Is My VPN Working? How to Test It in 5 Minutes

A VPN app that says “Connected” is not proof that your traffic is protected. Leaks are common, and you can check for most of them in about five minutes with free tools. Here are the tests, in order.

1. Check that your IP address and location changed

Open our IP checker with the VPN off and note your address, city and network. Connect the VPN and reload. All three should change, and the location should match the server you picked. If nothing changed, the VPN is not routing your traffic.

2. Check the IPv6 line

Many VPNs only tunnel IPv4. If your device also has IPv6, websites can still reach you through it. On the home page, the IPv6 line should say “Not detected” or show an address that belongs to the VPN. If it shows your real provider's IPv6 address, turn on IPv6 protection in your VPN app or disable IPv6. Background: IPv4 vs IPv6.

3. Run the WebRTC leak test

Browsers can reveal your real address through WebRTC even when a VPN is on. Run our WebRTC leak test. If it reports a public address that differs from the one websites see, you have a leak. Read how WebRTC leaks work and how to fix them.

4. Run a DNS leak test

A DNS leak sends your website lookups to your internet provider instead of the VPN, which reveals the sites you visit. We do not offer a DNS leak test, because it needs a special server that logs which resolver asked. Use a dedicated DNS leak test from your VPN provider or another trusted site, run the extended test and check that the resolvers listed belong to the VPN and not to your ISP. You can find out who owns an address with the IP lookup.

5. Check your time zone and language

Websites can read your browser's time zone and language, which do not change when you connect a VPN. If your IP says Amsterdam but your time zone says Asia/Kolkata, the mismatch gives you away. Open the browser info page to see what you are sharing, and use a browser with fingerprinting protection if this matters to you.

6. Test the kill switch

A kill switch blocks your internet if the VPN drops. To test it, start a continuous ping to any address, then turn off the VPN's connection or switch servers. With a working kill switch, the pings should stop instead of carrying on over your normal connection. Do this only on your own device.

See how your VPN address looks to websites

Run the VPN checker and IP reputation test on your connection. A VPN address normally shows as a hosting network, which is expected. Some sites treat these networks with extra suspicion, so you may see more captchas. If your address is on a blocklist, switch to another server. See is your IP address blacklisted?

If a test fails

• Update the VPN app and switch to a modern protocol such as WireGuard.
• Turn on the app's kill switch, DNS leak protection and IPv6 protection.
• Restart the browser and test again.
• If the leak continues, try another provider. Our guide how to hide your IP address compares the alternatives.