Step 6 of 8 ยท Setting up
Check that your VPN is working
Simple checks for your own connection: that your visible address changed, that DNS and IPv6 do not leak, and that the kill switch really blocks traffic.
Your visible address
Many sites show the IP address they see you connecting from. Use one with the VPN off, note the address and rough location, then turn the VPN on and look again. The address should now belong to the VPN server.
Leaks to look for
| Leak | What it means | Usual fix |
|---|---|---|
| DNS leak | Name lookups go to your network or internet provider instead of through the tunnel | Turn on the app's DNS protection; avoid custom DNS settings that override it |
| IPv6 leak | IPv6 traffic travels outside a VPN that handles only IPv4 | Turn on IPv6 handling in the app, or use a provider that supports IPv6 |
| WebRTC exposure | A browser call feature reveals your real address to a site | Check the browser's privacy settings for WebRTC; keep the browser updated |
| Drop without kill switch | Traffic continues unprotected when the VPN disconnects | Turn on the kill switch and test it, as below |
Leak-test pages run by VPN providers and privacy groups can show these. Treat their results as a hint about your own setup, not as a rating of any service.
Connection checklist
My VPN is working
0 of 6 done
Terms used here
- IP address
- The numeric address that identifies a connection on the internet. With a VPN on, websites see the VPN server's address instead of yours.
- DNS leak
- When your device sends DNS lookups outside the VPN tunnel while the VPN is on, so your network or internet provider can still see which names you look up.
- IPv6
- The newer version of internet addressing. If a VPN only handles the older IPv4, some traffic can travel outside the tunnel unless IPv6 is handled or turned off.
- WebRTC
- A browser feature for calls and video. In some configurations it can reveal your real IP address to a website even with a VPN on.
- Kill switch
- A setting that blocks internet traffic if the VPN connection drops, so nothing is sent outside the tunnel by accident.