VPN Test: Is Your VPN Working?

One live check that tells you whether your VPN really hides your IP address, and whether anything leaks around it through DNS, WebRTC or IPv6. For proof, run it once with your VPN off and once with it on. You'll see both IP addresses side by side.

Your VPN Test Result

Checking...

Checking...

Checking...

Checking...

How to Test Your VPN Properly

A single green result is good news, but the most convincing proof is a before-and-after comparison. It takes about a minute:

Turn your VPN off and run this test. It shows your real IP address and internet provider, and saves them in your browser.
Turn your VPN on, wait until the app says it's connected, then click Run Test Again.
Compare. The page shows your old and new IP address side by side. If the IP, provider and country changed and all three leak checks pass, your VPN is doing its job.

Repeat the test on every device and browser you use with the VPN. A VPN that works in Chrome on your laptop says nothing about Safari on your phone.

What This VPN Test Checks

1. Is the VPN hiding your IP address?

The test looks up the IP address websites see and check whether it belongs to a VPN, proxy, Tor or data center network, or to a regular home or mobile internet provider. If it still belongs to your provider, the VPN isn't handling this browser's traffic at all. You can see the network details behind your IP, including its ASN, on the Network Information page.

2. DNS leak

Every time you open a website, your device asks a DNS server for its address. If those lookups go to your internet provider instead of through the VPN, your provider can still log every site you visit. The full DNS Leak Test lists every DNS server your browser uses.

3. WebRTC leak

WebRTC lets browsers make video calls directly, and it can ask your network for your public IP address outside the VPN tunnel. Any website can trigger it with a few lines of code. The WebRTC Leak Test shows every address WebRTC reveals.

4. IPv6 leak

Most US home internet providers, including Comcast, AT&T and Spectrum, give you both an IPv4 and an IPv6 address. Some VPNs only tunnel IPv4. Sites that support IPv6 then connect over your real IPv6 address and see exactly who you are. The IPv6 Test shows your IPv6 address and which network it belongs to.

How to Fix a VPN That Leaks

No VPN detected: reconnect the VPN, check that your browser isn't excluded by split tunneling, and remove VPN browser extensions from other providers.
DNS leak: turn on "DNS leak protection" in your VPN app, and turn off secure DNS (DNS over HTTPS) in your browser or set it to the VPN's DNS.
WebRTC leak: install uBlock Origin and enable "Prevent WebRTC from leaking local IP addresses," or block WebRTC in your browser settings.
IPv6 leak: turn on IPv6 leak protection in your VPN app. If it doesn't have one, disable IPv6 in your network adapter or router settings.
Leaks keep coming back: turn on the kill switch, and consider a VPN that tunnels IPv6 and runs its own DNS servers.

The guide Is Your VPN Leaking? walks through each fix step by step.

The Verdict: "Connected" Isn't the Same as Protected

The VPN icon only tells you the app is running. It doesn't tell you whether your browser uses the tunnel, or whether DNS, WebRTC or IPv6 traffic slips around it.

Test once after setup, then after every update. If your VPN fails these checks even with leak protection turned on, it's time for a provider that gets the basics right.

Compare VPNs That Pass Leak Tests

Frequently Asked Questions

How do I know if my VPN is working?

Two things have to be true. Websites must see your VPN's IP address instead of the one from your internet provider, and nothing may leak around the VPN through DNS, WebRTC or IPv6. This page checks all four at once. For proof, run it once with the VPN off and once with it on, and compare the IP addresses.

My VPN app says Connected, but the test says No VPN detected. Why?

Your traffic from this browser isn't going through the VPN. Common causes are split tunneling that excludes your browser, a VPN browser extension installed in a different browser, a VPN that is still reconnecting, or a secure DNS or proxy setting that bypasses the tunnel. Disconnect and reconnect, check your split tunneling list, then run the test again.

What's the difference between a DNS, WebRTC and IPv6 leak?

A DNS leak lets your internet provider see which websites you visit. A WebRTC leak lets websites read your real IP address through a browser feature used for video calls. An IPv6 leak happens when your VPN only tunnels IPv4 traffic, so sites that support IPv6 still see your real IPv6 address.

Why does the test say a VPN is active when I'm not using one?

The test detects any connection that hides your home IP address, not only VPN apps. Proxies, Tor, iCloud Private Relay, corporate networks and cloud servers usually come from data center networks and are reported the same way.

Does this VPN test store my IP address?

Not on my server. For the before-and-after comparison, your IP address from the test without a VPN is saved only in your own browser's local storage for 24 hours. It is never sent to my server, and you can delete it at any time with the Forget button.

How often should I test my VPN?

Test after installing a VPN, after every VPN app or browser update, when you switch to a new server or protocol, and whenever you join a new network such as hotel or airport Wi-Fi. Leaks often appear after updates change settings you configured earlier.