Connect your VPN and press the button. The tool gathers what websites see: public IP and provider, WebRTC addresses, IPv6 and the browser's time zone, then tells you whether you are actually hidden.
Turn the VPN on first, then press the button.
The public IP and provider must belong to the VPN server, not your carrier. The WebRTC row must be green. IPv6 is either absent or also the server's. The time zone should match the server's country, otherwise sites see a mismatch.
A DNS leak cannot be detected from a browser; use an external test (dnsleaktest.com, extended mode). How to read it is in is my DNS leaking.
WebRTC: enable protection in the client (TUN mode) or via a browser extension. IPv6: disable it on the connection or carry it inside the tunnel. Time zone: change the system zone to the server's if it matters to you.
404 VPN keeps DNS inside the tunnel, handles IPv6, and blocks traffic on disconnect with a kill switch.
How to connect 404 VPN →