How to Verify Your VPN Is Actually Working Before You Trust It

A VPN's app saying "Connected" doesn't prove your traffic is protected. These five checks take about ten minutes and show whether your real IP address or browsing is leaking.

1. Check your visible IP address

1. With the VPN off, search "what is my IP" and note the address and location.
2. Turn the VPN on and check again.
3. You should see a different address, in the VPN server's location. If you see your own, the VPN isn't routing your traffic.

2. Test for DNS leaks

Your device asks DNS servers to look up every site you visit. If those requests go to your internet provider instead of the VPN, your provider can see the sites you visit. Run a DNS leak test with the VPN on: the servers listed should belong to the VPN or its chosen provider, not your ISP. See how to run a DNS leak test.

3. Test for WebRTC leaks

WebRTC, used for video calls in browsers, can reveal your real IP address to websites even with a VPN on. Run a WebRTC leak test in Chrome. If your real address appears, WebRTC Privacy Shield stops WebRTC exposing it, using Chrome's own privacy setting. See why WebRTC leaks bypass VPNs.

4. Check IPv6

Some VPNs only protect IPv4 traffic. If your connection also has IPv6, sites that support it may see your real IPv6 address. Leak test sites show IPv6 results too; if yours appears, turn on the VPN's IPv6 protection or disable IPv6. See IPv4 vs IPv6 leaks.

5. Test the kill switch

A kill switch blocks internet access if the VPN drops, so nothing leaks. To test it, turn it on, start a download or video, then disconnect the VPN by switching servers or turning Wi-Fi off and on. Traffic should stop until the VPN reconnects. See kill switches explained.

Repeat after changes

Run the checks again after VPN app updates, on new networks and on each device. Browser extension VPNs only cover the browser, not other apps.

What a working VPN still doesn't hide

• Your activity from the VPN company itself. See checking no-log claims.
• Who you are on sites you sign in to.
• Browser fingerprinting and cookies, which identify your browser whatever your IP.
• Malware and phishing.

For one place to run several tests, see free VPN leak tests.