VPN Privacy Check: Is It Actually Working?

This guide shows you how to confirm your VPN is actually encrypting your traffic and hiding your real location. You’ll run a few quick checks that reveal your public IP address, DNS servers, and whether any traffic is leaking outside the encrypted tunnel. All you need is a computer or phone with the VPN installed and a web browser.

What You’ll Need

Your VPN app installed and logged in
A web browser (Chrome, Firefox, Safari, Edge)
Access to a few free online testing sites (listed in the steps)
Your real IP address (find it before connecting, or check your router’s status page)

Step-by-Step

Note your real IP address before connecting. Disconnect the VPN and visit a site like whatismyip.com or ipleak.net. Write down the IP address shown. This is your baseline—what you should not see when the VPN is active.
Connect to a VPN server in a known location. Pick a server in a specific city or country, for example “Netherlands – Amsterdam.” Make a note of which server you chose.
Re-check your public IP address. With the VPN connected, visit the same IP-checking site. The IP should now be different from your baseline. It should also be located in the country/city of the server you selected. If the site shows your original IP or a location far from your chosen server, the VPN is not working correctly.
Run a DNS leak test. Go to dnsleaktest.com and click “Extended Test.” Let it run. The results show which DNS servers your device is using. If you see your ISP’s name or servers in your home country, your DNS queries are leaking—the VPN is not handling them.
Check for WebRTC leaks (browser only). Visit browserleaks.com/webrtc. This test reveals your real IP even when a VPN is on, because WebRTC (used for video calls and some sites) can bypass the VPN. If your real IP appears, you need to disable WebRTC in your browser or use a VPN extension that blocks it.
Test IPv6 leakage. Visit ipv6-test.com and look at the IPv6 address shown. If your device has an IPv6 address and the VPN does not support IPv6, your real IPv6 address may leak. Compare it to your baseline IPv6 (if you have one). If it matches, you should disable IPv6 in your network settings or choose a VPN that handles it.
Verify the encryption is actually on. Most VPN apps show a status indicator (a padlock, a green dot, or “Connected”). Check your VPN app’s settings or logs to confirm it says “Connected” and shows the protocol (like WireGuard or OpenVPN). If it shows “Disconnected” or “Reconnecting,” your traffic is not protected.
Test a geo-restricted site. Try opening a site that is only available in the server’s country (for example, a local news site). If it loads, the VPN is routing your traffic through that location. If it blocks you or shows your real location, the VPN is not working as expected.

Common Mistakes

Forgetting to check DNS separately. Your IP might be hidden but DNS queries can still go to your ISP. Always run a dedicated DNS leak test.
Using the browser’s built-in VPN instead of the system VPN. Browser VPNs only protect the browser, not other apps. You need a system-wide VPN for full protection.
Assuming the VPN is on because the app says “Connected.” Sometimes the app connects but the system routing fails. The IP and DNS tests are the only way to be sure.
Not testing after every update. Operating system or VPN app updates can change network settings and break the VPN connection silently.
Testing only once. A single test might pass while intermittent leaks occur. Run the tests a few times over a few minutes.

Tips

Use a VPN with a built-in kill switch. This feature blocks all internet traffic if the VPN connection drops, preventing accidental exposure.
Check the VPN’s settings for “DNS leak protection” and “IPv6 leak protection” and enable both if available.
For maximum privacy, use the VPN’s own DNS servers rather than your ISP’s or a public one like Google’s.
Test on both Wi-Fi and mobile data—the VPN might behave differently on each.
If you use a browser, install the VPN’s browser extension as an extra layer, but remember it only protects that browser.
After passing all tests, do a final check by looking at your VPN app’s connection log to confirm the tunnel stayed up during the entire session.

Troubleshooting

IP address shows your real location: Disconnect and reconnect to a different server. If it persists, restart your device and try again. If it still fails, the VPN service may be blocked by your network—try a different protocol (e.g., switch from WireGuard to OpenVPN) in the app settings.

DNS leak detected: First, check the VPN app’s settings for a DNS leak protection toggle and turn it on. If it’s already on, try switching to a different server. If the leak persists, manually set your DNS servers to the VPN’s recommended addresses (usually found on their support page).

WebRTC leak: Use a browser extension to block WebRTC (like “WebRTC Leak Prevent” for Chrome/Firefox). Or disable WebRTC in the browser’s flags/experimental settings. Alternatively, use a different browser that handles it better, or rely on the VPN’s browser extension which often blocks WebRTC by default.

IPv6 leak: The simplest fix is to disable IPv6 on your device’s network adapter. On Windows, go to Network Settings > Adapter Options > Properties > uncheck “Internet Protocol Version 6 (TCP/IPv6).” On macOS, go to System Settings > Network > your connection > Details > TCP/IP > Configure IPv6 > Off. This forces all traffic over IPv4, which the VPN handles.

VPN connects but no internet: This is usually a routing issue. Try switching the VPN protocol. If that fails, restart the VPN app and your device. As a last resort, reinstall the VPN app.

Tests show different results each time: This can happen if your network is unstable or the VPN is reconnecting. Run the tests multiple times and look for a consistent pattern. If results vary wildly, contact your VPN provider’s support with the test results.

Frequently Asked Questions

Q: My IP is hidden but the DNS test shows my ISP. Is that a problem?
A: Yes. DNS queries reveal which websites you visit. Even if your IP is hidden, your ISP can see your browsing history. You need to fix the DNS leak.

Q: Does a free VPN pass these tests?
A: Some do, but many free VPNs log your data or sell your information. Passing a leak test doesn’t mean the VPN is privacy-friendly—it only means the technical connection is working. Read the privacy policy carefully.

Q: How often should I run these tests?
A: At least once a month, and after any major system update, VPN app update, or network change. Also run them when you switch to a new VPN provider.

Q: My VPN shows a different country than the server I chose. Is that normal?
A: No. It usually means the server is actually located elsewhere (common with virtual locations) or your traffic is being routed through another country. For privacy, this isn’t a leak, but it’s misleading. Check your VPN provider’s documentation.

Q: Can I use these tests on my phone?
A: Yes. All the test sites work in mobile browsers. The steps are identical. Some VPN apps have built-in leak tests—check your app’s settings.

Q: What if my VPN passes all tests but a website still shows my real location?
A: This is likely due to browser-based location detection (GPS, Wi-Fi triangulation) rather than an IP leak. Disable location services in your browser or use a privacy-focused browser like Firefox with strict tracking protection.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →