Check VPN split tunneling after a router update

After a router update, some devices may stop using the VPN while others still connect through it. Or a device you meant to bypass the VPN may now be routed through the tunnel. The change can be hard to spot because Wi-Fi still works normally.

Test each device on your home network, then check the router's VPN and split-tunnel rules. The VPN Leak Test can check whether the browser exposes your real IP through IPv6 or WebRTC while the VPN is on. It cannot confirm the route for every app or device, so use it as one check, not a complete network audit.

Test which route your browser is using

1. Open the VPN Leak Test on a device connected to your home router. Keep the device on Wi-Fi, and turn off mobile data or any separate VPN app so they do not change the route being tested.
2. Check the router's VPN connection status. If its VPN client is disconnected, reconnect it before checking the split-tunnel behavior.
3. Run the test with the router VPN on. Note the public IP information it reports, and whether the result points to your VPN provider or your regular internet provider.
4. Repeat on a device that should use the VPN and one that should bypass it. Test each device separately, using the same home Wi-Fi and the same browser where possible.
5. Compare the results with the rules you intended to use. A device assigned to bypass the VPN may show your regular internet connection, while a device assigned to the tunnel should normally show the VPN connection.

Do not change several router settings at once. If the test result changes after a single rule adjustment, you will know which change caused it.

What the result means

The browser appears to use the VPN

The browser's test traffic appears to leave through the VPN for the checks being tested. This is a good sign for a device that should use the tunnel, but it does not prove that every app, protocol, or device on the network follows the same route.

The browser shows your regular internet connection

This may be the intended result for a device or traffic type excluded from the VPN. If this device is supposed to use the tunnel, check its router assignment and the VPN connection state. A real IP appearing in the test does not by itself prove a leak if the router is deliberately routing that device outside the VPN.

If you expected the browser to use the VPN, see what to do when a VPN leak test detects your real IP. Check the router's rules before changing browser privacy settings.

The result differs between devices

The router may be applying a device-based rule, or the devices may be using different network paths. Confirm that both are connected to the same router and not a guest network, phone hotspot, or wired connection with different rules. Some phones also use a randomized Wi-Fi address, which can make a device-based router rule stop matching after a change.

The test does not show enough to decide

The VPN Leak Test checks IPv6 and WebRTC exposure in the browser. It does not inspect every app's traffic, confirm your router's DNS handling, or prove that a particular website is routed through the tunnel. Check the router's own connection and rule status as well.

How to fix the routing

1. Confirm the router VPN is connected. Open the router's VPN client or VPN status page and check that the connection is active. A saved VPN profile is not the same as a live connection.
2. Review the split-tunnel rules. Look for rules that route selected devices or destinations through the VPN, or exclude them from it. Router interfaces use different names, so check the rule's direction and target rather than relying on a label that may not match your model.
3. Check the device identity. If a rule applies to a device, make sure it still matches the device's current network address or identifier. On phones, a private or randomized Wi-Fi address may change the identity the router sees. Recheck the router's device list and update the rule if needed.
4. Disconnect any separate VPN or proxy. A VPN app on a computer or phone can override or complicate the router's route. On Windows 11, check Settings › Network & internet › VPN. On macOS, check System Settings › VPN, or System Settings › Network on some versions. On Android, look under Settings › Network & internet › VPN; on iPhone, check Settings › General › VPN & Device Management. Menu names can vary by device.
5. Save one change and test again. Adjust only the rule for the device or destination in question, save it, and rerun the browser test. If the router requires a VPN reconnect after rule changes, reconnect it before testing.
6. Restart the router only after saving its settings. A restart can clear a temporary routing state, but it will not repair an incorrect rule. Avoid a factory reset unless the router maker's support instructions call for one, because it can erase your internet and VPN configuration.

Why the update can change split tunneling

A router update can reset a policy, change how it identifies a device, or alter the order in which routing rules are applied. A rule that worked before may still appear in the interface but no longer match the device or traffic you intended. After reviewing the configuration, test one device assigned to the VPN and one assigned to bypass it. Keep a note of the intended behavior so you can compare it after future updates.

A browser test shows what happens to that browser's test traffic from that device. For a full picture, verify each important device and app with the router's own status and rules.