What Is an IPv6 Leak and Why Should You Take It Seriously?
On this page 6
Your IP address works like a license plate: every website can see where you came from. A VPN is supposed to change that plate. But what if it changes only half of the plates? That is exactly what happens in an IPv6 leak.
IPv4 and IPv6
There are two versions of addressing on the internet:
- IPv4: the old, familiar addresses such as 192.0.2.1
- IPv6: the newer version with much longer addresses such as 2001:db8::1
Many networks and internet providers today offer both at the same time, and websites usually support both as well.
How does an IPv6 leak happen?
If a VPN only passes IPv4 traffic through the tunnel and does nothing for IPv6, a website that is reachable over IPv6 may talk to your device directly, outside the tunnel. The result is that your real IPv6 address, which is often tied to your network and your region, becomes visible.
How can we tell there is a leak?
- Connect to the VPN.
- Visit a site such as browserleaks.com/ip or ipleak.net.
- Look at the IPv6 section. If an address appears that does not belong to the VPN server, you have a leak.
- If nothing appears, or the address belongs to the VPN, you are in good shape.
Fixes
- Use a VPN that either supports IPv6 or blocks it completely. This is the best solution.
- Disable IPv6 on your network adapter if your service does not support it.
- Keep Kill Switch enabled.
- Test again after every change, on every device you use.
A common mistake
Many people test only once and then forget about it. Networks change, operating systems update, and settings can revert. Repeat the test every so often.
The right support is half the battle
If you are not sure what your service or config does with IPv6, ask support before buying or afterwards. The BlendIn VPN team answers around the clock, 24 hours a day.
