DI VPN — Digital Identity

LEAK TESTS / DI VPN TOOL

IPv6 Leak Test

Check whether an IPv6-only address endpoint is reachable separately from the DI VPN request.

GUEST · NO ACCOUNT First-party DI VPN page Not saved to account
LIVE DIAGNOSTIC

Run IPv6 Leak Test

NOT TESTED

The test first records the address seen by DI VPN, then asks an IPv6-only echo endpoint for its result. If the browser gets a public IPv6 address outside the expected tunnel path, investigate it.

Your test results will appear here. Nothing runs until you press the button.

Full tests run only after you start them. Public tools need no extension. An optional extension status check may run in Chrome. Results are not saved to your DI VPN account.

What this tool checks

A VPN path that protects IPv4 but leaves native IPv6 routing available can expose a second public address to websites that support IPv6.

The main HTTPS address observed by DIVPN
Whether an IPv6-only endpoint can be reached from this browser
The IPv6 address returned by that endpoint, when available

How to run the test

  1. Connect to DI VPN before testing.
  2. Run the IPv6 check.
  3. If an IPv6 address is returned, compare it with the VPN exit and your expected tunnel design.
  4. If the endpoint is unreachable, treat that as “IPv6 path not reachable from this test”, not as proof of a leak-free device.
Important limitation

The IPv6-only probe currently uses api6.ipify.org because divpn.com has no public AAAA endpoint at this time. The test result stays on this DI VPN page; it does not redirect you to a test website. A fully first-party IPv6 echo test requires a public IPv6 listener and AAAA DNS record for DI VPN.

Learn moreRead the DI VPN security guides and technical explanations.