet policy (app vs not). Night 4: TV or router, not both. Do not do all of this during a movie.

Use WireGuard until a network refuses it. Keep OpenVPN in your pocket. You do not need to explain this at dinner. You need it when a hotel eats UDP.

If something fails, isolate: one device, one network, one protocol. Changing five variables is how families decide "VPN is broken" and eat the 7-day refund when a single tablet profile was the villain.

When it works, leave it alone. Fiddling with cities for fun is how you get slow. Nearby servers for daily use. Far servers only when you have a reason. Families rarely have a reason at Tuesday homework time.

If five slots still feel tight after a week of honest ranking, you either need a router consolidation or you have more roaming humans than this SKU. That is a valid outcome. The money-back window exists. So does a second account for a teen. What does not exist is a secret sixth seat. Anyone selling you a secret sixth seat on a five-device plan is selling nonsense.