A VPN should change the public IP address that websites see, route your traffic through the VPN provider, and reduce how much your home network or ISP is exposed. But simply turning on a VPN app is not enough proof. The connection can fail, split tunneling can exclude your browser, or DNS settings can still reveal information about your real network.
Step 1: Check Your Public IP Before and After
Start with the simplest test. Turn your VPN off and open the MyDeviceScan IP Lookup tool. Write down your public IP address, ISP name, country, and city. Then turn the VPN on, refresh the page, and compare the result.
If the VPN is working, your public IP should change to the VPN server. The ISP field should usually show a hosting provider, data center, or VPN-related network instead of your normal internet provider. The city and country should match the VPN location you selected, though exact city location can vary because IP geolocation databases are not perfect.
Step 2: Check for DNS Leaks
A DNS leak happens when your browser uses the VPN for page traffic but still asks your ISP's DNS servers to resolve domains. That can reveal which sites you visit even when the page connection itself is routed through the VPN. Many VPN apps include DNS leak protection, but it is worth verifying after changing VPN servers, operating systems, or browser settings.
If your VPN has a built-in leak test, run it. If not, use a trusted DNS leak test site and confirm that the DNS servers belong to the VPN provider or to a privacy-focused resolver you selected. If you see your home ISP in the DNS result, open the VPN app settings and enable DNS leak protection or "use VPN DNS" if the option exists.
Step 3: Understand Split Tunneling
Split tunneling lets some apps use the VPN while others use your normal connection. This is useful for banking apps, streaming services, or games that block VPN traffic. It can also confuse testing. If your browser is excluded from the VPN, an IP check in the browser will still show your real IP even though another app is protected.
When troubleshooting, temporarily disable split tunneling and test again. If your IP changes only after disabling split tunneling, the VPN itself is working but your browser was not included in the VPN route.
What a VPN Does Not Hide
- Logged-in identity - if you sign in to an account, the service still knows it is you.
- Browser fingerprinting - screen size, fonts, extensions, and device details can still be used for tracking.
- Payment information - purchases and subscriptions still connect to your billing identity.
- Malware on your device - a VPN does not clean infected browsers or unsafe extensions.
VPN Troubleshooting Checklist
If the IP address does not change, disconnect and reconnect the VPN, try another server, and restart the browser. If only one browser leaks your real IP, check proxy settings and extensions. If the VPN works on mobile data but not home WiFi, your router or ISP may be blocking the VPN protocol, so switch from WireGuard to OpenVPN or another protocol in the VPN app.
For the cleanest test, open a private browser window, connect the VPN, then run the IP Lookup again. Save the before-and-after results if you need to report a problem to VPN support.