Blog

How to check whether your VPN leaks your IP address

Check whether IPv6 or WebRTC exposes your real IP while a VPN is connected, learn what the results mean, and fix common leaks.

Daniel HayesHardware tests Tests 5 min read

You have connected to a VPN, but that does not always mean every connection from your browser uses the VPN tunnel. An IPv6 connection or a browser feature called WebRTC can sometimes reveal your regular public IP address.

The VPN Leak Test checks for leaks through IPv6 and WebRTC while your VPN is on. Run it before you rely on the VPN for a sensitive task, and use the results to decide what to change.

Check your VPN for IP leaks

  1. Connect to the VPN server you want to use, and wait for the VPN app to show that the connection is active.
  2. Open the VPN Leak Test in the browser you normally use. The test checks your connection through IPv6 and WebRTC.
  3. Review the report for an IPv6 or WebRTC result that indicates your regular IP address may be visible outside the VPN. If the report identifies an address as your real or ISP address, compare it with the address or location shown by your VPN app.
  4. If a leak is reported, keep the VPN connected while you try the fixes below. Then run the test again in the same browser.

Do not assume that seeing a different location proves there is no leak. A VPN server can be in the same country or region as you. The important question is whether the report detects your regular connection outside the VPN, not whether every location detail differs.

What the result means

The test does not report an IPv6 or WebRTC leak

The test did not detect your regular IP address through either of those routes at the time you checked. This is a useful sign, but it is not a guarantee that every app, website, or network request is protected. A browser test cannot prove that the VPN provider keeps no records or that other privacy risks are covered.

The test reports an IPv6 leak

Your connection may be reaching the internet over IPv6 without going through the VPN tunnel. IPv6 is a version of the internet addressing system. Some VPN services do not route IPv6 traffic, while others block it or handle it through the tunnel. Check your VPN provider's settings and support instructions before changing your computer's network configuration.

The test reports a WebRTC leak

WebRTC is a browser feature used for real-time voice and video connections. Depending on the browser and VPN setup, it can expose network addresses that are not covered by the tunnel. A reported address does not automatically mean your browser reveals it to every website, but it is a reason to check the VPN and browser settings.

The result is unclear or changes between checks

Reconnect to the VPN, wait until it says connected, and test again. A VPN server change, a browser setting, or a temporary connection failure can affect what the test sees. If you need help interpreting a report, save the result details without sharing your full IP address publicly.

How to fix an IP leak

  1. Reconnect to the VPN. Disconnect and reconnect using the VPN app, then rerun the test. If the VPN has a kill switch, turn it on so internet traffic is blocked if the tunnel drops. The name and location of this setting vary by VPN provider.
  2. Check for IPv6 support. Look in your VPN app for an IPv6 protection, IPv6 leak prevention, or similar setting. If the service does not support IPv6, follow its instructions for blocking IPv6. Do not disable IPv6 system-wide unless your VPN provider recommends it, because other network features may depend on it.
  3. Check browser privacy settings. Some browsers or browser extensions offer controls for WebRTC. If you use one, review its settings and make sure it does not prevent sites you trust from working as expected. Browser controls can change how calls and video meetings connect, so test those apps afterward.
  4. Allow the VPN through your firewall. A firewall or security app can interfere with the VPN tunnel. On Windows 11, check Settings › Privacy & security › Windows Security › Firewall & network protection. On macOS, check System Settings › Network › Firewall. Follow the VPN provider's guidance before adding an exception.
  5. Check the network's IPv6 setting only if needed. On Windows 11, open Settings › Network & internet › Advanced network settings › More network adapter options, open the active adapter's properties, and review Internet Protocol Version 6 (TCP/IPv6). On macOS, open System Settings › Network, choose your active connection, select Details, then review TCP/IP and Configure IPv6. Change these settings only if your VPN provider's instructions call for it.
  6. Update the VPN app and browser. Install available updates, restart the browser, reconnect to the VPN, and test again. If the leak remains, contact the VPN provider with the test details and ask whether the service protects IPv6 and WebRTC traffic.

On a phone or tablet, connect the VPN in its app before opening the test in your mobile browser. VPN settings and WebRTC controls vary by app and operating system, so use the VPN provider's instructions rather than changing network settings you do not recognize.

What an IP leak test does not check

This test focuses on IPv6 and WebRTC. It does not tell you whether a website can identify you through an account you sign into, cookies, browser fingerprinting, or information you share yourself. It also does not check whether your VPN provider is trustworthy. A VPN changes the route your internet traffic takes, but it does not make you anonymous.

For a related explanation of what a VPN protects compared with private DNS, read Private DNS vs VPN: what each one protects.

More articles