How to test a VPN on a shared office network
Test whether a VPN hides your public IP on office Wi-Fi, and understand what a browser leak check can and cannot reveal.
You are connected to office Wi-Fi, your VPN says it is on, but you want to know what websites can see. A shared network makes that question feel more urgent, because other people and network administrators use the same connection.
Use a browser check to see whether your public IP address is exposed through IPv6 or WebRTC while the VPN is connected. The VPN Leak Test can check those paths, but it cannot certify that your whole device or work network is private.
Test the VPN on office Wi-Fi
- Connect to the office network you want to check. If your workplace has rules about personal VPNs or network tests, follow them or ask IT before continuing.
- With the VPN disconnected, open the VPN Leak Test in the browser you normally use. Note any public IP address or network details shown, if available. On office Wi-Fi, this is usually the office's public internet address, not a unique address assigned to you.
- Connect the VPN and wait for its app to report that the connection is active. Keep using the same browser and office network so the comparison is meaningful.
- Run the test again. Check whether the report identifies an IPv6 or WebRTC leak, and whether any public IP information still matches the non-VPN result. If the test does not show an address, use its leak result rather than guessing from other details.
For a stronger check, repeat the test after disconnecting and reconnecting the VPN. A brief interruption during connection can produce a different result from the steady-state connection.
What the result means
The test does not find an IPv6 or WebRTC leak
This is a good sign for the specific checks the tool performs. It means the test did not find your non-VPN public IP through those routes at that moment. It does not prove that every app uses the VPN, or that your employer cannot monitor a work computer.
The office's public IP still appears
Your browser may be sending some traffic outside the VPN, or the VPN may not have connected fully. Check whether the VPN uses split tunneling, a setting that sends only selected apps or websites through the tunnel. Also check whether you compared the same type of address in both tests.
The report identifies an IPv6 or WebRTC leak
One network path may be exposing an address that does not go through the VPN as expected. WebRTC is a browser feature used by services such as video calls. Its address behavior depends on the browser, the VPN, and the network. A reported leak is a reason to check the VPN configuration and retest, not proof that every website received the address.
The test cannot complete, or the results change
A workplace firewall, VPN policy, browser restriction, or temporary network problem may affect the test. A result that changes can also mean the VPN reconnects or that different traffic routes are in use. Do not treat a failed test page as proof that the VPN is either secure or broken.
How to fix a leak or an unexpected result
- Reconnect the VPN. Disconnect, wait a few seconds, then connect again and wait for the app to confirm the connection. Retest before browsing sensitive sites.
- Check which traffic uses the VPN. In the VPN app, look for split tunneling or app-specific routing. If you need browser traffic to use the VPN, select the browser or use the app's full-tunnel option, if available and allowed by your workplace.
- Review the VPN's leak protections. Check the app's settings or help information for IPv6 handling and WebRTC leak protection. Names and options vary between VPN services, so do not assume a setting exists if you cannot find it.
- Check the connection in your operating system. On Windows 11, open Settings › Network & internet › VPN to review the VPN connection. On macOS, open System Settings › VPN. These screens may not show every setting controlled by a separate VPN app.
- Check the VPN on a phone if that is the device you use. On Android, open Settings › Network & internet › VPN. On iPhone, open Settings › General › VPN & Device Management › VPN. Menu names can vary by phone and management profile. If your employer manages the device, ask IT before changing the configuration.
- Ask your network administrator before changing office settings. A work VPN or managed device may be configured to meet company security rules. Do not disable workplace protections or try to bypass a network restriction to make a personal VPN work.
What the office network can still see
A VPN leak check is not a test of what the office network administrator can see. When you connect to office Wi-Fi, the network can generally see that your device joined, and it can see a connection to the VPN server, along with timing and data volume. A properly working VPN encrypts traffic between your device and the VPN server, but the VPN provider then handles that traffic beyond the tunnel.
Websites you visit may see the VPN server's public IP instead of the office's public IP. That does not hide activity from monitoring software installed on a company-managed computer, or from logging inside a work account. HTTPS also protects the content of a connection between your browser and a website, but does not make the device itself private from its owner or administrator.
Use the result as a check of specific browser address leaks, and follow your workplace's VPN and network policies before using a personal VPN on its shared connection.
