VPN leak test
A VPN only protects you if every connection goes through it. This test checks your IPv4 address, your IPv6 address and what WebRTC reveals, then tells you whether any of them is getting around the VPN. Run it once with the VPN off and once with it on.
Leak test results
- IPv4 address
- Testing…
- IPv6 address
- Testing…
- WebRTC
- Testing…
- Result
- Testing…
No VPN yet, or found a leak? VPN Wave sends all of your iPhone's traffic through an encrypted tunnel. Connect, then run the test again.
How to test your VPN for leaks
- Run the test with the VPN off. Note the country it shows. That's where your real connection points.
- Connect to the VPN. In VPN Wave, pick a server country and connect.
- Run the test again. Tap “Run the test again” or reload the page. Every address should now point to the country you picked.
- Read the result. “No leaks found” means everything goes through the VPN. If any line still shows your country from step 1, that connection is leaking.
What an IPv6 leak is
Most networks now give your device two public addresses: an older IPv4 address and a newer IPv6 one. Websites can reach you over either, and your device picks whichever works best.
If a VPN only tunnels IPv4, your IPv6 traffic leaves the device directly. Sites that load over IPv6 then see your real address and location, even though the VPN app says you're connected.
This test reaches a server that only speaks IPv4 and one that only speaks IPv6, and compares where each address points. If they point to different countries, one of them isn't going through the VPN. If your network has no IPv6 at all, there's nothing to leak.
What a WebRTC leak is
WebRTC powers video calls and voice chat in the browser. To set up a direct connection, it asks a STUN server which public address your device appears from. Any website can run that request in the background, without asking you.
Browser VPN extensions and proxies only redirect ordinary web traffic, so WebRTC requests can go around them and reveal your real IP. A VPN that works at the system level, as VPN Wave does on iPhone, iPad and Mac, sends WebRTC through the tunnel too.
This test runs the same STUN request and compares the result with the addresses above. An address that shows up only in WebRTC is a leak.
What about DNS leaks?
Every time you open a site, your device first asks a DNS server for its address. If those lookups skip the VPN, your internet provider can see which sites you visit, even though it can't see what you do on them.
This page doesn't run a DNS test. A real DNS leak test needs its own DNS servers to see which resolver asked, and a browser can't check that by itself.
On iPhone, the most common cause is a separate DNS profile, such as an ad-blocking or encrypted DNS service. You'll find any installed ones under Settings → General → VPN & Device Management. If you have one installed, it can send lookups outside the VPN.
Found a leak? What to do
Disconnect the VPN, connect again, then rerun the test. Leaks often appear for a moment while the device switches between Wi-Fi and cellular.
Make sure the VPN shows as Connected under Settings → VPN, and that both the app and iOS are up to date.
If the IPv6 or WebRTC line still shows your real country, take a screenshot of the results and contact our support team.
The test runs in your browser. It contacts Cloudflare's IPv4-only and IPv6-only test addresses (ipv4.cloudflare-dns.com and ipv6.cloudflare-dns.com) and Cloudflare's public STUN server. VPN Wave doesn't see or store your results.
VPN leak test questions
How do I know if my VPN is leaking?
Run this test with the VPN connected. If every line points to the country of the VPN server, it isn't leaking. If any line shows your real country, that connection is going around the VPN.
Is a VPN leak dangerous?
A leak reveals your real IP address and rough location to the sites you visit, which is exactly what you use a VPN to hide. Your traffic over that connection also isn't encrypted by the VPN.
Why does the test show an IPv6 address but no IPv4 address, or the other way around?
Your network only offers one of the two. That's normal. A leak only matters when both exist and point to different places.
Can a VPN on iPhone leak through WebRTC?
A VPN app that works at the system level routes WebRTC through the tunnel, like the rest of your traffic. WebRTC leaks are mainly a problem with browser extensions and proxies, which only cover part of the browser's traffic.
Does this test check for DNS leaks?
No. A browser can't see which DNS server answered its lookups, so a proper DNS test needs its own DNS servers. See the DNS section above for the usual cause on iPhone.
Why does the location point to the wrong city?
Locations come from IP geolocation databases, not GPS. They're usually right about the country and often wrong about the city. For a leak test, only the country matters.
Stay Private, Fast & Free
Download VPN Wave for free. Protect your iPhone in seconds.
