VPN leak in one browser on dorm Wi-Fi? Fix it

Your VPN looks connected, but a leak check in one browser shows an address you do not recognize. On shared dorm Wi-Fi, it can be hard to tell whether the browser is bypassing the VPN, the VPN handles traffic differently in each browser, or the result is simply showing the VPN’s exit address.

Test the affected browser while the VPN is connected, then compare it with another browser on the same device and network. The VPN Leak Test checks for real IP exposure through IPv6 or WebRTC. It does not test every app or prove that all traffic on your computer uses the VPN.

Check the browser with the VPN on

1. Connect to your dorm Wi-Fi, then open the VPN Leak Test in the browser that showed the problem.
2. Connect your VPN using the same app or browser extension you normally use. Wait for it to show that the connection is active.
3. Run the check and note whether it reports an IPv6 or WebRTC exposure. Compare any reported public address with the VPN location or exit address your VPN app says it is using.
4. Repeat the check in a second browser on the same computer, with the same VPN connection active. Keep the network, VPN location, and test timing the same so the comparison is useful.

If the VPN is a browser extension, it may protect only that browser, not other programs on your computer. If it is a full-device VPN app, check that the app has not excluded the affected browser from its tunnel.

What the result means

The dorm or internet provider address appears in one browser

If that address is not the VPN exit address, the browser may be sending some traffic outside the tunnel. A browser extension can have its own connection state or exclusions, and WebRTC can use a network path the VPN does not handle correctly. The comparison with a second browser helps show whether the issue is limited to one browser, but it does not identify the exact setting by itself.

You see an address that matches the VPN location

A public address appearing in a test is not automatically a leak. If it matches the VPN exit location or address, that is generally what you expect while the VPN is active. A VPN service can use different exit addresses over time, so compare the result with the connected location shown in its app rather than expecting one permanent address.

The test reports an IPv6 exposure

IPv6 is a way devices address each other on the internet. Your dorm network may provide IPv6 even if the VPN tunnel is handling IPv4. If the VPN does not route or block IPv6 safely, the browser may reveal an address outside the VPN. Look for IPv6 leak protection or IPv6 support in the VPN settings before changing your computer’s network configuration.

The test reports a WebRTC exposure

WebRTC is browser technology used for real-time audio and video connections. It can discover network addresses for a connection, and some VPN configurations do not mask every address WebRTC can see. If only one browser reports the issue, check that browser’s VPN extension and its WebRTC protection options.

Both browsers show the same unexpected result

The problem may be with the VPN connection or its configuration rather than one browser. Confirm the VPN is connected, check that it is not paused, and test again after reconnecting. The test only checks the IP exposure paths it supports, so it cannot certify that every kind of traffic is protected.

How to fix it

1. Confirm which VPN is active. If you use an extension, check its status inside the affected browser. If you use a VPN app, check that app instead. On Windows 11, open Settings › Network & internet › VPN. On macOS, open System Settings › VPN. A browser extension may not appear in these system settings.
2. Check for browser exclusions. Open the VPN app or extension settings and look for split tunneling, excluded apps, or per-site rules. Remove the affected browser or test page from exclusions if you want its traffic to use the VPN.
3. Turn on the VPN’s leak protection. Look for settings named IPv6 leak protection, WebRTC protection, or leak protection. Names differ between VPN products. If IPv6 is not supported, use the provider’s recommended protection rather than switching off IPv6 across the dorm network.
4. Check extension access in that browser. Make sure the VPN extension is enabled in the profile you are using. If you test in a private window, confirm the extension is allowed there too. Browser profiles and private windows can have separate extension settings.
5. Reconnect after signing in to dorm Wi-Fi. Some dorm networks require a web sign-in before normal internet access works. Complete the network sign-in first, then reconnect the VPN and rerun the test. Do not enter your VPN password into an unfamiliar dorm sign-in page.
6. Update and retest. Update the browser and VPN app or extension, reconnect, and repeat the test in both browsers. If the same address still appears only in one browser, contact the VPN provider with the browser name, operating system, and whether the result was IPv6 or WebRTC.

Why the shared network matters

A dorm network can provide internet access through shared routers, sign-in pages, and network policies that you do not control. Those conditions can change which network features are available, but a shared network alone does not prove that a VPN is leaking. The useful clue is whether an address outside the VPN appears while the tunnel is active, and whether the same thing happens in another browser under the same conditions.

A VPN leak check is a browser-level check, not a full security audit. It does not confirm that every app, background service, or DNS request uses the VPN, and it cannot show whether a dorm administrator can see traffic metadata. If your school requires a particular VPN setup, ask its IT staff before changing network or IPv6 settings.