If you’re in a hurry: open our tool and compare results with VPN off vs on.
What it means for a VPN to “work”
When a VPN is working properly, your internet traffic routes through a VPN server. Most websites will see the VPN server’s public IP address (not your home/mobile IP), and your “network owner” (ISP/ASN) often looks like a hosting provider or VPN network.
But “working” can mean different things depending on your goal:
- Privacy: hide your real IP and reduce tracking from your ISP.
- Security: protect traffic on public Wi-Fi (especially without HTTPS, or for apps).
- Location shifting: appear to browse from another country/region.
How to check if your VPN is working (3 practical checks)
1) Check your public IP address
This is the most basic test. Turn your VPN off, note your public IP. Then turn it on and refresh.
- If the IP changes when VPN turns on, that’s a strong sign your VPN is routing traffic.
- If the IP does not change, your VPN might not be active, or split tunneling may be enabled (more below).
You can do this instantly here: VPN Status Check tool.
2) Check location + ISP/ASN (who “owns” the IP)
A VPN often changes not just your IP but also the network identity behind it. That’s where ISP and ASN are useful:
- ISP is the company that provides the network the IP belongs to.
- ASN (Autonomous System Number) is like a network ID that identifies the organization operating that IP range.
With VPN off, you’ll usually see your home ISP or mobile carrier. With VPN on, you may see a data center or VPN network. This doesn’t guarantee privacy, but it’s a good sanity check.
3) Run a WebRTC exposure check
Some browsers and network setups can reveal extra network information via WebRTC. A good WebRTC check should be honest: in many modern browsers, WebRTC IPs are hidden by privacy protections.
If your browser shows “WebRTC IPs hidden (good)”, that’s usually a positive sign. If it finds a different public IP than the page IP (rare), that may indicate a leak.
Why your VPN might be “on” but not detected
VPN detection on the internet is mostly based on IP reputation (databases that mark IP ranges as VPN/proxy/data center). That means a VPN can be working even if a website doesn’t label it as VPN.
Common reasons include:
- Residential VPN / ISP-like exit IP: Some VPNs use IPs that look like normal residential networks.
- New or rotated IP: VPN providers rotate servers; reputation databases can lag behind.
- Shared IP behavior: Many users share the same VPN IP; some services treat it differently.
- Split tunneling: Your browser may bypass the VPN while other apps use it (or the reverse).
Common VPN problems (quick fixes)
Split tunneling is enabled
Split tunneling lets some apps bypass the VPN. If your browser is excluded, your VPN app will say “connected” but your browsing IP won’t change. Check your VPN settings and disable split tunneling for testing.
IPv6 not tunneled
Some VPN setups don’t route IPv6 traffic. In that case, parts of your connection could still use IPv6 outside the VPN. (An IPv6 leak test can help, and we may add one to this tool in the future.)
Browser privacy settings or extensions
Some extensions change how your browser handles network features like WebRTC. This can be good for privacy, but it can also cause confusing results across devices.
Best practice: compare VPN off vs VPN on
The most reliable way to verify your VPN is to compare the same checks twice:
- Turn VPN off → check IP + location/ISP/ASN
- Turn VPN on → refresh and check again
Start here: Run VPN Status Check
Final note: detection isn’t perfect (and that’s okay)
VPN “detection” is best-effort. What matters most is whether your public IP and network identity change the way you expect, and whether you have obvious exposure signals (like a different public IP in WebRTC).
Want to learn more? We’ll be publishing more guides on VPN checks and leak testing.
If your VPN appears active but isn’t flagged, read: Why VPNs are sometimes not detected.