Jump to content
Sign in to follow this  
Tech 425

Is Your VPN Leaking?

Recommended Posts

Is Your VPN Leaking?

 

545076-is-your-vpn-leaking.jpg

 

Just how secure is your privacy? You may think you have a Fort Knox-like setup, but don't take risks with your personal info. It's worth confirming that the virtual private network (VPN) software you use is actually doing its job, or if it's allowing your personal data to go hither and thither without your knowledge.

 

When you're running a VPN, the expectation is that all the traffic sent and received over the VPN encrypted tunnel is protected. That includes info like your IP address, your location, even what internet service provider you're using. If that information is knowable, then tracking your online behavior isn't far behind. If you're lucky, all that happens is your web activity is monetized. But that's not alway the case.

 

For the most part, if you pick one of our Best VPN Services, you'll be well protected, be it on a PC or even a smart device (most of the best services offer software across all operating systems). But it never hurts to check. Things break, new exploits are found, and there's always a chance your VPN may be leaking more than you like. Here are some steps you can take to see if that's true.
 
 
Check Your IP Address:
Your home has an IP address, not just a street address. The IP (internet protocol) address is the unique number assigned to your router by your ISP. Your internal home network also gives each node in your home—PCs, phones, consoles, smart appliances, anything connected to the router—an IP address. But in this case, we're only concerned with your public-facing IP address.
 
The IP address is how your computers/router talk to servers on the internet. They don't actually use names —like cyberphoenix.org—because computers prefer numbers. IP addresses are typically bound not only to the ISPs that assign them but also specific locations. Spectrum or Comcast would have a range of IP addresses for one town and a different range for another town, etc. When someone has your IP address, they get a lot more than just some numbers: they can narrow down where you live.
 
IP addresses come in several formats, either a IPv4 (internet protocol version 4) version like 172.16.254.1 or and IPv6 type like 2001:0db8:0012:0001:3c5e:7354:0000:5db1.
 
 
Let's keep it simple. Your own public-facing IP address is easy to find. Go to Google and type "what's my IP address." Or go to sites like IPLocation, WhatIsMyAddress.com, or WhatIsMyIP.com. That latter three will show more than the IP; they'll also give you the Geo-IP, as in the location linked to the address.

 

image.png

 

Take the IP address that comes up and search for it in Google with IP in front, like "IP 172.16.254.1" (sans quotation marks). If it keeps coming up with your city location, your VPN has a big, messy leak.
 
 
Check for DNS Leak:
 
The internet domain name system (DNS) is what makes IP addresses and domain names (like "pcmag.com") work. You type the domain name in a web browser, the DNS translates all the traffic moving back and forth from your browser to the web server using the IP address numbers, and everyone is happy. ISPs are part of that—they have DNS servers on their networks to help with the translation, and that gives them another avenue to follow you around. This video from ExpressVPN spells it out (and tells you up front why a VPN with DNS services is great).

 

 

Using a VPN means, in theory, your internet traffic is redirected to anonymous DNS servers. If your browser just sends the request to your ISP anyway, that's a DNS leak.

There are easy ways to test, again using websites like Hidester DNS Leak Test, DNSLeak.com, or DNS Leak Test.com. You'll get results that tell you the IP address and owner of the DNS server you're using. If it's your ISP's server, you've got a DNS leak.
 
DNSLeak.com, in particular, gives you a nice color-coded result, with "Looks like your DNS might be leaking..." in red, or green if you appear to be in the clear. Hidester gives you a full list of every DNS server you may hit. When several correspond to your actual ISP, that better underscores your leaky-ness.

 

image.jpg

 

Fixing the Leaks:

If you do have a leak, you have a couple options. One, change your VPN to one that specifically works to prevent DNS leaks. Among our Editors' Choice picks are VPN Unlimited, PureVPN, Private Internet Access VPN, and NordVPN. If you like your current VPN too much to switch, maybe buy Guavi's VPNCheck Pro for $19.92, which has its own DNS leak fix, in addition to monitoring your VPN for other issues.

 

You can also change the DNS servers used by your router when you send requests to the internet. This can be a little complicated as it requires you to go into the settings for your router, but might be worth it for other reasons. Services like Google Public DNS, Comodo Secure DNS, Norton ConnectSafe, or Cisco's OpenDNS do the trick and provide instructions on how to set them up with most routers. The latter has a personal version with various free options (even one geared specifically to family/parental controls that blocks questionable sites), or you can pay $19.95/year for extra services.
 
On the upside, making a DNS update to your router means all the traffic in your home or office uses the new DNS service and whatever ancillary features it provides. That includes phones, tablets, consoles, even talking speakers like Amazon Echo.

 

i_1.jpg

 

On the other hand, you're just handing your DNS traffic over to another corporation. You could instead invest in hardware at the router level to add extra security, but that may be overkill if you're not feeling terminally paranoid. At the very least, on individual PCs and handheld devices, get VPN software/apps for supplemental security all around.
 
 
Other Leak Plugs:
 
Your location is probably something you've plugged into your browser at some point. If so, your browser is typically more than willing to share that information with the websites you visit, even if your VPN does not. Check the massive amount of data you may be giving up by visiting IPLeak.net.

Use an alternative browser when you want to be at your most secure—the Tor Browser, for example. It's all about keeping you anonymous, bouncing your requests around the world before they land on the web server you want, and back again. That makes it hard to find your local info and can slow things down overall, but it's a good bet for security.

If you can't stand the thought of giving up your current browser, use incognito mode, go the complicated route of setting up a fake location, or just get an extension like Location Guard (for Chrome or Firefox) to spoof your whereabouts.

If you're worried about your web-based email system, switch to ProtonMail. Not only does it redirect messages over the Tor network, it keeps everything encrypted. Proton Technologies also just released ProtonVPN for Mac, Windows, Linux, and Android. There is a tier of service that's free forever for one device—and includes DNS leak protection—while the paid versions support Tor servers and more.

ProtonMail

https://protonmail.com

ProtonVPN

https://protonvpn.com

VPN Unlimited @ 90% Discount

http://www.cyberphoenix.org/forum/topic/511082-vpn-unlimited-lifetime-subscription-ending-in-5-days/

PureVPN

https://www.purevpn.com

Private Internet Access VPN

https://www.privateinternetaccess.com

NordVPN

https://nordvpn.com

Guavi's VPNCheck Pro

http://www.guavi.com/vpncheck_pro.php

 

Edited by Tech 425
Images Fixed
  • Like 2
  • Thanks 1

Share this post


Link to post
Share on other sites

I thought ProtonMail's encryption only worked between protonmail accounts?

(emails sent from one protonmail account to another protomail account)

Is this right?

  • Like 1

Share this post


Link to post
Share on other sites

This is what ProtonMail says about Non-ProtonMail accounts:

 

Securely communicate with other email providers
 
Even your communication with non-ProtonMail users can be secure
 
We support sending encrypted communication to non-ProtonMail users via symmetric encryption. When you send an encrypted message to a non-ProtonMail user, they receive a link which loads the encrypted message onto their browser, which they can decrypt using a passphrase that you have shared with them. You can also send unencrypted messages to Gmail, Yahoo, Outlook and others, just like regular email.

 

 

Share this post


Link to post
Share on other sites

Thank You...  Now I Know More Stuff...

  • Like 1

Share this post


Link to post
Share on other sites

im sealed up like fort knox, with always using opera's vpn and my vpn with expressvpn.. i checked with everything u shared just to be sure.. im very happy and can sleep better at night.. thank u for all the info tech.. im a frickin online ninja.. :ph34r:

  • Like 1
  • Haha 1

Share this post


Link to post
Share on other sites

I use HOXX VPN, a Google Chrome complement. According to experts it is possibly one of the worst. Probably it's best attribute is that it's FREE. So why I use it? Obviously my best incentive is that it's FREE. My second reason is that it let's me outwit government's illegal blocking of information sites and it looks quite efficient doing it! So, probably it leaks but I really don't mind!

  • Like 1

Share this post


Link to post
Share on other sites
1 hour ago, luisam said:

I use HOXX VPN, a Google Chrome add-on. According to experts it is possibly one of the worst. Probably it's best attribute is that it's FREE. So why I use it? Obviously my best incentive is that it's FREE. My second reason is that it let's me outwit government's illegal blocking of information sites and it looks quite efficient doing it! So, probably it leaks but I really don't mind!

 

u should use Windscribe - Free VPN and Ad Blocker.. it's totally free and is also a chrome addon.. it's the best on the market for free and addons.. it also passes IP leak standards and stops browser WebRTC as well as confuses browser identification tactics.. i personally tested it.. give it a try.. :ph34r:

 

Windscribe - Free VPN and Ad Blocker

https://chrome.google.com/webstore/detail/windscribe-free-vpn-and-a/hnmpcagpplmpfojmgmnngilcnanddlhb?hl=en

 

  • Thanks 1

Share this post


Link to post
Share on other sites
14 hours ago, Rædwulf said:

u should use Windscribe - Free VPN and Ad Blocker

Thanks for the tip. Installed it and looks it works. It's free though limited to 10 Gb monthly. Looks to me rather enough because, as wrote before, main use is to bypass ILLEGAL censorship of news and opinion channels by the government. Free Avira VPN is limited to monthly 500 Mb; that's really not enough for any practical purpose because to open and browse most pages might take several megabytes.  The strange issue with downloading and signing in was that windscibe.com webpage was blocked! Presume by the proper official censorship so I accessed it with HOXX!

As for Adblocking, problem is with sites detecting the process of blocking ads and don't let users access. They adduce that it harms their business! Might be right but to get flooded by popups, popunders, spam and some stupid XXX publicity harms users!

  • Like 1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×