How to Check If Your VPN Is Protecting You

This guide helps you verify that your VPN is actually encrypting your traffic and hiding your real IP address. You will learn quick tests to run on your computer or phone, what results to expect, and how to spot leaks. Before starting, make sure your VPN app is installed, you are logged in, and you have a stable internet connection.

What You’ll Need

An active VPN subscription and the VPN app installed on your device
A web browser (Chrome, Firefox, Safari, or Edge)
Access to a website that shows your public IP address (like whatismyip.com or ipleak.net)
Optional: A second device (like a phone) to test from a different network

Step-by-Step

Note your real IP address first. Before connecting to the VPN, visit an IP-checking website and write down the IP address shown. This is your real, unencrypted IP.
Connect to your VPN. Open your VPN app, choose a server in a different country (or at least a different city), and click Connect. Wait until the app shows a successful connection.
Check your IP again. Go back to the same IP-checking website. The IP address should now be different from the one you noted in step 1. If it shows the same IP, your VPN is not routing your traffic correctly.
Verify the IP location. On the IP-checking site, look at the location associated with the IP. It should match the country or city of the VPN server you selected. If it shows your real location, there is a leak.
Run a DNS leak test. Visit a DNS leak test site (like dnsleaktest.com) and click “Standard Test” or “Extended Test.” The results should show DNS servers located in the same country as your VPN server, not your ISP’s servers. If you see your ISP’s name or your real location, you have a DNS leak.
Check for WebRTC leaks (browser-specific). Open a WebRTC leak test page (like browserleaks.com/webrtc). If the page shows your real IP address alongside the VPN IP, your browser is leaking your real address. You can fix this by disabling WebRTC in your browser settings or using a browser extension that blocks it.
Test for IPv6 leaks. Some VPNs only protect IPv4 traffic. Visit an IPv6 leak test site (like ipv6-test.com). If the site shows your real IPv6 address, your VPN is not covering IPv6. You can disable IPv6 in your system network settings or switch to a VPN that supports IPv6.
Check the VPN’s kill switch. In your VPN app, find the “Kill Switch” or “Network Lock” feature and make sure it is enabled. This prevents traffic from going out if the VPN connection drops. To test it, connect to the VPN, then force-quit the VPN app (or turn off the connection). Try loading a website – it should fail, not load with your real IP.

Common Mistakes

Checking the wrong device. If you test on your phone but your computer is the one with the VPN, you will see your real IP. Test each device separately.
Using a cached page. Your browser may have cached the IP-checking page from before you connected. Hard refresh (Ctrl+F5 or Cmd+Shift+R) to load fresh content.
Ignoring DNS and WebRTC leaks. Many users only check the IP address and miss DNS or WebRTC leaks, which can expose your real location even when the IP is hidden.
Assuming the VPN is on. Some VPN apps have a “connect on launch” option that may be off. Always verify the VPN is connected before testing.

Tips

Run these tests on every device you use, because a VPN on your laptop does not protect your phone or tablet.
Use a VPN server in a different country for a clearer test – if the IP still shows your home country, something is wrong.
Check your VPN’s settings for a “DNS leak protection” toggle and enable it if present.
After testing, if you find a leak, try switching to a different VPN protocol (like OpenVPN or WireGuard) in the app’s settings.
Re-test periodically, especially after updating your VPN app or operating system.

Troubleshooting

IP address still shows your real location. Disconnect and reconnect to a different server. If the problem persists, restart your device and try again. If it still fails, your VPN may be misconfigured or the app might be blocked by your network – try using a different network (e.g., mobile hotspot) to test.
DNS leak test shows your ISP’s servers. In your VPN app, look for a “DNS leak protection” option and enable it. If that doesn’t help, switch to a different VPN protocol or contact your VPN provider’s support.
WebRTC leak is detected. Install a browser extension that blocks WebRTC (like “WebRTC Leak Prevent” for Chrome/Firefox) or disable WebRTC in your browser’s advanced settings. Note that disabling WebRTC may affect some video chat services.
IPv6 leak is detected. Disable IPv6 in your operating system’s network settings. On Windows: Control Panel > Network and Sharing Center > Change adapter settings > right-click your adapter > Properties > uncheck “Internet Protocol Version 6 (TCP/IPv6)”. On macOS: System Settings > Network > your connection > Details > TCP/IP > Configure IPv6 > Off.
Kill switch test fails. If the internet still works after disconnecting the VPN, the kill switch is not active. Check the app’s settings to enable it, or update the app to the latest version. Some VPNs require you to configure the kill switch separately for each connection.

Frequently Asked Questions

Why does my IP address sometimes show my real location even when the VPN is on?

This usually happens due to a leak (DNS, WebRTC, or IPv6) or because the VPN connection dropped without you noticing. Always check the VPN app’s connection status and re-run the tests.

Can I trust a website that shows my IP address?

Yes, these sites are generally safe. They simply read the IP address that your device sends when connecting. However, avoid entering personal information on such sites.

What is the difference between a DNS leak and a WebRTC leak?

A DNS leak occurs when your device sends DNS requests to your ISP’s servers instead of the VPN’s DNS, revealing the sites you visit. A WebRTC leak happens when your browser’s WebRTC feature exposes your real IP address despite the VPN, often due to a browser vulnerability.

Do I need to test for IPv6 leaks?

Yes, if your network or VPN provider supports IPv6. Many modern networks use IPv6, and if your VPN only handles IPv4, your real IPv6 address can leak. The test is quick and worth doing.

How often should I run these tests?

It’s a good idea to run them whenever you install a new VPN, update your VPN app, change your network, or notice suspicious behavior. For regular use, a monthly check is sufficient.

Can a VPN protect me from malware or phishing?

No, a VPN only encrypts your connection and hides your IP. It does not block malware or phishing. You still need a good antivirus and safe browsing habits.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →