The 3-Step VPN Verification Checklist
A properly functioning VPN must pass all three of these tests. Passing one or two isn't enough — each test checks a different aspect of your privacy, and a failure in any one of them means your real identity or browsing activity is being exposed.
Test 1: IP Address Check
What it tests: Whether your real IP address is hidden and replaced with your VPN server's IP address.
How to do it: Visit our IP Checker tool. It will display the IP address that websites see when you visit them.
How to read the results: The IP address shown should match the location of the VPN server you're connected to. If you connected to a server in Germany, you should see a German IP address. If you see your actual home IP address or your real city/ISP, your VPN is not masking your IP correctly.
Common issue: If the IP shows your real location, try disconnecting and reconnecting your VPN. If the problem persists, your VPN may have a broken connection or your traffic might be using split tunneling that excludes your browser.
Test 2: DNS Leak Test
What it tests: Whether your DNS queries (the requests that translate website names into IP addresses) are going through your VPN or leaking to your ISP.
How to do it: Run our DNS Leak Checker on the homepage. It identifies which DNS servers are handling your queries.
How to read the results: The DNS servers listed should belong to your VPN provider — not your ISP. If you see server names containing your ISP's name (like "comcast," "att," "bt," or "vodafone"), your DNS is leaking. Even if your IP test passed, a DNS leak means your ISP can see every website you visit.
Common issue: Windows users often experience DNS leaks due to Smart Multi-Homed Name Resolution, which sends DNS queries through all network adapters simultaneously. See our Windows DNS leak fix for a step-by-step solution.
Test 3: WebRTC Leak Test
What it tests: Whether your browser is exposing your real IP address through WebRTC, a technology used for real-time communication (video calls, file sharing) that can bypass VPN tunnels.
How to do it: Run our WebRTC Leak Test. It checks whether your browser's WebRTC implementation is revealing your real IP address.
How to read the results: If the test shows your real public IP address (the one from Test 1 with VPN disconnected), you have a WebRTC leak. The IP addresses shown should either be your VPN's IP or local/private addresses (starting with 192.168, 10., or 172.16-31).
Common issue: Chrome and Chromium-based browsers are particularly vulnerable to WebRTC leaks. See our Chrome WebRTC fix or Firefox WebRTC fix guides.
Why Your VPN Shows "Connected" But Isn't Protecting You
This is one of the most common — and most dangerous — VPN issues. Your VPN app displays a reassuring "Connected" status, but one or more of the tests above fails. Here's why this happens:
The VPN Tunnel Exists, But Traffic Leaks Around It
A VPN creates an encrypted tunnel for your traffic. But "connected" only means the tunnel exists — it doesn't guarantee that all your traffic goes through it. DNS queries, WebRTC connections, and IPv6 traffic can all take different paths that bypass the tunnel entirely. Your VPN app has no way to detect this because it only monitors its own tunnel.
Split Tunneling Is Excluding Your Browser
Some VPNs offer split tunneling, which lets you choose which applications use the VPN. If your browser isn't included in the tunnel, all your web traffic — DNS queries, IP address, everything — goes through your regular ISP connection. Check your VPN's split tunneling settings and make sure your browser is included.
Your OS Is Overriding VPN DNS Settings
Both Windows and macOS can override VPN DNS settings in certain situations. Windows' Smart Multi-Homed Name Resolution is a common culprit — it queries all available DNS servers simultaneously for speed, which means your ISP's DNS gets queried alongside your VPN's DNS. The result: your VPN is "working," but your browsing history is still visible to your ISP.
The VPN Connection Dropped and Reconnected
VPN connections can momentarily drop due to network instability, switching between Wi-Fi networks, or when your device wakes from sleep. Without a kill switch, all traffic flows unprotected during these gaps. The VPN reconnects quickly, so you never notice — but any DNS queries or connections made during the gap are exposed.
Understanding False Positives in VPN Testing
Before you panic about test results, understand that not every unexpected result means your VPN is broken. Here are common false positives:
- Seeing a third-party DNS (like Cloudflare or Google): This might be normal. Some VPNs use Cloudflare or Google DNS servers through their tunnel. What matters is that you don't see your ISP's DNS servers.
- IP location is wrong but not your real location: GeoIP databases aren't always accurate. If the IP shown is your VPN provider's but the city/country seems wrong, it might just be a database error. The important thing is that it's not your real IP.
- Seeing local/private IP addresses in WebRTC test: Private IP addresses (192.168.x.x, 10.x.x.x) are your local network addresses. These don't reveal your identity to the outside world and are generally harmless.
- DNS test shows a server in a different country than your VPN: Some VPNs use DNS servers in different locations than their VPN servers. As long as the DNS server belongs to your VPN provider (not your ISP), this is normal behavior.
What to Do When Tests Reveal Problems
If any of the three tests failed, here's what to do next based on which test showed a problem:
- IP test failed: Disconnect and reconnect your VPN. Try a different server. Check split tunneling settings. If the problem persists, your VPN may not be establishing a proper tunnel.
- DNS test failed: Enable DNS leak protection in your VPN settings. See our complete DNS leak fix guide for platform-specific instructions.
- WebRTC test failed: Disable WebRTC in your browser or install a WebRTC-blocking extension. Guides: Chrome | Firefox
If multiple tests fail or if your VPN consistently shows leaks despite configuration changes, it may be time to consider a more reliable VPN. Our comparison of VPNs with the best leak protection covers what to look for and which services pass all three tests consistently.