VPN Leak Test
A VPN can look connected and still expose your real IP address. This test checks the three things that leak in practice — your visible IP, WebRTC, and IPv6 — and runs entirely in your browser. We don’t store your results.
Takes about ten seconds. For a meaningful result, connect your VPN first, then run the test.
What every website you visit sees, plus which network it belongs to.
Browsers use WebRTC for calls and file transfer. It can reveal your real IP to a website directly, bypassing the VPN tunnel.
Many VPNs tunnel only IPv4. If your connection also has IPv6 and the VPN ignores it, your real IPv6 address travels with every request.
We don’t fake this one. A genuine DNS leak test resolves randomised hostnames against nameservers the tester controls and records which resolver asked — that cannot be done from inside your browser. Any tool claiming a DNS verdict from client-side JavaScript is guessing.
These are affiliate links — we earn a commission if you subscribe, at no extra cost to you. Re-run this test after connecting, and use the refund window if it still leaks.
How to Read Your Results
Run the test twice — once with your VPN off and once with it on. The comparison is what makes the result meaningful. With the VPN off you should see your own ISP; with it on you should see the VPN’s network and nothing of your own.
| Result | What it means | What to do |
|---|---|---|
| No VPN detected | Your traffic is going out over your own ISP | Nothing is wrong — connect a VPN and test again |
| WebRTC exposed | A website can read an address outside the tunnel | Turn on your VPN’s WebRTC blocking, or disable WebRTC in the browser |
| IPv6 exposed | You have IPv6 and your VPN may only tunnel IPv4 | Enable IPv6 support or IPv6 blocking in the VPN app |
| No leaks detected | Nothing leaked through the paths this test can see | Check DNS separately — see below |
What This Test Cannot Tell You
Being clear about the limits matters more than adding another green tick.
It cannot detect DNS leaks. A real DNS leak test resolves randomised hostnames against nameservers the tester operates, then reports which resolver looked them up. That requires server-side infrastructure — it is impossible from JavaScript running in your browser. Any tool that shows you a DNS verdict from a page like this one is inferring, not measuring.
It cannot tell you whether your VPN keeps logs. Leak testing measures what your connection exposes right now. What your provider records is a question of audits and jurisdiction — covered in what actually makes a VPN private.
It cannot see your browser fingerprint. Your screen, fonts, GPU and timezone identify you whether or not your IP is hidden. Our what this site already knows about you page shows that side, and stores none of it.
Frequently Asked Questions
The test says “no VPN detected” but my VPN is connected.
Your provider may be using residential IP addresses, which look like an ordinary ISP by design. Compare the IP shown here with the one you see with the VPN off — if it changed, the tunnel is working even though the network doesn’t look like a datacentre.
What is a WebRTC leak?
WebRTC lets browsers connect directly for calls and file transfer, and to do that
it discovers your addresses and can hand them to a page in JavaScript — going around the VPN tunnel entirely.
Modern browsers mask this with a random .local hostname, which is why an empty result here is good
news rather than a failed test.
Why does IPv6 matter?
Plenty of VPNs route only IPv4. If your ISP also gives you IPv6 and the app ignores it, sites that support IPv6 will see your real address while everything looks fine otherwise. See what IPv6 is and whether you should use it.
Do you store my IP address or my results?
No. The checks run in your browser and the result isn’t recorded anywhere.
How often should I test?
After installing a VPN, after any app or browser update, and after changing protocol or server. Leak protection is exactly the kind of setting that quietly resets.
My VPN leaks. Should I switch?
Check the app’s settings first — leak protection and the kill switch are often off by default, and enabling them fixes most cases. Switch only if the leak persists with those on.