How to check that your VPN really works

A Connected badge in the app does not guarantee that all traffic goes through the VPN. Check three things — it takes five minutes.

1. Did your IP address change

Turn the VPN off and open ifconfig.me. Note the address and country. Turn the VPN on and reload: the address should change to the server address and the country to the one you chose.

If the address stayed the same:

• system proxy or TUN mode is not enabled in the app;
• the browser uses its own proxy settings;
• the connection was not established even though the app says otherwise — restart it.

2. Is there a DNS leak

A DNS query asks "what is the address of this site". If it goes to your provider outside the VPN, the provider sees which sites you open even though the traffic itself is encrypted.

Open a DNS leak test such as dnsleaktest.com and run the extended test. The list should show DNS servers that are not your provider's. If your provider is there, enable TUN mode in the app: in it DNS queries also go through the tunnel.

3. Does WebRTC reveal your address

WebRTC powers calls in the browser and can tell a site your real address, bypassing the proxy. Check it at browserleaks.com in the WebRTC section: your home address must not appear.

If it does, TUN mode in the app or a browser setting that limits WebRTC helps.

If a check failed

1. Switch the app from system proxy to TUN mode.
2. Choose another protocol: Hysteria2 instead of VLESS or the other way round.
3. Press Change server on the device card in your account.
4. Still no luck — contact support and attach screenshots of the checks.