MyIPScan
Unified privacy diagnostics

VPN Leak Test: Check Visible IP, DNS, WebRTC and IPv6 Signals

Check visible IP, DNS, WebRTC, IPv6, and browser/session signals in one local report for your current browser and network context.

This is an exposure estimate, not a VPN provider certification. It does not test every server, app, device, browser, or network, and a low-review result is still only a browser/session snapshot.

Check DNS Leaks
Verdict first Safe receipt Details below

VPN reconnect wizard

Before, connect VPN, re-test, save a safe receipt.

Capture the current browser/session result, connect or change your VPN manually, then re-run the same checks to see what changed.

1. BeforeRun the test and save this result.
2. Connect VPNSwitch server, reconnect, or change network.
3. Re-testRun the same checks again in this tab.
4. What changedCompare IP, DNS, WebRTC, IPv6, and estimate.
5. Safe receiptCopy a reduced receipt without raw IPs or candidates.

Run the test once, then save the before snapshot.

Exposure estimate and receipt limits

A higher exposure estimate means more visible browser/session signals may need review. Safe Copy exports use safe summary categories and remove raw IP, exact city, full user-agent, raw fingerprint data, raw resolver IPs, and WebRTC candidates. Read the methodology.

See what Safe Copy includes before sharing or saving a result.

Want the full picture? Run the Privacy Exposure Report.

Combine IP, WebRTC, IPv6, DNS leak, fingerprint, user-agent, and related privacy signals in one report.

Run report

Checks

Diagnostic Signals

Each card runs in your browser and updates independently. If a network request, browser API, or permission path cannot run, the result is marked Inconclusive.

Not tested

Current public IP

Shows the IP address and approximate network details returned by MyIPScan's same-site IP endpoint.

Public IP
Not tested
Network
Not tested
Location
Not tested
Open IP checker
Not tested

DNS leak status

Compares public resolver signals from Cloudflare and Google DoH checks.

Resolvers
Not tested
Signal
Not tested
Open DNS leak test
Not tested

WebRTC exposure

Looks for public IP candidates exposed through WebRTC ICE gathering.

Candidates
Not tested
Signal
Not tested
Open WebRTC leak test
Not tested

IPv6 exposure

Checks whether the current IP endpoint or WebRTC candidates reveal global IPv6 details.

IPv6 observed
Not tested
Signal
Not tested
Open IPv6 leak test
Not tested

Browser fingerprint warning

Summarizes visible browser attributes that a VPN usually does not change.

Browser
Not tested
Signals
Not tested
Open browser fingerprint test
Not tested

Local privacy report

Combines the observed signals into a browser-generated report you can copy for troubleshooting.

Generated
Not tested
Stored
Generated locally in browser.

Next steps

Confirm results with the dedicated tools

Use this unified report as a quick pass, then open the individual tools for deeper output and troubleshooting notes.

Guides

Related privacy guides

These existing MyIPScan guides explain the signals behind the report and common ways to reduce exposure.

Before / after privacy flow

Compare one browser or VPN change at a time

This page is focused on visible IP, DNS, WebRTC, IPv6, and browser/session signals. Run the focused VPN Leak Test first, then use Public Exposure Report for the combined route map. Results are visible browser/session signals, not a certification.

1. BaselineRun the focused check before changing VPN, DNS, browser, profile, or network settings.
2. Change one thingConnect or switch VPN, change Secure DNS, adjust WebRTC/fingerprint settings, or move networks.
3. RetestRun the same check again in the same browser/session when possible.
4. CompareReview changed and unchanged IP route, DNS, WebRTC, IPv6, fingerprint, and User-Agent signals.
5. Safe receiptUse Safe Copy or the Safe Privacy Receipt instead of sharing raw identifiers.

Status language

Use conservative result labels

These labels keep the result understandable without implying a VPN, browser, device, or account is safe.

Visible

A browser/session signal was visible and should be compared with what you expected.

Expected

The observed signal appears consistent with the stated route or browser behavior.

Review

The signal may need closer review before relying on this setup for the current session.

Limited

The check ran, but this page cannot cover every app, device route, server, or future connection.

Not detected

The tested signal was not observed in this browser/session.

Not checked

The signal has not run yet or the browser did not provide enough data.

Fix checklist

Where to review settings after a signal needs attention

Settings names change. Treat this as a route to verify, then rerun the focused check and the Public Exposure Report.

ChromeReview Secure DNS, WebRTC policy/extensions, profile state, and site permissions.
EdgeReview Chromium privacy settings, managed policies, Secure DNS, and VPN split tunneling.
FirefoxReview Enhanced Tracking Protection, DNS over HTTPS, and advanced WebRTC preferences when appropriate.
BraveReview Shields, fingerprinting protections, and WebRTC IP handling policy.
SafariReview website permissions, iCloud Private Relay context, and operating-system privacy settings.
iOSRetest after VPN profile, relay, mobile data, or Wi-Fi changes. Browser controls may be limited.
AndroidReview per-app VPN, Private DNS, browser permissions, and Wi-Fi versus mobile data behavior.
WindowsReview VPN adapter DNS, split tunneling, IPv6, browser Secure DNS, and firewall/proxy rules.
macOSReview VPN profile order, DNS settings, iCloud Private Relay context, and browser-specific privacy controls.

VPN Before/After Checklist

Keep the privacy workflow free and receipt-first

This is not a monetized VPN recommendation block. The useful conversion path is a safe checklist and receipt for users who need repeatable troubleshooting.

BaselineRun the check before changing VPN, DNS, browser, profile, or network settings.
Connect and retestChange one thing, then run the same checks again in the same browser/session.
Compare visible signalsReview IP route, DNS, WebRTC, IPv6, browser fingerprint, and status labels.
Copy safe receiptShare reduced categories and next steps instead of raw identifiers.

One-time scans are free. Monitoring beta is optional, requires approved public targets, and does not mean public signup, automatic alerts, billing, or dashboards are live. See How We Make Money and the Affiliate Disclosure.

Check my VPN

What this checks

Visible browser-session signals that should be reviewed together: public IP route, DNS resolver owner, WebRTC candidates, IPv6 visibility, and browser fingerprint summary.

Limits

What this cannot check

It cannot inspect every app, VPN server, device route, account risk system, browser profile, network policy, or future connection.

Read results

How to interpret results

A good result means the visible IP, DNS, WebRTC, and IPv6 signals align with the route you expected, and no unexpected non-VPN route appears in this browser session.

Warnings

What a warning means

A warning means one visible signal may not match your expected route. It is a reason to review settings, not proof that the VPN, device, or account is unsafe.

Fix path

What to do next

Change one setting at a time, such as VPN server, Secure DNS, IPv6, WebRTC, or browser profile, then run the same test again for comparison.

Retest

When to retest

Retest after reconnecting the VPN, switching networks, changing DNS, updating browser privacy settings, or moving between normal and private profiles.