How to check your VPN for leaks: IP, DNS and WebRTC

June 22, 2026

Even with a VPN on, your real IP address can leak — most often through DNS queries or WebRTC in the browser. Here’s how to check in a couple of minutes.

Step 1. Check your visible IP

Open the My IP tool. If the VPN works, you should see the VPN server’s address and country, not your home ones. If your real city and ISP show up, the VPN isn’t active or isn’t routing traffic.

Step 2. Check for a WebRTC leak

WebRTC is a browser technology for calls. It can request your real IP directly, bypassing the tunnel. Run the WebRTC leak test. If a public IP different from the VPN address appears in the results, that’s a leak.

Step 3. Check DNS

DNS turns domain names into IP addresses. If queries go to your provider’s servers instead of through the tunnel, your ISP sees which sites you open. A good VPN sends DNS through the tunnel.

How to fix leaks

Enable the kill switch — it blocks traffic if the tunnel drops.
Use a VPN with DNS and WebRTC leak protection.
On WireGuard on Windows, make sure DNS is set by the tunnel.

In GANVAS VPN all three protections are on: kill switch, DNS-leak protection (including for your own WireGuard configs) and routing DNS through the tunnel.