IP Leak Test
An IP leak means your real IP address is visible despite being connected to a VPN. This test checks whether your VPN is successfully masking your IPv4 and IPv6 addresses, or whether your real location and identity are exposed.
Connect your VPN, then run the test below. Results appear in about 10 seconds.
Is Your VPN Actually Working?
Most VPN leak tests only check your IP. We test 3 attack vectors.
Free · No signup · Works instantly
Detecting your IP address...
IP Address
IPv6 Address
Location
Network Provider
Technical Details
What this test cannot detect
- Whether your VPN provider logs traffic
- Leaks from apps outside your browser
- VPN speed or server performance
- Malware or tracking in your VPN app
Scan this QR code to test your phone's VPN
Test could not complete
Something went wrong. Please check your internet connection and try again.
What Is an IP Leak?
Your IP address is a unique number assigned to your device by your internet provider. It reveals your approximate physical location (often down to the city level), your ISP’s name, and can be used to track your activity across websites. A VPN works by replacing your real IP address with one from the VPN server – so websites see the VPN’s IP instead of yours.
An IP leak happens when your real IP address is visible despite an active VPN connection. This defeats the core purpose of using a VPN, because any website, tracker, or network observer can see exactly who and where you are.
IPv4 vs IPv6 Leaks
Most internet connections use IPv4 addresses (like 203.0.113.45). But the internet is gradually transitioning to IPv6, a newer protocol with a much larger address space (addresses look like 2001:0db8:85a3::8a2e:0370:7334).
Many VPNs handle IPv4 traffic perfectly but don’t route IPv6 traffic through the tunnel at all. If your ISP assigns you an IPv6 address and your VPN ignores it, websites that support IPv6 can see your real IPv6 address – even though your IPv4 address shows the VPN server.
This is why our test checks both protocols separately.
Types of IP Leaks
| Leak Type | What’s Exposed | How It Happens |
|---|---|---|
| IPv4 leak | Your real public IPv4 address | VPN tunnel drops (no kill switch), split tunneling misconfigured, or VPN not connected to your active network adapter |
| IPv6 leak | Your real IPv6 address | VPN doesn’t handle IPv6 traffic – it passes through your ISP directly |
| WebRTC leak | Your real IP via browser API | WebRTC STUN requests bypass the VPN tunnel at browser level. Test this separately with our WebRTC leak test |
| DNS-based IP exposure | Your ISP identity (not IP directly) | DNS requests leak to ISP servers, revealing your provider. Test this with our DNS leak test |
| Torrent IP leak | Your real IP to torrent peers | Torrent client binds to a non-VPN network interface, or uses UDP when VPN only tunnels TCP |
How to Prevent IP Leaks
1. Enable the Kill Switch
The single most important setting. A kill switch blocks all internet traffic the moment your VPN connection drops. Without it, every brief disconnection exposes your real IP – and VPN connections drop more often than you’d think (Wi-Fi handoffs, sleep/wake cycles, server switches).
2. Disable IPv6 or Use a VPN That Supports It
Check your VPN’s documentation for IPv6 support. If it doesn’t support IPv6:
- Windows: Network adapter properties > uncheck “Internet Protocol Version 6 (TCP/IPv6)”
- macOS: System Settings > Network > select your adapter > Details > TCP/IP > Configure IPv6: Link-Local Only
- Linux: Add
net.ipv6.conf.all.disable_ipv6 = 1to/etc/sysctl.conf
3. Check Split Tunneling Settings
Split tunneling lets some apps bypass the VPN. If your browser is in the “bypass” list, every website sees your real IP. Check your VPN’s split tunneling settings and make sure your browser is routed through the tunnel.
4. Verify After Connecting
Run this IP leak test every time you connect to a new VPN server or switch networks. VPN behavior can vary between servers, protocols, and network types (Wi-Fi vs mobile data).
How This Test Works
Our test detects your IP address using server-side detection (reading the IP your connection comes from) combined with a secondary check through a STUN-based IP discovery service. We identify both your IPv4 and IPv6 addresses if present.
We then analyze the ASN (Autonomous System Number) associated with each detected IP. If the ASN belongs to a known VPN provider or datacenter, your IP is likely hidden behind a VPN. If it belongs to a consumer ISP, you may not be connected to a VPN – or your VPN is leaking.
For full details on our testing methodology, see our methodology page.
Frequently Asked Questions
The test shows a VPN IP but the wrong country. Is that a leak?
No. If the IP belongs to your VPN provider’s network, your real IP is hidden regardless of which country the VPN server is in. The displayed country is the VPN server’s location, not yours. If you need a specific country, switch to a server in that country in your VPN app.
The test shows “neutral” instead of “pass.” What does that mean?
We found an IP address but couldn’t confirm whether it belongs to a VPN or an ISP. This can happen with smaller VPN providers whose ASN isn’t in our database, or with VPNs that use shared hosting infrastructure. Check the Network Provider card – if it shows your home ISP’s name, your VPN may not be working.
I see both an IPv4 and IPv6 address. Is that bad?
Not necessarily. If both addresses belong to your VPN provider, you’re fully protected. The concern is when your IPv4 shows the VPN but your IPv6 shows your real ISP – that’s an IPv6 leak. Our test flags this automatically.
Does this test work on mobile?
Yes. The test works in any browser on any device. Test your mobile VPN separately from your desktop VPN – they’re independent connections and can have different leak behavior. Mobile networks also switch between Wi-Fi and cellular, which can cause brief VPN disconnections.
Related Tests
Your IP address is just one piece of the puzzle. For a complete privacy check, also run:
- Full VPN Leak Test – checks IP, DNS, and WebRTC in one pass
- DNS Leak Test – detects DNS queries leaking outside your VPN tunnel
- WebRTC Leak Test – detects browser-level IP leaks that bypass VPN tunnels
Myth: If a VPN is based in a privacy-friendly country, your data is safe. Reality: Jurisdiction matters, but a bad provider in Panama is worse than a good one in the US.