Leak tests: IP, DNS and WebRTC leaks
What each leak test checks, what a failed result means, and how to fix DNS, WebRTC and IPv6 leaks.
Run a test
Open Leak tests in the app, or the public leak test with no account. Run it once with your VPN on and once with it off, so you can compare.
What it checks
- Public IP and IPv6: the addresses sites see.
- DNS: which servers look up the sites you visit.
- WebRTC: whether calls and chats can reveal your IP address.
- Time zone vs IP location, connection encryption, browser fingerprint, Global Privacy Control, site permissions, referrer policy, and what your browser sends.
Fix a DNS leak
Your lookups go to your internet provider instead of your VPN. Turn on your VPN’s “Use VPN DNS” setting. Without a VPN, turn on your browser’s “Use secure DNS” setting and pick a provider.
Fix a WebRTC leak
- Turn on your VPN app’s WebRTC protection, or install the Frame extension.
- Firefox: in about:config, set media.peerconnection.ice.default_address_only to true.
- Brave: in Settings → Privacy and security → WebRTC IP handling policy, choose Disable non-proxied UDP.
Fix an IPv6 leak
Turn on your VPN’s IPv6 protection, or turn IPv6 off on your device while you use the VPN.
After a fix
Choose Run again. Frame Plus keeps your leak-test history; the Free plan keeps your latest saved run only. Turn on Save finished runs automatically so you don’t have to save each run yourself.
Was this guide helpful?
Your answer isn’t stored or sent anywhere.
Still stuck? Contact us or check system status.