Is your VPN leaking?
Two live checks run in your browser right now: your public IP address and WebRTC. DNS leaks are explained below, not tested.
Running checks
- IP address
- Testing
- WebRTC
- Testing
- DNS
- Not testedSee About DNS leaks below.
Check 1: IP address
- IP address
- Location
- ISP
- ASN
We couldn't look up your IP address. Check that you're online, then try again.
Note this IP with your VPN off, then turn the VPN on and reload. The address and ISP should change to your VPN's. If the ISP shown still matches your real internet provider while the VPN says it's connected, your traffic is leaking outside the tunnel.
Check 2: WebRTC
Testing WebRTC
WebRTC lets browsers make direct connections for calls and file sharing. To do that, it asks a STUN server which public address your connection uses. If that address differs from the one websites see, a page can learn your real IP even while a VPN is on.
To run this check, your browser contacts Cloudflare's STUN server (stun.cloudflare.com). Cloudflare already hosts this site, so no new company sees your IP address. The result stays in your browser and is never sent to MyIPSpot.
Guidance, not a test
About DNS leaks
We don't run a DNS leak test. A real one has to watch which DNS servers look up a special domain, which means logging those lookups on our side. That would break our promise that your IP is detected, not stored.
Every time you visit a site, your device asks a DNS server to turn its name into an address. With a VPN on, those lookups should go through the tunnel to your VPN's DNS servers. A DNS leak is when they go to your internet provider instead, which lets the provider see every site you visit even though the traffic itself is encrypted.
Check 1 is a rough signal, not proof. If it shows your real internet provider while the VPN says it's connected, nothing is going through the tunnel, DNS included. If it shows your VPN provider, your traffic is tunneled, but DNS can still leak on its own, so apply these fixes anyway.
-
Use your VPN provider's DNS servers
Turn on your VPN app's DNS leak protection, and don't override it with a custom DNS server in your router or operating system.
-
Turn on the kill switch
It blocks all traffic, DNS lookups included, whenever the VPN connection drops.
-
On Windows, turn off Smart Multi-Homed Name Resolution and Teredo
The first sends lookups to every network adapter at once. Teredo can carry IPv6 traffic around the tunnel. Many VPN apps handle both for you, so check their settings first.