How to test your VPN for leaks
Connecting to a VPN is not the same as being protected by it. Misconfiguration, browser quirks, and protocol gaps can leak your real identity even while the VPN shows 'connected.' The good news: you can verify your setup yourself in a few minutes, with no special tools.
Step 1: Note your real IP first
Before connecting to the VPN, search 'what is my IP' and note the address and the location it reports. This is your baseline — the thing the VPN is supposed to hide. Write down both the IPv4 and, if shown, the IPv6 address.
Step 2: Connect and recheck
Now connect to your VPN and reload the same IP-checking page. The address and location should now show the VPN server, not your real one. If you still see your real IP, the VPN is not routing your traffic — stop here and fix the connection before doing anything sensitive.
Step 3: Check for DNS and WebRTC leaks
Even with the right exit IP, two sneakier leaks can expose you. A DNS leak means your device is still asking your internet provider's servers to resolve domain names, revealing the sites you visit. A WebRTC leak is a browser feature that can expose your real IP to websites directly, bypassing the VPN.
Use a reputable DNS-leak test site and a WebRTC-leak test site while connected. The DNS servers shown should belong to the VPN, not your ISP, and the WebRTC test should not reveal your real IP. If either leaks, enable your VPN's leak protection, or disable WebRTC in your browser.
Step 4: Test the kill switch
The kill switch is your safety net: if the VPN connection drops, it should cut your internet rather than let traffic flow unprotected. To test it, connect to the VPN, start something visible like a streaming page, then manually disconnect the VPN server (not the app). Your internet should stop immediately. If pages keep loading, your kill switch is off or not working — turn it on in settings.