Back to Blog

How to Fix VPN Leaks (5-Minute Guide)

October 22, 2025 6 min read VPN, Security, Tutorial

Disclosure: This article contains affiliate links. We may earn a commission at no extra cost to you.

Is your VPN leaking your real IP address? Follow these simple steps to fix DNS leaks, WebRTC leaks, and IPv6 leaks. No technical knowledge required.

You discovered your VPN is leaking. Your real IP address, location, or ISP is exposed. Don't panic.

Most VPN leaks can be fixed in under 5 minutes with simple settings changes. This guide shows you exactly how to fix each type of leak, step by step.

Before You Start: If you haven't tested your VPN yet, start here:

Quick Diagnosis: What Type of Leak?

There are 3 main types of VPN leaks. Click the one affecting you:

DNS Leak

Your ISP sees which websites you visit

WebRTC Leak

Websites see your real local IP address

IPv6 Leak

Your IPv6 address bypasses VPN

Fix #1: DNS Leak

What is it? Your DNS queries (website lookups) are sent to your ISP's DNS servers instead of your VPN's DNS servers. Your ISP can see every website you visit.

How to detect: Run our DNS Leak Test. If you see your ISP's name or your real location, you have a DNS leak.

1 Enable DNS Leak Protection

NordVPN, ExpressVPN, Surfshark, ProtonVPN:

  1. Open your VPN app
  2. Go to Settings → Advanced
  3. Enable "DNS Leak Protection" or "Use VPN DNS"
  4. Reconnect to VPN

Windows manual fix (all VPNs):

  1. Right-click network icon → Open Network & Internet settings
  2. Click Change adapter options
  3. Right-click your VPN connection → Properties
  4. Select Internet Protocol Version 4 (TCP/IPv4) → Properties
  5. Select "Use the following DNS server addresses"
  6. Enter: 1.1.1.1 (Preferred), 1.0.0.1 (Alternate)
  7. Click OK and reconnect

macOS manual fix (all VPNs):

  1. Go to System Settings → Network
  2. Select your VPN connection → Details
  3. Go to DNS tab
  4. Click + and add: 1.1.1.1, 1.0.0.1
  5. Click OK and reconnect
Test Again

Fixed? Run the DNS Leak Test again. You should now see your VPN provider's DNS servers, not your ISP.

Fix #2: WebRTC Leak

What is it? WebRTC is a browser feature for video calls. It can expose your real local IP address to websites, even with a VPN active.

How to detect: Run our WebRTC Leak Test. If you see your real IP address listed, you have a WebRTC leak.

2 Disable WebRTC in Browser

Chrome / Edge / Brave:

  1. Install extension: WebRTC Leak Prevent
  2. Or use our myip.foo WebRTC Blocker (blocks WebRTC completely)
  3. Extension automatically blocks WebRTC leaks

Firefox:

  1. Type about:config in address bar
  2. Click "Accept the Risk and Continue"
  3. Search for: media.peerconnection.enabled
  4. Double-click to set it to false
  5. Restart Firefox

Safari:

  1. Go to Safari → Settings → Advanced
  2. Enable "Show Develop menu"
  3. Go to Develop → WebRTC
  4. Select "Disable ICE Candidate Restrictions" (disables WebRTC leaks)
Test Again

Fixed? Run the WebRTC Leak Test again. You should see no local IP addresses detected.

Fix #3: IPv6 Leak

What is it? Many VPNs only support IPv4. If your ISP provides IPv6, your IPv6 traffic bypasses the VPN entirely.

How to detect: Visit myip.foo. If you see an IPv6 address that doesn't belong to your VPN, you have an IPv6 leak.

3 Disable IPv6 (Temporary Fix)

Windows:

  1. Right-click network icon → Open Network & Internet settings
  2. Click Change adapter options
  3. Right-click your network adapter → Properties
  4. Uncheck "Internet Protocol Version 6 (TCP/IPv6)"
  5. Click OK and reconnect VPN

macOS:

  1. Go to System Settings → Network
  2. Select your connection → Details
  3. Go to TCP/IP tab
  4. Set "Configure IPv6" to "Link-local only"
  5. Click OK and reconnect VPN

Better solution (permanent):

Switch to a VPN that supports IPv6:

  • NordVPN: Full IPv6 support on all servers
  • Mullvad: Full IPv6 support
  • ProtonVPN: IPv6 routing supported
Test Again

Fix #4: Enable Kill Switch (Prevent Future Leaks)

A kill switch blocks all internet traffic if your VPN disconnects. This prevents accidental leaks when your VPN drops.

4 Enable Kill Switch

All major VPNs (NordVPN, ExpressVPN, Surfshark, ProtonVPN):

  1. Open your VPN app
  2. Go to Settings → General or Advanced
  3. Enable "Kill Switch" or "Network Lock"
  4. Some VPNs call it "Always-on VPN" or "Block without VPN"

What it does:

  • Blocks all traffic if VPN disconnects
  • Prevents accidental IP leaks
  • Automatically reconnects VPN

Still Leaking After All Fixes?

If you've tried all the fixes above and your VPN is still leaking, the problem is your VPN provider.

Common signs of a bad VPN:

  • DNS leak protection doesn't work
  • No IPv6 support
  • Kill switch is unreliable
  • Frequent disconnections
  • Poor server infrastructure

Time to Upgrade to a Better VPN

If your current VPN can't be fixed, it's time to switch. NordVPN has industry-leading leak protection with no DNS, WebRTC, or IPv6 leaks.

Why NordVPN?

  • Built-in DNS leak protection (always active)
  • Full IPv6 support on all servers
  • Automatic kill switch (Network Lock)
  • Independently audited (no logs policy verified)
  • 30-day money-back guarantee
Get NordVPN (70% Off)

Risk-free 30-day trial - Cancel anytime

Final Checklist: Is Your VPN Secure?

After applying the fixes, verify your VPN is leak-free:

  1. IP Address Check: Visit myip.foo - You should see your VPN provider's IP, not your real IP
  2. DNS Leak Test: Run DNS test - You should see your VPN's DNS servers, not your ISP
  3. WebRTC Leak Test: Run WebRTC test - You should see "No leaks detected"
  4. IPv6 Check: Check myip.foo - If you see IPv6, it should be from your VPN, not your ISP

All Tests Passed? Congratulations! Your VPN is now leak-free and secure. Your real IP address, location, and browsing activity are protected.

Next Steps

Now that your VPN is secure, consider these additional privacy measures:

  • Use a privacy-focused browser: Firefox with privacy extensions or Brave
  • Block ads and trackers: Install uBlock Origin
  • Use encrypted DNS: Cloudflare DNS (1.1.1.1) or Quad9 (9.9.9.9)
  • Enable HTTPS-only mode: Force all websites to use HTTPS
  • Learn about ISP tracking: Read our Complete ISP Privacy Guide

Need a better VPN? Check out our VPN Buying Guide 2025 to find the right VPN for your needs.

Disclosure: We may earn a commission if you purchase through our links. This helps us keep myip.foo free and maintain our testing infrastructure. We only recommend VPNs we've personally tested and trust.