How to Check If Your VPN Is Actually Working

How to verify your VPN connection is active and protecting your traffic

A VPN (Virtual Private Network) only protects you if it is actually running and routing your traffic correctly. Many people turn on a VPN and assume it works, but connection drops, leaks, or misconfiguration can leave your real IP address and browsing visible to your internet service provider and websites you visit. You need to check three things: whether the VPN app shows an active connection, whether your real IP address is hidden, and whether your DNS requests are routed through the VPN instead of leaking to your ISP.

The fastest check takes 30 seconds. Open your VPN app and look for a connected status — usually a green indicator, a "Connected" label, or a shield icon. If you see that, your VPN is running. But that alone is not enough. A VPN can appear connected while leaking your real IP address or DNS queries, which defeats the purpose. You need to verify the actual protection with a second step.

Key Takeaways

Check your VPN app for a green "Connected" status or shield icon, but do not stop there — the app can show connected while leaking your real information.
Visit a website like whatismyipaddress.com or ipleak.net to see what IP address websites see; it should be different from your real IP and should match your VPN provider's server location.
Run a DNS leak test on the same site to confirm your DNS queries are going through the VPN, not directly to your ISP.
If your real IP shows up in the leak test, restart the VPN app or switch to a different server location, then test again.
Check your VPN app settings for a kill switch option and turn it on so your internet cuts off if the VPN drops unexpectedly.

Check the VPN app status first

Open your VPN process and look at the main screen. Most VPN apps display a large status indicator — usually a toggle switch, a button, or a colored icon. When the VPN is active, you will see one of these signals: a green color, the word "Connected," a shield icon, or a server location name displayed. If you see "Disconnected," "Off," or a red indicator, the VPN is not running and your traffic is not protected.

Some VPN apps also show connection details on the main screen: the server location you are connected to, your assigned IP address (the one the VPN gives you, not your real one), and how long you have been connected. Write down or screenshot the server location name — you will need it to verify the test results in the next step.

If the app shows disconnected, click the toggle or button to turn it on. Wait 5 to 10 seconds for the connection to establish. The status should change to connected and the app may display a brief animation or notification. If it stays disconnected or shows an error message, try restarting the app or switching to a different server location.

Test your IP address visibility with an IP leak checker

Your real IP address is the most important thing a VPN hides. Websites and your ISP use it to identify you and track your location. To check whether your VPN is hiding it, visit a website that shows you what IP address you appear to have. The most common options are whatismyipaddress.com, ipleak.net, or your VPN provider's own leak test tool (many include one in their app or website).

Open the site in your web browser while the VPN is connected. The page will display an IP address under a heading like "Your IP Address" or "Public IP." Compare this IP to the one your VPN app showed you. They should match — that means the website is seeing the VPN's IP, not your real one. The displayed IP should also be in the same country or region as the VPN server location you noted earlier. If the IP is in a different country than your server, something is wrong with the VPN routing.

If the IP address shown on the leak test site matches your real IP address (you can find your real IP by disconnecting the VPN, visiting the same site, and noting the address), your VPN is leaking. This means websites can see who you really are. Disconnect the VPN, restart the app, and reconnect. Then test again. If the leak persists, try switching to a different server location within the VPN app, wait for the connection to establish, and test a third time.

Run a DNS leak test

Your VPN hides your IP address, but it also needs to hide your DNS queries — the requests your browser sends to look up website addresses. If DNS queries leak, your ISP can see every website you visit even though your IP address is hidden. Most IP leak testing sites include a DNS leak test on the same page as the IP check.

Scroll down on whatismyipaddress.com or ipleak.net and look for a section labeled "DNS Leak Test" or "DNS Servers." The page will list the DNS servers handling your requests. If you see your ISP's DNS server names (they usually contain your ISP's name), your DNS is leaking. If you see your VPN provider's DNS server names or generic names like "1.1.1.1" or "8.8.8.8," your DNS is protected.

If the test shows your ISP's DNS servers, your VPN app may have a setting to force DNS through the VPN. Open your VPN app settings, look for "DNS," "Privacy," or "Advanced" options, and check whether there is a toggle for "DNS over VPN" or "Force VPN DNS." Turn it on if available. Reconnect the VPN and run the DNS leak test again.

Enable the kill switch to prevent leaks if the VPN drops

Even if your VPN is working now, it can disconnect unexpectedly — your internet might drop for a moment, the VPN server might go down, or the app might crash. If the VPN disconnects without warning, your real IP and DNS queries will leak until you notice and reconnect. A kill switch prevents this by cutting off your internet connection if the VPN drops, so nothing leaks.

Open your VPN app settings. Look for an option called "Kill Switch," "Network Lock," "Internet Kill Switch," or "Disconnect on VPN Failure." The exact name varies by provider. Turn this option on. Some VPN apps have it enabled by default; others require you to turn it on manually. Once enabled, if your VPN connection drops, your internet will stop working until the VPN reconnects or you manually turn off the kill switch.

Test the kill switch by disconnecting your internet (unplug your router or turn off Wi-Fi) while the VPN is connected. Your internet should stop when ready. Reconnect your internet. The VPN should reconnect automatically and your internet should come back. If the kill switch is working, you know that even if something goes wrong with the VPN, your real IP will not leak.

Check for connection drops during normal use

A VPN that works perfectly in a test can still disconnect during everyday use. Watch for signs that the VPN has dropped: the app status changes to disconnected, the shield icon disappears, or the app shows a reconnection animation. If you notice this happening regularly, the VPN server you are connected to may be unstable or overloaded.

When you see a disconnect, note the time and the server location. Open your VPN app and switch to a different server in the same country or a nearby country. Reconnect and use the internet normally for 10 to 15 minutes. If the connection holds, the previous server was the problem. If the new server also disconnects, try a server in a different country or contact your VPN provider's support.

Some VPN apps have a "Stability" or "Ping" indicator next to each server location. Servers with lower ping values (usually shown in milliseconds) tend to be more stable and faster. If your current server shows a high ping or a red indicator, switch to one with a lower ping and test again.

Verify your VPN provider's privacy policy matches what you expect

A working VPN connection only protects you if your VPN provider is not logging your activity. Even if your IP is hidden from websites, your VPN provider can see your traffic. Before relying on a VPN, check whether the provider keeps logs of your browsing history, connection times, or IP addresses.

Visit your VPN provider's website and find their privacy policy or terms of service. Look for a statement about logging — it should say something like "we do not log browsing activity" or "we do not store connection logs." Some providers explicitly state "no-log policy" in their marketing. If the policy is vague or says they keep logs "for security purposes," understand that your VPN provider could hand over your activity to law enforcement or other parties if required.

This check does not verify whether the provider is actually following their stated policy, but it tells you what they claim to do. If you are concerned about privacy, research the provider's history — whether they have been subpoenaed, whether they have published transparency reports, and whether security researchers have audited their claims.

Frequently Asked Questions

What should the IP address look like when my VPN is working?

The IP address shown on the leak test site should be different from your real IP and should match the country or region of the VPN server you are connected to. For example, if you connected to a VPN server in the United Kingdom, the displayed IP should be a UK address. You can verify this by checking the server location name in your VPN app.

Why does my VPN show connected but the leak test shows my real IP?

This happens when the VPN app is running but not actually routing your traffic through the VPN server. Restart the VPN app completely — close it and open it again — and reconnect. If the leak persists, try switching to a different server location. If it still leaks, contact your VPN provider's support or try a different VPN service.

Is it normal for my VPN to disconnect sometimes?

Occasional disconnects happen, especially on unstable internet connections or when switching between Wi-Fi and mobile data. Frequent disconnects are not normal and usually mean the server is overloaded or your internet connection is dropping. Switch to a different server with a lower ping value and test for a few days. If disconnects continue, contact your provider.

Do I need to check my VPN every time I use it?

You do not need to run a full leak test every session, but glance at the app status to confirm it shows connected. Run a full IP and DNS leak test once a month or after updating your VPN app to catch any new problems early. If you switch to a new VPN provider, test when ready.

What if the leak test site will not load while my VPN is connected?

Some websites block traffic from known VPN IP addresses. Try visiting a different leak test site like ipleak.net instead of whatismyipaddress.com. If multiple sites will not load, your VPN may be blocking access to them, or the VPN server may be having issues. Switch to a different server and try again.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.