VPN Leak Test
What a website learns the moment you open it: your address, WebRTC exposure, the time zone and your browser fingerprint. The last three do not depend on routing, and they identify a person more reliably than an address does.
The address below may be your real one even with the VPN on — and that is not a leak. Why
This page sits on your VPN provider's own site, and almost every client routes such sites DIRECTLY, around the tunnel — otherwise the dashboard and subscription refresh would stop working whenever the VPN is off. So the address below may well be your real one even with the tunnel up, and that is routing working correctly rather than a leak. To see the tunnel's address, open any third-party “what is my IP” service: if it shows your VPN's country, everything is fine.
Your IP address
What the site you opened can see
WebRTC
Time zone and language
Sent to every site without asking. A Russian locale on a Dutch address is an ordinary and very readable pair.
Browser fingerprint
None of these matter on their own. Their value for tracking comes from the combination: a dozen such details single one browser out of millions.
One quirk trips people up more than any other: VPN clients often exclude their own provider's site from the tunnel, so that the dashboard and subscription refresh keep working when the tunnel is down. This page then sees your real address while everything else goes through the tunnel. Easy to confirm — open any third-party “what is my IP” service and compare.
The check runs in your browser and on our server. We record neither the address nor the result: this page stores nothing and forwards nothing.
What to do about each of these
- DNS leaks — how a tunnel can carry your packets while the questions about them go elsewhere.
- The truth about WebRTC leak tests — why a .local result means the defence is working.
- IPv6 leaks — how a client carrying only IPv4 leaves the sixth version outside the tunnel.
- Browser time zone — the most common mismatch, and the one that identifies your real country.
- Connected but no internet — if the tunnel is up and nothing loads, this is the five-minute diagnosis.
A DNS leak test will come separately: showing which resolver asks about you needs an authoritative server of our own, and we would rather not do that job by halves.
Frequently asked
How do I know my VPN is actually working?
Turn the tunnel on and press “Run again”. The address and country should change — that is the first half. The second matters more: your system time zone stays where it was, and a site comparing the two sees the mismatch. A matching address with a foreign time zone is the most common way people are spotted behind a VPN.
What does “.local” mean in the WebRTC result?
That the browser hid your home address behind a meaningless name. It is a defence working as intended, not a leak. Tools that colour it red are misleading you.
Why is WebRTC not fully tested by default?
A complete test requires an external STUN server, and that server learns your address too. Sending it silently from a privacy page seems wrong to us, so that check sits behind a button that says what it costs.
Why is there no DNS leak test here?
Showing which resolver asks about you needs an authoritative DNS server of our own with single-use subdomains. That is infrastructure rather than markup, and a test that is sometimes wrong about a leak is worse than one that is absent. It will come separately.
Do you store my address or the result?
No. The page writes nothing and sends nothing onward — it shows what any site you open already learns about you.