Blog

IPv6 address visible after turning on a VPN?

Check whether your real IPv6 address is visible with a VPN on, understand what the result means, and find the right setting to change.

Jason TurnerHardware tests Tests 4 min read

You turned on your VPN, but you are not sure whether websites can still see your real IPv6 address. This can happen when a VPN protects IPv4 traffic but does not route or block IPv6.

Use the VPN Leak Test to check which addresses your browser can expose while the VPN is connected. The result can help you tell a VPN configuration issue from a network that simply has no IPv6 connection.

Check IPv6 visibility with your VPN on

  1. Connect to your VPN using the app or browser extension you normally use. Check that it says the connection is active.
  2. Open the VPN Leak Test in the same browser where you use the VPN. If you use a browser extension, keep it enabled for the test.
  3. Review the IPv6 and WebRTC results separately. Look for whether an address associated with your regular internet connection appears, or whether the visible address belongs to the VPN connection.
  4. If you want a comparison, run the test once with the VPN disconnected, then reconnect it and test again. Only do this if you are comfortable briefly exposing your usual public address to the test.

Do not share a screenshot or copy of the result without checking it first. An IP address can reveal information about your internet provider and approximate region, even though it usually does not identify your street address.

What the result means

The IPv6 address changes to one associated with the VPN

The VPN appears to be handling IPv6 for this browser connection. The visible address is not your normal public IPv6 address. This is a useful sign, but it only describes the connection and browser tested. It does not prove that every app on the device uses the VPN.

Your usual IPv6 address still appears

The browser can reach the internet over IPv6 without that traffic being covered by the VPN. This is an IPv6 leak in the tested connection. The VPN may not support IPv6, may not be set to block it, or may have lost its connection while IPv6 traffic continued.

No IPv6 address appears

This does not automatically mean the VPN is blocking an IPv6 leak. Your internet provider, router, network, or VPN may not provide an IPv6 route in the first place. If there is no IPv6 traffic to test, the result cannot show how IPv6 would behave on a network that does have it.

The IPv6 result looks protected but WebRTC shows another address

WebRTC is a browser feature used for real-time audio and video. Its address checks are separate from the ordinary IPv6 connection check. A different address may come from a VPN route, a local network, or a browser configuration. Check whether the test identifies your usual public address, not just whether any address is listed.

How to fix an exposed IPv6 address

  1. Reconnect the VPN. Disconnect and reconnect in the VPN app, then run the test again. A brief interruption can leave traffic using the regular connection.
  2. Check the VPN's IPv6 protection. Look in the provider's app or help information for IPv6 support, IPv6 leak protection, or a setting that blocks IPv6 when the VPN cannot carry it. The wording varies, so do not assume a setting with a similar name behaves the same way.
  3. Check whether you use a browser-only VPN extension. An extension may protect only browser traffic, and some extensions cover only selected sites or tabs. Use the VPN provider's full device app if you need other apps to use the tunnel too.
  4. Review IPv6 on the network adapter. On Windows 11, open Settings › Network & internet › Advanced network settings › More network adapter options, right-click the active adapter, and choose Properties. On macOS, open System Settings › Network, select Wi-Fi or Ethernet, choose Details, then open TCP/IP. These screens show network settings, but the VPN app may manage a separate tunnel interface.
  5. Do not turn off IPv6 without a reason. Disabling it across a network adapter can affect websites or services that rely on IPv6. If your VPN does not support IPv6, follow the provider's instructions for blocking it safely rather than changing settings at random.
  6. Update or contact the VPN provider. Install the current VPN app and check its support instructions for IPv6 leaks on your operating system. If the same address appears afterward, send the provider the browser, operating system, VPN protocol, and test result, but avoid posting the full address publicly.

Why one test cannot check every app

The VPN Leak Test checks what is visible through the browser running the test. If you use a VPN extension, the browser may be protected while a separate app uses your regular connection. A browser test also cannot prove that every network connection on your device is covered, or that the VPN provider keeps no records.

For a more useful check, test in the browser where the problem happened, with the same VPN connection and settings. If you change an IPv6 or WebRTC setting, repeat the test afterward and check that ordinary websites and apps still connect as expected.

A VPN can change which public address a website sees, but it does not make you anonymous or hide information you enter into a site.

More articles