IP address check and leak test
This page shows the IP address that websites see. It also tests WebRTC, DNS and IPv6 for leaks.
Checking your connection…
This usually takes a few seconds.
If the app says “Connected” but this page shows no VPN
- The page is open inside an app, not in a browser. On Android, our app’s built-in browser bypasses the VPN. So does the built-in browser of any app on the “Apps that bypass the VPN” list. Open this page in Chrome or another browser.
- Your browser is on the “Apps that bypass the VPN” list. In the app, open Tunnel and remove the browser from the list in Manual mode.
- Your browser has its own VPN or proxy turned on. Examples are the VPN built into Opera, Edge Secure Network, iCloud Private Relay in Safari and proxy extensions. Websites then see that service’s address. Turn it off and check again.
- If nothing here applies, press “Copy report” and send the report to support in Telegram at @bensvpn.
With the Ben's VPN app, websites see our server’s address in the country you choose, not yours.
Try for $0.50This is the address your browser used to reach our check server. Other websites usually see the same address.
WebRTC makes calls and video chats work in the browser. To connect people directly, the browser learns its addresses from a STUN server. Any website can read them without asking your permission. If one of them is not our server’s address, websites can see it even with the VPN on.
How to fix it
Type about:config in the address bar and accept the warning. Find media.peerconnection.ice.default_address_only and set it to true. If you do not need calls in the browser, you can turn WebRTC off completely. To do that, set media.peerconnection.enabled to false.
Chrome, Edge and Yandex Browser have no built-in setting for this. Install Google’s WebRTC Network Limiter extension. In its options, choose the setting that limits WebRTC to your main connection. Opera and Brave on desktop have this setting built in. Look for WebRTC in their privacy and security settings.
In the app, open Tunnel and choose Off. In this mode, all device traffic goes through the VPN.
Browsers on Android usually have no WebRTC setting. In the app, open Tunnel and choose Off. In this mode, all device traffic goes through the VPN.
After making changes, reconnect in the app and press “Check again”. If the leak is still there, contact support in Telegram at @bensvpn.
Before it opens a website, the browser asks a DNS server for the site’s address. If these requests bypass the VPN, your provider can see which sites you visit. With the VPN on, the list usually shows Cloudflare, Google, Quad9 or OpenDNS in the VPN server’s country. That is normal.
In For Russia mode, requests to Russian services go directly, not through the VPN. That includes Yandex DNS, so in this mode the check may show Yandex as a leak.
How to fix it
DNS protection on Windows starts working after a restart. Restart your computer if you have not done so since installing the app.
Find “Use secure DNS” in your browser’s privacy or security settings. If it is set to Yandex or your provider’s DNS, choose Cloudflare or turn it off.
In Firefox, open Settings → Privacy & Security and find DNS over HTTPS. Choose Cloudflare as the provider or select Off.
To send all DNS requests through the VPN, open Tunnel in the app and choose Off. Then reconnect and press “Check again”.
Many internet providers assign two kinds of addresses, IPv4 and IPv6. Our app works over IPv4 and blocks IPv6 while you are connected. If a website still sees your IPv6 address, some requests bypass the VPN.
How to fix it
Reconnect in the app and press “Check again”. If your IPv6 address is still visible, contact support in Telegram at @bensvpn.
We do not store your check results.
What websites see
Connection
Headers received by our server
Browser and system
Client Hints
What else websites can learn about your browser
Websites can use these traits to recognize your browser without cookies. The values are calculated in your browser and are not sent anywhere.
Geolocation
Your browser determines your coordinates from GPS and nearby Wi-Fi networks, so a VPN usually does not change them. A website gets them only if you allow it. This page does not send them anywhere.
How the IP check works
Every website knows the IP address a request comes from. That address is enough to place you in a country and city and to name your internet provider. When a VPN is active, the website gets the VPN server address instead.
This page compares your address with the addresses of Ben's VPN servers and shows how you are connected to the internet. Then your browser checks three channels that can reveal your real address or provider despite the VPN. They are WebRTC, DNS and IPv6.
Types of leaks and what they expose
WebRTC leak
Browsers rely on WebRTC for calls. To connect callers directly, it shares your device’s addresses with websites. If the browser finds an address that bypasses the VPN, websites can see the address your provider assigned to you, even with an active VPN.
DNS leak
A DNS server translates a site’s name into its address. Requests that bypass the VPN show your provider which sites you visit. They also hint to websites which country you are in.
IPv6 leak
Some VPNs carry only IPv4. If the browser then opens a site over IPv6, that request goes out directly from your real address. Our app blocks IPv6 while you are connected.
When the app and this page show different addresses
Several of our servers send traffic out through one of a few addresses. A website may therefore see one address while the app shows another.
This is normal, and the address still belongs to our server. If the app is connected but this page shows no VPN, see the list of causes under the result.
How to stop a leak
- In Firefox, go to about:config and change
media.peerconnection.ice.default_address_onlytotrue. After that, WebRTC uses only the main connection. - Chrome and Edge have no built-in WebRTC setting, but Google’s WebRTC Network Limiter extension does the job. For DNS, check the browser’s “Use secure DNS” setting.
- On iPhone, iPad and Mac, open Tunnel in the app and choose Off. All device traffic then goes through the VPN.
- On Windows, restart your computer after installing the app. DNS protection starts working after a restart.
- On Android, make sure your browser is not on the “Apps that bypass the VPN” list. Open sites in the browser, not through a link inside our app.
Who receives data from the check
- Our check server matches your IP address against the list of our server addresses and reads the request headers from your browser. This is how it tells whether your traffic goes through Ben's VPN. We do not store the result.
- The DNS check loads several randomly named bash.ws addresses. The service sees your IP address and the DNS servers that handled the requests. It stores the result on its side, and the page retrieves it from there.
- The WebRTC check contacts STUN servers run by Cloudflare and Google. They see your IP address.
- The IPv6 check asks api6.ipify.org for your address, or ipv6.icanhazip.com if the first one is unavailable. If neither responds, the page checks the connection with a request to api4.ipify.org. If our server cannot determine your address, the page also asks api4.ipify.org for your IPv4 address, for reference.
- The page gets the HTTP and TLS versions from Cloudflare, which the site runs on. On a site mirror, a similar request to the site’s main address checks whether it opens for you.
- The page does not send your browser fingerprint or coordinates anywhere.
All other data on this page is handled as on the rest of the site, under our privacy policy.
Common questions about the check
How should I read the “Your connection is protected” result?
Websites see the address of a Ben's VPN server instead of yours, and the WebRTC, DNS and IPv6 checks found no leaks. If a check could not be completed, the cards under the result say so. The check covers only the browser this page is open in. It does not check other apps on your device.
Why is no VPN detected when the app shows “Connected”?
The page may be open in our app’s built-in browser on Android. Or your browser may be on the “Apps that bypass the VPN” list. A VPN or proxy built into the browser can also cause this. The full list of causes appears under the result. If none of them fits, contact support in Telegram at @bensvpn.
This page and the app show different IP addresses. Is that an error?
Some of our servers have several outgoing addresses, and websites see one of them. That is normal. The address still belongs to our server.
The check found a leak. How do I fix it?
Open the card with the leak. It has tips for your browser and operating system. After making changes, reconnect in the app and press “Check again”.
My browser’s time zone and my IP address point to different countries. Why?
A VPN changes your IP address, but not your device’s clock or language. Websites can notice the mismatch. It does not mean that anything is wrong with the VPN.
Where are the check results kept?
We do not store them. Our server receives your IP address and browser headers to answer the request. It does not record the result. The DNS check result is kept by bash.ws, the service that runs that check, and the page fetches it from there. Your browser fingerprint and coordinates are not sent anywhere.
Will this check work with another VPN?
Yes. The page shows your address and provider. The WebRTC, DNS and IPv6 cards list the addresses and servers the checks found. Leaks are evaluated only when you are connected to Ben's VPN. Only then does the page show “Your connection is protected”.