On this page
Key takeaways
- The quickest VPN test is comparing your public IP address before and after connecting: it should change to the VPN server’s address.
- A DNS leak test passes when no DNS servers run by your internet provider appear while the VPN is connected.
- WebRTC and IPv6 leaks can expose your real IP address even while the VPN app shows it is connected.
- A kill switch, offered by some VPN apps, blocks internet traffic when the tunnel drops so your real IP address isn’t exposed.
- Re-test your VPN after app or system updates, on new networks and when you travel.
“Is my VPN working?” is a fair question even when the app says you’re connected. A green icon can’t tell you whether some of your traffic is quietly slipping around the encrypted tunnel.
Here’s how to check if your VPN is working: compare your IP address with the VPN off and on, then run DNS, WebRTC and IPv6 leak tests and see what happens when the connection drops. If your real IP address and your internet provider’s DNS servers never show up, the VPN is doing its job.
This checklist takes about ten minutes, needs nothing but a web browser and works with any VPN on any device.
How to check if your VPN is working: 5 tests
Run the tests in order, in the browser you normally use and with any other VPN or proxy apps closed. Each takes a minute or two. Tests 2 to 4 are VPN leak tests, which look for traffic that escapes the tunnel even while the VPN is connected.
1. Compare your IP address before and after connecting
This is the most basic VPN test: if your IP address doesn’t change, nothing else matters.
- Disconnect from your VPN.
- Search for “what is my IP address” and note the address, location and ISP name shown.
- Connect to your VPN and check again.
Pass: you see a different IP address, usually in or near the location you chose, and the ISP name is no longer your internet provider. VPN servers often show up under a hosting or data center company. Fail: your original IP address appears, which means your traffic isn’t going through the VPN.
Don’t worry if the location is a little off: IP location databases are imperfect and sometimes misplace VPN servers. What matters is that your own address is gone. Our guide on how to hide your IP address covers other methods.
2. Run a DNS leak test
DNS (Domain Name System) works like the internet’s phone book: each time you visit a site, your device asks a DNS server for its numeric address. If those requests skip the VPN tunnel, your internet provider can see every site you look up, even though the rest of your traffic is encrypted. That’s a DNS leak.
- Connect to your VPN.
- Search for “DNS leak test” and open a free testing site.
- Use the extended test if one is offered; more lookups give a more reliable result.
Pass: the DNS servers listed belong to your VPN provider or a DNS service it uses, not your ISP. Fail: you see servers run by your own internet provider. Our guide explains what a DNS leak is and how to fix one.
3. Run a WebRTC leak test
WebRTC (Web Real-Time Communication) is built into modern browsers so video calls and voice chats work without plugins. To connect people directly, it can discover your device’s IP addresses, and in some setups a website can read your real public IP through it, even with a VPN connected.
- Connect to your VPN.
- Search for “WebRTC leak test” and run one.
Pass: any public IP address shown belongs to your VPN. Private addresses such as 192.168.1.20 or 10.0.0.5, and random strings ending in .local, are internal to your network and don’t count as a leak. Fail: your real public IP address appears.
If you fail, check your browser’s privacy settings for an option to limit WebRTC, or use a reputable extension that blocks it, though that may break in-browser calls.
4. Check for IPv6 leaks
IPv6 is the newer, longer IP address format (for example, 2001:db8::1). Many ISPs and mobile carriers now give devices an IPv6 address alongside the older IPv4 one. If your VPN only routes IPv4 traffic, IPv6 traffic can travel outside the tunnel and reveal your real IPv6 address.
- With the VPN off, check whether your IP results show an IPv6 address. If none appears, your current network probably doesn’t use IPv6, and you can skip this test on it.
- Connect the VPN and check again, or search for “IPv6 leak test”.
Pass: no IPv6 address appears, or the one shown belongs to your VPN. Fail: the IPv6 address you noted with the VPN off still shows up.
To fix it, look for an IPv6 option in your VPN app’s settings, update the app or ask the provider whether it supports IPv6. As a last resort, you can turn off IPv6 in your device’s network settings, but some networks depend on it, so undo the change if your connection stops working.
5. See what happens when the connection drops
VPN connections drop now and then: when you switch networks, when your device wakes from sleep or when Wi-Fi cuts out for a moment. While the app reconnects, your device may send traffic over your regular connection, exposing your real IP address.
Some VPN apps offer a kill switch, a setting that blocks internet traffic whenever the tunnel is down. Android also has a system-level option called Block connections without VPN in its VPN settings. To test your setup:
- Connect the VPN and open an IP-checking page.
- Simulate a drop by switching networks, for example from Wi-Fi to your phone’s hotspot, or by turning Wi-Fi off and back on.
- As soon as the connection returns, refresh the IP page repeatedly while the VPN app reconnects.
Pass: pages don’t load until the VPN is back, then show the VPN’s IP address. Fail: your real IP address appears, even briefly. If your app has a kill switch or a similar setting, turn it on and test again. If it doesn’t, wait for the app to show it’s connected before resuming anything sensitive.
Bonus: check your VPN speed
A VPN that works but crawls isn’t much use. Speeds vary from minute to minute, so compare several runs:
- Disconnect the VPN, search for “internet speed test” and run it three times. Note the download speed, upload speed and ping (the delay, in milliseconds).
- Connect the VPN and run the same test three more times.
- Compare the averages.
Some slowdown is normal, because encryption adds overhead and your data travels farther. A big drop usually points to a distant or busy server or an older protocol, so try a closer location first. Our guide to whether a VPN slows down your internet covers more fixes.
Your VPN test results at a glance
| Test | What a pass looks like | What a fail means | What to do |
|---|---|---|---|
| IP address check | A new IP address and location | Traffic isn’t going through the VPN | Reconnect, try another server or reinstall the app |
| DNS leak test | No DNS servers from your ISP | Your ISP can see the sites you look up | Reconnect, try another protocol, check the app’s DNS settings |
| WebRTC leak test | Only the VPN’s public IP, or none | Your browser exposes your real IP | Limit WebRTC in browser settings or with an extension |
| IPv6 leak check | No IPv6 address, or the VPN’s | IPv6 traffic bypasses the tunnel | Check the app’s IPv6 setting, or disable IPv6 |
| Connection drop test | Pages stop loading until the VPN reconnects | Your real IP leaks during reconnects | Turn on a kill switch if your app has one |
| Speed check | A modest slowdown | A distant or busy server, or an older protocol | Try a closer location or another protocol |
What to do if your VPN fails a test
Work through these fixes in order, re-running the failed test after each one:
- Disconnect, reconnect and restart your device.
- Update the VPN app, your browser and your operating system.
- Switch to a different server or protocol in the app’s settings.
- Turn off other VPNs, proxies and security tools that might be routing traffic.
- Use the VPN’s device app rather than a browser extension, which only protects browser traffic.
- Contact the provider’s support team and share your test results.
If leaks persist after all that, consider switching services. Our checklist for spotting a trustworthy free VPN explains what to look for.
How often should you test your VPN?
You don’t need to test every day, but re-run the checklist whenever something changes:
- After you install or update your VPN app, browser or operating system.
- When you join a new network, like hotel, office or airport Wi-Fi.
- When you travel; see our travel cybersecurity tips for other precautions abroad.
- When you add browser extensions or switch browsers.
- When you set up a VPN on a new device; our VPN setup guide covers every major platform.
A quick IP check takes less than a minute, so make checking your VPN connection a habit whenever you join a new network.
The bottom line
Checking your VPN takes about ten minutes: confirm your IP address changes, make sure DNS lookups and your browser aren’t leaking, check IPv6, and see what happens when the connection drops. If everything passes, your VPN is doing its job. If something fails, the fix is usually a setting, an update or a different server.
The same tests work for any VPN, including OqusFreeVPN, which routes your traffic through an encrypted tunnel so websites see the VPN location’s IP address instead of yours. Its free apps for Windows, macOS, Android, iOS and Linux are rolling out in Early Access, and you can follow along on the download page.
Frequently asked questions
Private browsing, 100% free
OqusFreeVPN encrypts your connection in one tap. No account, no credit card, no ads.
Written by the OqusFreeVPN Team
We build OqusFreeVPN, the 100% free VPN — no ads, no credit card, no premium tier. Our guides explain online privacy in plain English, including the limits of what any VPN can do.
Why OqusFreeVPN is free