Before you start
With the VPN off, note your public IP address and approximate location using any “what is my IP” page. Then connect to a VPN server, ideally in another region, and run the checks below.
1. IP address check
Reload the IP checker. It should now show the VPN server’s IP address and location, not yours. If it still shows your real IP, the VPN isn’t routing your traffic: reconnect, try another server or reinstall the app.
2. DNS leak check
DNS is how your device turns names like example.com into IP addresses. If those lookups go to your internet provider while the VPN is on, they can reveal which sites you visit. Use a DNS leak test page (many VPN providers and independent sites offer one): the servers listed should belong to your VPN provider, not your internet provider.
Fix: turn on the app’s DNS leak protection, use the VPN’s own DNS servers, and disable any custom DNS set on your device or router.
3. WebRTC leak check
WebRTC lets browsers make real-time audio and video connections, and can expose IP addresses to websites. A WebRTC leak test shows which addresses your browser reveals. Only the VPN’s address (or local private addresses) should appear.
Fix: use your VPN’s browser extension if it includes WebRTC protection, or adjust browser privacy settings.
4. IPv6 leak check
If your internet connection has IPv6 but your VPN only tunnels IPv4, IPv6 traffic may bypass the VPN. Look for your real IPv6 address on the IP checker. Fix: enable IPv6 leak protection in the app, or use a VPN that supports IPv6.
5. Kill switch test
While connected, briefly disconnect your Wi‑Fi or force-quit the VPN service and check that websites won’t load until the VPN reconnects. If they do, the kill switch is off or not working. See VPN features explained.
Last updated: 13 October 2026
