How to verify a browser-only VPN extension is working
Check whether a VPN browser extension changes your browser's public IP and exposes your real address through WebRTC or IPv6, then troubleshoot gaps.
You turned on a VPN extension, but how can you tell whether it is actually routing your browser traffic? A connected icon is a useful clue, but it does not show whether your real address is still visible to websites.
Use the VPN Leak Test with the extension on. It checks whether your real IP address leaks through IPv6 or WebRTC, two ways a website may see an address that does not match the VPN connection.
Test the VPN extension
- Open the VPN Leak Test in the browser where the extension is installed. A browser extension may protect only that browser, so testing in a different browser will not check it.
- Connect the extension to a VPN location. Wait until the extension shows that it is connected, then reload the test page.
- Read the result for IPv6 and WebRTC. Check whether the address or location shown appears to belong to the VPN connection, or whether the test reports that your real IP is exposed.
- For a comparison, disconnect the extension and run the test again. The address should usually differ when the extension is routing the test page through a VPN server. Reconnect it and test once more.
Use the same browser and network for both runs. If you change networks or switch between browsers, the comparison may not tell you whether the extension caused the difference.
What the result means
The test does not find a real IP leak
The test did not detect your real address through the IPv6 or WebRTC checks it runs. This is a good sign for the browser session, but it does not prove that every type of traffic is protected or that other apps use the VPN.
The test reports your real IP
A website may be able to see an address associated with your regular connection, even while the extension appears connected. Check that the extension is enabled for this site, then review its leak protection and connection settings.
The address changes, but the location looks unexpected
VPN server locations can be registered or routed differently from their advertised city. An approximate location is not an exact measure of where a server is physically located. Focus on whether the test shows your regular connection's address as exposed.
The address does not change when you disconnect
The extension may not have been routing this browser session, or it may not have connected successfully. Some services also reuse an address, so this comparison alone is not conclusive. Check the extension status and repeat the test after reconnecting.
How to fix a leak or an unchanged address
- Reconnect the extension. Open its menu, disconnect, choose a server again, and wait for its connected status before reloading the test. A brief reconnect can clear a failed or stale connection.
- Check whether the site is excluded. Look in the extension for a site list, bypass list, or split tunneling setting. Remove the test page from any list that sends it outside the VPN, then reload it.
- Review WebRTC and IPv6 protection. If the test reports a leak, look for the extension's settings related to WebRTC or IPv6. Names and options vary by extension. Change only the relevant protection setting, then run the test again.
- Check for another proxy or VPN. Turn off other VPN, proxy, or privacy extensions temporarily, then test again. On Windows 11, check Settings › Network & internet › Proxy. On macOS, check System Settings › Network, select your active connection, and open Details › Proxies. These system settings are separate from a browser extension, and changing them can affect other apps.
- Try a fresh browser session. Close the test tab, open a new one, reconnect the extension, and test again. If the issue remains, update the extension and browser, or remove and reinstall the extension using its official browser store.
What a browser-only VPN can and cannot protect
A browser-only VPN extension usually routes supported traffic from the browser where it is installed. It does not automatically route traffic from desktop apps, games, or another browser. A system-wide VPN app, by contrast, is designed to route traffic from more than one app, though its coverage still depends on its settings.
The VPN Leak Test checks for exposure through IPv6 and WebRTC while you use the browser. It is not a full audit of the VPN service, its privacy practices, or every possible kind of leak. If you need to protect traffic outside the browser, check whether your VPN provider offers a system-wide app and verify its settings separately.
Run the test in each browser where you use the extension, because an extension's protection does not automatically carry over to other browsers.
