How to Tell If Your VPN Is Actually Protecting Your Connection

The fastest way to check if your VPN is working

Open a web browser and visit whatismyipaddress.com or ipleak.net without your VPN turned on. Write down the IP address shown. Now turn on your VPN, wait 10 seconds for the connection to establish, refresh the page, and look at the IP address again. If the address changed, your VPN is working — the new address belongs to the VPN server, not your actual location.

If the IP address stayed the same, your VPN is not routing your traffic correctly. Close the browser completely, restart your VPN application, wait 15 seconds, and try again. If it still shows the same address, your VPN connection has failed and you should contact your VPN provider's support.

This test works because websites see the IP address of whatever server your traffic comes through. When a VPN is working, that server is the VPN's, not your internet provider's. The test takes 30 seconds and tells you whether the core function — hiding your real IP — is happening.

Key Takeaways

Your IP address should change when you turn on your VPN; check this at whatismyipaddress.com to confirm the VPN is routing traffic.
A working VPN shows a different IP address every time you connect, usually in a different country than where you actually are.
If your IP address does not change after restarting your VPN, the connection has failed and you should not assume your traffic is protected.
DNS leaks and WebRTC leaks can happen even when your IP address changes, so run a second test at ipleak.net to check for these problems.
Your VPN's speed will usually drop noticeably when connected; if your internet feels faster than normal, the VPN may not be active.

Check for DNS leaks, which hide behind a working IP address

A DNS leak is a gap in your VPN's protection that most people miss. Your IP address can be hidden while your DNS requests — the lookups that translate website names into addresses — still leak your real location to your internet provider or other watchers. Visit ipleak.net and scroll to the DNS section. You should see the VPN provider's DNS servers listed, not your internet provider's.

If you see your internet provider's name (Comcast, Verizon, AT&T, or your local provider) in the DNS section, your VPN has a leak. This means websites and your internet provider can still see which sites you visit, even though your IP address is hidden. Go back to your VPN application, look for a settings menu labeled "DNS" or "Network", and enable "DNS leak protection" or "Custom DNS". Then refresh the ipleak.net page to confirm the DNS servers changed.

Some VPN applications do not offer DNS leak protection in their settings. If yours does not, contact the provider's support team and ask whether the application handles DNS leaks automatically. If it does not, that VPN has a significant gap in its protection.

Test for WebRTC leaks if you use Firefox or Chrome

WebRTC is a web technology that can bypass your VPN and expose your real IP address to websites, even when your VPN is working. This happens in Firefox and Chrome but not in Safari or Edge. Visit ipleak.net, scroll down to the WebRTC section, and look at the IP addresses listed under "Your IP addresses from WebRTC".

If you see your real IP address (the one you wrote down before turning on the VPN), you have a WebRTC leak. To fix this in Chrome, open Settings, go to Privacy and Security, scroll to "Site Settings", click "Camera and microphone", and turn off "Allow sites to request access". In Firefox, type about:config in the address bar, search for "media.peerconnection.enabled", and click the toggle to turn it off. Then refresh ipleak.net to confirm the leak is gone.

Some VPN applications include built-in WebRTC leak protection that you can enable in settings instead of disabling it in your browser. Check your VPN's settings menu first before changing browser settings.

Verify your VPN is actually connected before you browse

The most common mistake is forgetting to turn the VPN on before opening your browser. Look at your VPN application window — it should show a large "Connected" button or label, usually in green. If it says "Disconnected" or shows a red icon, your VPN is not active and your traffic is not protected. Click the connect button and wait 10 to 15 seconds for the connection to establish before you open any websites.

Some VPN applications have a "kill switch" setting that blocks all internet traffic if the VPN disconnects unexpectedly. If your internet suddenly stops working, check whether your VPN application shows a disconnection warning. If it does, the kill switch is working as designed — reconnect the VPN and your internet will come back. This is a safety feature, not a problem.

Make it a habit to check the VPN application window before you start browsing. Most VPN applications let you minimize to the system tray (the icons in the bottom right corner of Windows or top right of Mac), so you can keep it visible without taking up screen space.

Understand why your internet speed drops when the VPN is on

A working VPN almost always makes your internet slower because your traffic has to travel through an extra server before reaching its destination. The slowdown depends on how far away the VPN server is, how many people are using it, and your original internet speed. If your internet was 100 Mbps before the VPN, expect 40 to 80 Mbps while connected. If it was 20 Mbps, expect 10 to 15 Mbps.

If your internet speed stays exactly the same or gets faster when you turn on the VPN, the VPN is probably not actually routing your traffic. Run the IP address test again to confirm. Speed tests are available at speedtest.net — run one without the VPN, then run another with the VPN connected to the same server location, and compare the results.

Some VPN providers offer "fast servers" or "optimized servers" that are designed to lose less speed. If your VPN is too slow for what you need, try connecting to a server in your own country or region, which usually has lower latency and faster speeds than distant servers.

Check your VPN logs if a connection keeps dropping

If your VPN disconnects randomly throughout the day, the problem is usually your internet connection, not the VPN. Open your VPN application and look for a "Logs" or "Connection History" section in the settings menu. This shows when the VPN connected and disconnected. If you see a pattern — disconnecting at the same time every day, or every time you use a certain app — that information helps you and the VPN provider figure out what is wrong.

Before contacting support, restart your VPN application completely. Close it entirely (not just minimized), wait 10 seconds, and open it again. If the disconnections continue, take a screenshot of the logs and contact the VPN provider's support team with that information. They can see whether the disconnections are happening on their end or yours.

If your VPN keeps disconnecting, do not assume your traffic was protected during the time it was connected. Reconnect and run the IP address test again to confirm it is working before you browse.

Frequently Asked Questions

What if my IP address changes but I am still in the same country?

That is normal. VPN servers in the same country can have different IP addresses, and your VPN may assign you a different one each time you connect. What matters is that the address changed from your real one. If you want to verify you are actually in a different country, search "what is my location" in your browser — it should show the city where the VPN server is located, not your actual city.

Can I trust the VPN if the IP test passes but the speed test shows no slowdown?

No. If your speed is unchanged, the VPN is likely not routing your traffic even though the IP address changed. This can happen if your VPN application has a bug or if you are using a free VPN service with serious problems. Run the DNS leak test at ipleak.net to see if your real DNS servers are leaking. If they are, your traffic is not protected.

Do I need to run these tests every time I connect?

No. Run them once when you first set up your VPN to confirm it is working correctly. After that, you only need to test again if your VPN starts behaving strangely — disconnecting frequently, running much slower than before, or if you suspect something is wrong. A working VPN stays working until something changes.

What does it mean if ipleak.net shows multiple IP addresses in the WebRTC section?

Multiple addresses can appear if your device has multiple network connections (like WiFi and Ethernet at the same time). Look for your real IP address — the one you wrote down before turning on the VPN. If you see that address in the WebRTC section, you have a leak. If you only see the VPN's IP address, you are protected.

Should I worry if my VPN provider's DNS servers appear in the leak test?

No. That is exactly what should happen. Your VPN provider's DNS servers should be listed, not your internet provider's. If you see your internet provider's DNS servers instead, that is the leak you need to fix.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.