Running three checks in your browser...

What this test checks

1. IP address

Fetches your public IP from our server. If you are connected to a VPN, this should show the VPN server's IP, not your home IP. We also show your city, country, and ISP so you can confirm which network your traffic appears to exit from. Learn more about what an IP address reveals.

2. WebRTC leak

Uses your browser's WebRTC API to discover what IP addresses it knows about. A leak exists if WebRTC finds a public IP that differs from the one your VPN presents to the world. This bypasses your VPN tunnel and can expose your home IP to websites running WebRTC code. Full details at our WebRTC leak test.

3. IPv6 exposure

Many connections have both an IPv4 and an IPv6 address. Most VPNs only tunnel IPv4 traffic, leaving IPv6 exposed outside the tunnel. If you have a public IPv6 address, websites can see it even when your IPv4 traffic goes through the VPN. Full details at our IPv6 leak test.

What is a VPN leak?

A VPN leak happens when some of your internet traffic bypasses the VPN tunnel, even though you are connected. The result is that your real IP address, DNS requests, or other identifying information reaches its destination without the protection the VPN is supposed to provide.

Leaks are often silent. Your VPN app shows a connected status, your browsing appears to work normally, and you have no indication that anything is wrong. The only way to know for certain is to run a test like this one.

There are three main types of leaks, and they happen for different reasons:

IP leaks

Your real public IPv4 address is visible instead of your VPN server's IP. This happens when the VPN tunnel drops without a kill switch in place, when split tunneling is misconfigured, or when the VPN client fails to establish a proper tunnel but reports success anyway. Read our kill switch guide.

WebRTC leaks

Your browser's WebRTC API exposes your real IP directly to websites, bypassing the VPN tunnel entirely. This is a browser-level issue rather than a VPN tunnel failure. The VPN is routing your traffic correctly, but WebRTC operates at a layer the VPN cannot always intercept. Read our WebRTC leaks guide.

IPv6 leaks

Your public IPv6 address reaches websites outside the VPN tunnel because most VPNs only handle IPv4. Websites that support IPv6 can see your real IPv6 address and use it to identify your ISP and location, even when all your IPv4 traffic goes through the VPN. Read our IPv6 and VPN guide.

Why VPN leaks happen

VPNs operate at different layers of the network stack, and leaks occur when something bypasses the layer the VPN controls. Understanding why helps you fix the right thing.

Tunnel drops without a kill switch

When a VPN tunnel drops, even briefly, your device falls back to its direct internet connection. If your VPN client does not have a kill switch that blocks all traffic when the tunnel is down, your real IP is exposed for the duration of the outage. A kill switch is one of the most important settings to enable. See our kill switch guide for how to use it.

Split tunneling misconfiguration

Split tunneling lets you route some traffic through the VPN and some directly. If configured incorrectly, apps or sites you intended to protect may end up going outside the tunnel. Always verify split tunnel settings with a test like this one. Read our split tunneling guide.

IPv6 not handled by the VPN

Most VPNs route only IPv4 traffic. If your connection has an IPv6 address, that traffic travels outside the tunnel to its destination. The website sees your real IPv6 address alongside the VPN's IPv4 address. The fix is either to disable IPv6 on your device or use a VPN that tunnels IPv6 as well.

Browser WebRTC bypass

Browsers implement WebRTC at the API level, which sits above the VPN tunnel. When WebRTC gathers ICE candidates, it queries STUN servers directly, and those requests can bypass the tunnel and reveal your real IP to any site that reads the browser's WebRTC API. This requires a browser-level fix.

What to do when you find a leak

IP leak: check your connection and kill switch

If the public IP shown belongs to your home ISP rather than your VPN provider: disconnect and reconnect your VPN, then run the test again. If the problem persists, check that your VPN app's kill switch is enabled. A kill switch blocks all traffic when the tunnel drops so your real IP can never leak during a reconnection. See our kill switch guide.

Also check whether split tunneling is enabled and whether it might be routing the test traffic outside the tunnel. For a more thorough walkthrough, read our guide to testing your VPN connection.

WebRTC leak: fix it at the browser level

In Firefox: go to about:config and set media.peerconnection.enabled to false.

In Chrome, Edge, or Opera: install a WebRTC control extension. In Brave: enable fingerprint protection in the Shield settings. After applying any fix, return here and run the test again. Full instructions are on our dedicated WebRTC leak test page.

IPv6 leak: disable IPv6 or enable VPN-level IPv6 tunneling

If your VPN does not tunnel IPv6, the reliable fix is to disable IPv6 at the OS level.

Windows: Open network adapter properties and uncheck "Internet Protocol Version 6 (TCP/IPv6)".
macOS: System Settings, Network, select your interface, Details, TCP/IP, set IPv6 to "Link-local only".
Linux: Add net.ipv6.conf.all.disable_ipv6 = 1 to /etc/sysctl.conf and run sudo sysctl -p.

How to verify your VPN is working correctly

Running a leak test once is a good start. Running it regularly is better. Here is a simple process that takes less than two minutes:

Disconnect your VPN and run this test. Note your public IP, your ISP, and your location. This is your baseline.
Connect your VPN and run the test again. Your public IP should change to your VPN server's IP. Your ISP and location should reflect the server, not your home.
Check WebRTC. The WebRTC check should show no unexpected public IPs, only the VPN IP or local LAN addresses.
Check IPv6. If no public IPv6 address appears, you are not at risk from an IPv6 leak on this connection.
Test after updates. Run this test again after your VPN app or browser receives a major update, since updates sometimes change network behavior.

For a deeper explanation of each check and what to look for, read our complete guide to testing your VPN connection and our VPN safety guide.

What vpn.now does to protect your connection

Modern VPN protocol

vpn.now uses a single modern VPN protocol across all servers. We chose one protocol and built everything around it rather than maintaining multiple half-implemented options. The protocol uses modern cryptography and has a small, auditable codebase.

Transparent about what we cover

We route your IP traffic through our New York server. WebRTC and IPv6 behavior depend on your browser and device configuration. We publish our full transparency report so you know exactly what we collect and what we do not.

No traffic logging

We never store your browsing activity, DNS queries, or traffic contents. Connection metadata is aggregate-only and purged after 30 days. The transparency page lists every piece of data we keep and why.

Free for everyone

vpn.now is free with unlimited data. No credit card, no trial period, no data cap. See what the free plan includes and create an account in under a minute.

Related tools and guides

WebRTC Leak Test

Dedicated WebRTC check with browser-specific fix instructions.

IPv6 Leak Test

Check whether IPv6 is bypassing your VPN tunnel.

IP Address Lookup

Full details on your current public IP, location, and ISP.

DNS Leak Guide

How DNS leaks work and how to prevent them.

VPN Kill Switch Guide

Why a kill switch matters and how to use it.

Testing Your VPN

A complete process for verifying your VPN works.

Frequently asked questions

Does this test store my IP address?

The IP address check calls our existing API endpoint, which does not log individual IP addresses. See our transparency page for the full list of what we collect. The WebRTC and IPv6 checks run entirely in your browser and never contact our servers at all. Your results exist only in your browser tab.

I am on a VPN and all three checks passed. Does that mean I am completely safe?

It means your IP, WebRTC, and IPv6 all look clean in this browser and on this device. That is a strong result. It does not cover every possible threat, such as DNS leaks outside of WebRTC, or tracking through cookies and browser fingerprinting. For the most complete picture, also read our guide on VPN tracking and our article on browser fingerprinting.

My VPN is connected but the IP check shows my home IP. Why?

The most common cause is that the VPN tunnel dropped but the app did not reconnect automatically, and there is no kill switch blocking traffic. Disconnect and reconnect your VPN, then run the test again. If it keeps failing, your VPN client may have a bug with your operating system or network setup. Contact your VPN provider's support.

What is the difference between an IP leak and a DNS leak?

An IP leak means your real public IP is visible to the sites you visit. A DNS leak means your DNS queries, the requests your device makes to look up domain names like "google.com", are sent outside the VPN tunnel to your ISP's DNS server rather than through the tunnel. A DNS leak does not necessarily expose your IP to the sites you visit, but it does expose which sites you are visiting to your ISP. Our DNS leak guide covers this in detail.

Should I run this test on every device I use?

Yes. WebRTC behavior varies by browser and operating system. A fix applied in Firefox on your laptop does not carry over to Chrome on your phone. Run this test once on each device and browser combination you use with your VPN. See our VPN connection testing guide for a systematic approach.

Does vpn.now have a kill switch?

Check the vpn.now app for your platform. Kill switch availability and behavior can vary by operating system. Our apps page lists what is available on each platform. For questions about specific features, contact our support team.

Is vpn.now free?

Yes. vpn.now is free for everyone, with unlimited data and no credit card required. You get the same protocol and server access as every other user. See what the free plan includes and create an account in under a minute.

Fix your leaks with vpn.now

vpn.now is free, with unlimited data and no credit card required. Download the app for your device and connect in minutes. Runs on Windows, macOS, Linux, and Android.

Create a free account Download the app

Also check: WebRTC leak test, IPv6 leak test, IP address lookup, what the free plan includes.

VPN Leak Test

All detected addresses