Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To check whether your VPN is working, compare your public IP with the VPN off and on, then separately test DNS, WebRTC, IPv6, and kill-switch behavior. An app that says “Connected”—or a changed IP address—does not prove that every kind of traffic is protected. These checks can reveal common problems, but a pass only describes the device, apps, browser, and connection conditions you tested; it does not make you anonymous or guarantee every app uses the VPN tunnel.

1. Record your VPN-off baseline

Disconnect the VPN and open a reputable public IP-check page. Note the public IP address and the approximate location it reports. This is your comparison point; location databases can be approximate, so focus on whether the address changes when you connect.

Keep other network conditions the same for the first comparison. If you switch from Wi-Fi to mobile data between checks, your public IP may change for reasons unrelated to the VPN.

2. Compare your public IP with the VPN on

Connect to a VPN server, return to the same IP-check page, and refresh it. You should normally see a public IP associated with the VPN endpoint rather than the address recorded in step 1. The reported location should be broadly consistent with the server you chose, although IP geolocation is not exact.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
TP-Link USB to Ethernet Adapter,Support Nintendo Switch,1Gbps,Plug and Play
  • 𝐇𝐢𝐠𝐡-𝐒𝐩𝐞𝐞𝐝 𝐔𝐒𝐁 𝐄𝐭𝐡𝐞𝐫𝐧𝐞𝐭 𝐀𝐝𝐚𝐩𝐭𝐞𝐫 - UE306 is a USB 3.0 Type-A to RJ45 Ethernet adapter that adds a reliable wired network port to your laptop, tablet, or Ultrabook. It delivers fast and stable 10/100/1000 Mbps wired connections to your computer or tablet via a router or network switch, making it ideal for file transfers, HD video streaming, online gaming, and video conferencing.
  • 𝐔𝐒𝐁 𝟑.𝟎 𝐟𝐨𝐫 𝐅𝐚𝐬𝐭𝐞𝐫, 𝐌𝐨𝐫𝐞 𝐒𝐭𝐚𝐛𝐥𝐞 𝐃𝐚𝐭𝐚 𝐓𝐫𝐚𝐧𝐬𝐟𝐞𝐫𝐬- Powered via USB 3.0, this adapter provides high-speed Gigabit Ethernet without the need for external power(10/100/1000Mbps). Backward compatible with USB 2.0/1.1, it ensures reliable performance across a wide range of devices.
  • 𝐒𝐮𝐩𝐩𝐨𝐫𝐭𝐬 𝐍𝐢𝐧𝐭𝐞𝐧𝐝𝐨 𝐒𝐰𝐢𝐭𝐜𝐡- Easily connect your Nintendo Switch to a wired network for faster downloads and a more stable online gaming experience compared to Wi-Fi.
  • 𝐏𝐥𝐮𝐠 𝐚𝐧𝐝 𝐏𝐥𝐚𝐲- No driver required for Nintendo Switch, Windows 11/10/8.1/8, and Linux. Simply connect and enjoy instant wired internet access without complicated setup.
  • 𝐁𝐫𝐨𝐚𝐝 𝐃𝐞𝐯𝐢𝐜𝐞 𝐂𝐨𝐦𝐩𝐚𝐭𝐢𝐛𝐢𝐥𝐢𝐭𝐲- Supports Nintendo Switch, PCs, laptops, Ultrabooks, tablets, and other USB-powered web devices; works with network equipment including modems, routers, and switches.

If the original address remains, reconnect and check whether the VPN reports an active connection. Review split-tunneling settings: they may intentionally route selected apps outside the VPN. A changed address is a useful first check, not proof that DNS, browser traffic, IPv6, or every app is covered.

3. Check which DNS resolver answers

DNS translates domain names into IP addresses. A VPN may change your visible IP while DNS requests still go to a resolver associated with your internet provider. Run a DNS leak test while connected and inspect the resolver identity or organization it reports. Look for a resolver consistent with the VPN service or its documented DNS setup, rather than assuming any particular resolver name is automatically a leak.

Check the test page’s methodology before relying on it. Browser-based tools differ, and some cannot identify DNS resolvers at all. VPN and Privacy explicitly says its browser test cannot identify the resolver; it offers command-line examples instead: nslookup -type=txt whoami.cloudflare 1.1.1.1 and dig +short myip.opendns.com @resolver1.opendns.com. These are examples from that publisher, not a universal protocol for every operating system or VPN configuration. See its explanation of the test and its limitations.

Rank #2
Amazon Basics USB 3.0 to 10/100/1000 Gigabit Ethernet Internet Adapter, Compatible with Windows and macOS, Black
  • Connects a USB 3.0 device (computer/laptop) to a router, modem, or network switch to deliver Gigabit Ethernet to your network connection. Does not support Smart TV or gaming consoles (e.g.Nintendo Switch).
  • Supported features include Wake-on-LAN function, Green Ethernet & IEEE 802.3az-2010 (Energy Efficient Ethernet)
  • Supports IPv4/IPv6 pack Checksum Offload Engine (COE) to reduce Cental Processing Unit (CPU) loading
  • Compatible with Windows 8.1 or higher, Mac OS

4. Check WebRTC in each browser you use

WebRTC enables browser features such as real-time audio and video communication. Depending on browser configuration and network conditions, a WebRTC check may reveal network addresses. Run a WebRTC leak test in each browser you use for sensitive activity and compare any public address it reports with the VPN address from step 2.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A private local-network address, such as one used only inside your home network, is not by itself a public-IP leak. Results can vary with browser settings, so a test in one browser does not establish what another browser exposes. Bitdefender’s guide also separates WebRTC checks from the basic IP check: Is my VPN working? 7 easy tests to see if it works.

5. Check whether IPv6 traffic is exposed

Use a test that reports IPv6 while the VPN is connected. If the device has IPv6 connectivity and the VPN does not tunnel or otherwise handle it, an IPv6 address may be exposed even when the IPv4 check looks right. AMTSO’s 2025 testing guidance says that when a VPN connection is IPv4, IPv6 traffic should not leave the device unencrypted. The relevant question is how your VPN handles IPv6—not whether every VPN must use the same configuration.

Rank #3
USB A/C to Ethernet Adapter, 3xUSB3.0 and 1000M RJ45 Network hub for Laptop
  • [Expansion Ports] The USB C to Ethernet Adapter expands the device to three USB 3.0 ports and one Gigabit Ethernet port. Provides you more peripheral ports while maintaining a stable network connection, plug and play, no driver required.
  • [Gigabit Network Port] ALL-LUCKY USB Ethernet Adapter transmission rate up to 1000Mbps, also compatible with 10/100Mbps bandwidth. It allows you to enjoy a smooth and stable network connection and avoid too much lag. (Note: To reach 1Gbps, please use CAT6 or above Ethernet cable connection)
  • [Convertible Connector]This usb hub with ethernet not only has USB-A connector, but also can be converted to USB-C connector, so that you can easily convert the connector according to the device port, improve the convenience of use.
  • [High-Speed Data Transfer] The usb to ethernet adapter adopts USB 3.0 transmission technology, supports up to 5Gbps transmission rate, and is compatible with USB 2.0(480Gbps),USB 1.0(12Mbps), easily transfer video, files and other data for you in seconds. (Note: Maximum output current is 900mA, does not support charging devices.)
  • [Widely Compatible]The usb c ethernet adapter for iMac, MacBook Pro, iPad Pro, XPS and many other devices. Compatible with Windows 11/10/8.1/8, Mac OS, iPad OS, Chrome OS.(Note: Driver is required on Win 7) It can be used in office, school, library and other occasions, compact and portable, easy to carry around.

If the result is unclear, consult your VPN provider’s documentation for your app and operating system before changing system network settings. IPv6 behavior and available controls vary by client and platform. AMTSO’s 2025 VPN testing guidance describes a more formal evaluation than a browser check.

6. Test the kill switch with a controlled interruption

A kill switch is intended to block traffic if the VPN tunnel drops. First enable the feature in your VPN app, connect, and confirm that browsing works through the VPN. Then briefly interrupt the VPN connection or switch servers while watching whether internet traffic is blocked until the tunnel reconnects.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not use a sensitive session for this test. The exact behavior depends on the VPN client, device, protocol, apps, and type of interruption. A successful brief test is useful evidence for that setup, not proof against every possible drop or transition. AMTSO’s evaluation guidance frames the broader goal as preventing data packets from leaving unencrypted through another network interface.

Rank #4
Sale
Anker USB C to Ethernet Adapter, Portable 1 Gbps Network Hub
  • The Anker Advantage: Join the 65 million+ powered by our leading technology.
  • Instant Internet: Connect to the internet instantly from virtually any USB-C 3.0 device, and enjoy stable connection speeds of up to 1 Gbps.
  • Lightweight and Compact: The space-saving and portable design measures just over half an inch thick and weighs about the same as a AA battery.
  • Premium Build: Features a sleek aluminum exterior and braided-nylon cable to complement the design of high-end devices.
  • What You Get: PowerExpand USB-C to Gigabit Ethernet Adapter, welcome guide, 18-month worry-free warranty, and friendly customer service.

7. Repeat checks after reconnects and network changes

A static test can miss a brief exposure during a transition. Repeat the relevant checks after ordinary changes you actually encounter:

  • Disconnecting and reconnecting the VPN.
  • Switching VPN servers or locations.
  • Waking the device from sleep.
  • Changing Wi-Fi networks or moving between Wi-Fi and mobile data.

After each change, verify that the VPN reconnects and repeat the IP, DNS, WebRTC, or IPv6 check relevant to the suspected issue. AMTSO recommends testing across connection states, servers, and network transitions; its formal guidance covers more than a consumer browser page can observe.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

8. Address the finding and test again

If a check fails or gives an unexpected result, change one thing at a time so you can see what resolves it. Try reconnecting, choosing another server, restarting or updating the VPN app, and reviewing its DNS-protection, IPv6, split-tunneling, and kill-switch settings. Then repeat the failed check under the same conditions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
BENFEI USB 3.0 to Ethernet Adapter, USB C to RJ45 Gigabit LAN (1000Mbps) Network Adapter, Compatible with MacBook/Pro/Air, Surface Pro, Windows 11/10/8/7, Mac OS [Aluminium Shell&Nylon Cable]
  • COMPACT DESIGN - The compact-designed portable BENFEI USB A/C to Ethernet adapter connects your computer or tablet to a router,modem or network switch for network connection. It adds a standard RJ45 port to your Ultrabook, notebook or Macbook Air for file transferring, video conferencing, gaming, and HD video streaming.
  • SUPERIOR STABILITY - Built-in advanced IC chip works as the bridge between RJ45 Ethernet cable and your USB A/C devices. The driver-free installation with native driver support in Chrome, Mac, and Windows OS; The USB A/C Ethernet adapter dongle supports important performance features including Wake-on-Lan (WoL), Full-Duplex (FDX) and Half-Duplex (HDX) Ethernet, Crossover Detection, Backpressure Routing, Auto-Correction (Auto MDIX).
  • INCREDIBLE PERFORMANCE - Supports full 10/100/1000Mbps gigabit ethernet performance over USB A/C's 5Gbps bus, faster and more reliable than most wireless connections. Link and Activity LEDs. USB powered, no external power required. Backward compatible with USB 2.0/1.1.✅ To reach 1Gbps, make sure to use CAT6 & up Ethernet cables.
  • BROAD COMPATIBILITY - The USB A/C-Ethernet adapter is compatible with Windows 11/10/8.1/8/7/Vista/XP, Mac OSX 10.6/10.7/10.8/10.9/10.10/10.11/10.12, Linux kernel 3.x/2.6, Android and Chrome OS.Compatible with IEEE 802.3, IEEE 802.3u and IEEE 802.3ab. Supports IEEE 802.3az (Energy Efficient Ethernet).❌Do Not Support Windows RT. (NOT compatible with Nintendo Switch.)
  • 18 MONTH WARRANTY - Exclusive BENFEI Unconditional 18-month Warranty ensures long-time satisfaction of your purchase; Friendly and easy-to-reach customer service to solve your problems timely.

Fixes for DNS and IPv6 are specific to the VPN client and operating system; there is no single system setting that is appropriate for everyone. If the VPN’s documentation does not explain the result, ask its support team how that app handles the traffic in question. A browser leak page generally tests browser-visible signals, not every app’s system-wide traffic, and its data-collection claims should be read as the publisher’s disclosures rather than an independent audit. VPN and Privacy states that its page was last reviewed on September 6, 2026: VPN leak test.

What a successful check can—and cannot—tell you

IP, DNS, WebRTC, IPv6, and kill-switch checks cover different failure modes. A VPN can show as connected while one of these signals is not handled as expected. No single browser test establishes that all device traffic uses the tunnel, and no set of leak checks proves anonymity. Treat each result as evidence about the specific device, VPN app, browser, protocol, and connection state tested.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.