Practical VPN checks

How to Check Your VPN Is Working

A VPN should change your public IP address and route traffic through the VPN provider. This guide shows practical checks you can run in a browser or terminal to confirm the VPN is active.

Simple rule

Check your IP before connecting, connect to the VPN, then check again. If the IP and location do not change, something may be wrong.

Browser checks

Check your public IP address

  1. Disconnect from the VPN.
  2. Search for “what is my IP” and note the result.
  3. Connect to the VPN.
  4. Search again and compare the IP and location.

If the VPN is working, the public IP should normally change to an address associated with the VPN server.

Terminal checks

Check your VPN with command line tools

On Linux or macOS, you can check your public IP with curl:

curl https://ifconfig.me

Example output:

203.0.113.42

You can also check a DNS-based IP lookup:

dig +short myip.opendns.com @resolver1.opendns.com

Run the command before and after connecting to the VPN. The output should change if the VPN is routing traffic correctly.

Things to check

Signs your VPN is working

Your public IP changes

The IP after connecting should be different from your normal ISP IP.

DNS checks match the VPN

DNS lookups should not reveal your normal ISP DNS servers.

Kill switch behaves correctly

If the VPN disconnects, the kill switch should prevent accidental traffic leaks.

FAQ

VPN checking FAQ

Why does my IP still show my real location?

The VPN may not be connected, your browser may be showing cached or approximate data, or only some traffic is routed through the VPN.

Can DNS leak even when my IP changes?

Yes. Your public IP can change while DNS requests still use your ISP. That is why DNS leak testing matters.

Should I test on every device?

Yes. VPN behaviour can differ between desktop apps, mobile apps, browser extensions and router setups.

Related VPN privacy guide

Does a VPN hide your IP?

Learn what a VPN hides, what it does not hide, and how logins, cookies, browser fingerprinting and DNS leaks can still matter.