VPN leak test: is my VPN working?

Check whether your VPN is hiding your real IP address. This test compares the IP websites see with addresses your browser exposes through WebRTC. Run it once with the VPN off and once with it on.

How this VPN test works

1. IP check. The address above is the one our server received. With a working VPN it should belong to the VPN provider or a hosting/datacentre network, and the country should match the server you chose — not your home ISP. If you see your normal provider (for example Telkom, Vodacom or Afrihost — see SA ISPs), the VPN is not routing your browser traffic.

2. WebRTC leak check. Your browser asks a public STUN server what address it sees, the same way video-call apps do. If that address differs from the one above and belongs to your real ISP, websites can learn your real IP even while the VPN is connected. That is a WebRTC leak. Local addresses are usually hidden by modern browsers (shown as .local names) and are not a problem on their own.

3. IPv6 check. Many VPNs only tunnel IPv4. If your connection has IPv6 and the VPN doesn’t handle it, sites reached over IPv6 see your real address. Compare the result with the IPv6 test while connected.

What about DNS leaks?

A DNS leak is when the names of sites you visit are looked up by your ISP’s DNS server instead of the VPN’s. It doesn’t expose your IP to websites, but it exposes your browsing to your ISP. To reduce the risk: turn on your VPN’s “DNS leak protection” option, avoid setting a custom DNS server on the network adapter while using a VPN, and on Windows make sure the VPN’s kill switch is enabled. In browsers, DNS-over-HTTPS (Settings → Privacy → Use secure DNS) also stops your ISP from reading lookups.

Is my VPN working? Quick checklist

1. The IP above changes when you connect, and the network is your VPN or a datacentre.
2. The WebRTC public IP is either blank or the same VPN address.
3. Your real IPv6 address doesn’t appear on the IPv6 test.
4. The kill switch is on, so traffic stops if the VPN drops.

New to this? Read how to hide your IP address and public vs private IPs.

Frequently asked questions

How do I know if my VPN is working?

Note your IP with the VPN off, then connect and reload this page. The IP, ISP and country should change to the VPN server, and the WebRTC test should not show your real IP.

What is a WebRTC leak?

WebRTC lets browsers make direct audio and video connections. To do that it can discover your network addresses, and a misconfigured VPN or browser may reveal your real public IP to any website through it.

How do I fix a WebRTC leak?

Enable your VPN’s WebRTC or leak protection feature, use the VPN’s browser extension, or turn off WebRTC in browser settings (Firefox: media.peerconnection.enabled in about:config).

What is a DNS leak?

A DNS leak happens when your device sends website lookups to your ISP’s DNS servers instead of the VPN’s, letting the ISP see which sites you visit even though the traffic itself is encrypted.

Why does my VPN show the wrong country?

IP location databases can lag behind when VPN providers move servers. Check that the ISP shown is your VPN provider or a hosting company rather than your home ISP.