VPN leak detected? What to do next

Your VPN is connected, but a browser test says your real IP address may still be visible. That can happen if the VPN does not cover IPv6 traffic, if your browser exposes an address through WebRTC, or if the browser is using a different connection than you expect.

First, confirm what the warning refers to. The VPN Leak Test checks for real IP leaks through IPv6 and WebRTC while your VPN is on. Then use the result to choose a fix, and test again before relying on the connection.

Check the VPN leak

1. Connect to your VPN, then open the VPN Leak Test in the browser you use for the affected site.
2. Wait for the check to finish. Keep the VPN connected and avoid changing networks or VPN servers during the test.
3. Look at whether the test identifies an IPv6 or WebRTC concern. Compare any public IP addresses shown with the VPN connection, but do not post your real IP in a public forum.
4. If the result is unclear, run the check once more in the same browser profile. A browser extension, private window or network switch can change what the browser reports.
5. After changing a setting, reconnect the VPN and repeat the check. A fix is more convincing when the result changes consistently, not just once.

The test checks two specific ways a browser can expose network information. It does not prove that every app or type of traffic on your device is protected. For more background on checking an IP leak, see How to check whether your VPN leaks your IP address.

What the result means

The test identifies your normal public IP

If the address shown matches the one you normally use without the VPN, the VPN may not be protecting this browser connection. Check whether the VPN disconnected, the browser is excluded by split tunneling, or a proxy extension is routing traffic separately. A test can identify the address visible to its service, but it cannot show that every website sees the same result.

The test reports an IPv6 concern

IPv6 is a newer way for devices to communicate over the internet. Some VPNs route IPv4 traffic through the tunnel but do not handle IPv6 correctly, allowing an IPv6 address from your internet provider to appear. Look for IPv6 support or IPv6 leak protection in the VPN app before changing system-wide network settings.

The test reports a WebRTC concern

WebRTC is browser technology used for real-time audio and video, including calls. It can reveal network addresses to a webpage as part of establishing a connection. A private local address, such as one used only inside your home network, is not the same as your public internet address. Focus on whether the result exposes an address that identifies your normal internet connection.

The test does not identify a leak

That is a good sign for the IPv6 and WebRTC checks at that moment, but it is not a guarantee of complete anonymity. The VPN could still disconnect later, another app may use a separate connection, or a different kind of traffic may not be covered by this test.

How to fix a VPN leak

1. Reconnect the VPN. Disconnect, wait a few seconds and connect again. If the VPN app offers multiple servers, try another server, then rerun the test.
2. Check for split tunneling. In the VPN app, look for settings named Split tunneling, Excluded apps or similar. Make sure your browser is not excluded. Settings differ between VPN providers.
3. Turn on leak protection. Check the VPN app for IPv6 leak protection, Block IPv6 or a similar option. Also enable the app's kill switch if available. A kill switch blocks internet access if the VPN connection drops, but it does not fix every leak while connected.
4. Check browser network extensions. Temporarily disable proxy or VPN extensions that might compete with your main VPN app, then test again. A browser extension may cover only browser traffic, while a device VPN can route traffic for more apps.
5. Review IPv6 settings only if needed. Prefer the VPN provider's IPv6 protection. If you must check the operating system setting, Windows 11 has adapter options under Settings › Network & internet › Advanced network settings › More network adapter options. On macOS, open System Settings › Network, choose the active connection and inspect its details for IPv6 options. Menu labels vary by version. Turning IPv6 off globally can disrupt services, so do not make this change unless you understand the tradeoff or your VPN provider recommends it.
6. Restart the browser and retest. Close all browser windows, reconnect the VPN, reopen the browser and run the check again. If the issue remains, update the VPN app and browser, then contact the VPN provider with the test type and general result. Avoid sending your public IP unless support specifically needs it through a private support channel.

Retest when your setup changes

VPN behavior can change after switching Wi-Fi networks, updating the browser, changing privacy settings or connecting to a new VPN server. Run the check again after a change that affects your connection. If you use a browser-only VPN extension, test the same browser where that extension is active, and remember that it may not protect traffic from other apps.

If a repeat test still shows your normal public address while the VPN says it is connected, pause sensitive browsing and contact the VPN provider. A browser check can help identify the symptom, but the VPN provider needs to explain how its app handles IPv6 and WebRTC on your device.