How to check if your VPN is working (leak test)
A VPN only helps if it is genuinely hiding your IP and DNS. Here is a 60-second check.
- Note your real IP. Before connecting, search “what is my IP” and note the address and location.
- Connect your VPN. Choose any server and connect.
- Recheck your IP. It should now show the VPN server’s location, not your own.
- Run a DNS leak test. Use a DNS-leak-test site; it should show the VPN’s DNS, not your ISP’s.
- Check for WebRTC leaks. Especially in browsers — a WebRTC test should not reveal your real IP.
If your real IP or ISP DNS still shows, turn on the kill switch and reconnect.
What a leak test checks
A VPN can be “connected” and still leak. Three things can give you away: your real IP address (if the tunnel drops), your DNS requests (which can route outside the VPN), and WebRTC in your browser (which can expose your local IP). A proper check confirms none of these reveal your true location.
How to run the checks
- With the VPN off, search “what is my IP” and note your real IP and country.
- Connect the VPN and reload the page — the IP and country should now be the server’s, not yours.
- Run a “DNS leak test” and confirm the DNS servers shown belong to your VPN, not your ISP.
- Check a WebRTC leak-test site; if your real IP appears, disable WebRTC or use the VPN’s browser protection.
If it is leaking
Turn on the kill switch, enable the VPN’s built-in DNS and leak protection, update the app, or switch protocol (WireGuard/NordLynx or Lightway are solid defaults). A quality audited VPN should pass every test — if yours consistently leaks, consider switching.
FAQ
How do I know my VPN is actually working?
Your public IP and country should change to the server you chose, and DNS and WebRTC tests should show no trace of your real details. If all three pass, it is working.
What is a DNS leak?
It is when your device sends DNS lookups outside the VPN tunnel — usually to your ISP — which can reveal the sites you visit even while you appear connected.