Am I using a VPN?

VPN check

Likely VPN or proxy · Anthropic, PBC (AS16509)

More about your connection

How does VPN detection work?

A VPN (virtual private network) sends your traffic through an encrypted tunnel to a server run by the VPN service, so websites see that server’s IP address instead of yours. The result above shows whether your connection looks like it comes through a VPN, a proxy, a privacy relay or the Tor network.

How the check works

There is no flag that says “this is a VPN”, so the check combines several signals that VPN connections usually have:

  • The network you connect from. Every IP address belongs to a network with an AS number (ASN). Home and mobile connections come from internet providers, while VPN servers almost always run in data centres. Your network is compared with a list of hosting, cloud and colocation networks.
  • Privacy relays. iCloud Private Relay and Cloudflare WARP send traffic out through Cloudflare’s network, so they are reported separately.
  • Tor. Connections from Tor exit nodes are recognised directly.
  • Proxy headers. Some proxies announce themselves with headers such as Via or X-Forwarded-For.
  • Time zone. Your browser compares your device’s time zone with the time zone of your IP address’s location. A device in Zagreb with an IP address in New York is a strong hint of a VPN.

What the results mean

  • Not detected: none of the signals point to a VPN. Your connection looks like an ordinary home, office or mobile connection.
  • Likely VPN or proxy: you connect from a hosting or cloud network, shown with its name and AS number. VPNs and proxies are the most common reason, but not the only one.
  • iCloud Private Relay or Cloudflare WARP: your traffic leaves through a privacy relay.
  • Tor network: you are connected through Tor.
  • Possible VPN: the network looks ordinary, but your device’s time zone doesn’t match your IP address. Travelling with a laptop set to your home time zone causes the same result.

Why detection is never certain

A VPN is designed to look like any other connection. Services that rent residential IP addresses, new networks that are not on any list, and VPNs running on a home server are hard to tell apart from normal traffic. In the other direction, companies route staff through cloud security gateways, which look exactly like VPNs. Treat the result as a likelihood.

Checking that your VPN works

If you use a VPN to hide your location or IP address, this page is a quick test. With the VPN on, the ISP and location shown here should be the VPN provider’s, not your own. If you still see your own provider, the VPN isn’t routing your browser traffic. Also check the IPv6 address page: some VPNs only tunnel IPv4, and your IPv6 address can give away your real connection.

Frequently asked questions

What does Not detected mean?

Your connection comes from an ordinary internet provider, carries no proxy headers, and your device’s time zone matches your IP address. Most likely you are not using a VPN. VPNs that use residential IP addresses can still pass unnoticed, so this is not a guarantee.

My VPN is on but the check says Not detected. Why?

Some VPN services route traffic through residential or mobile IP addresses that look like normal home connections. Others use networks that are not yet on the hosting list. If your VPN is meant to hide your location, check that the location shown on this page is the VPN’s, not yours.

I'm not using a VPN but the check says Likely VPN. Why?

Your traffic leaves through a hosting or cloud network. That happens with workplace security gateways, cloud desktops, some antivirus web shields, and smaller providers that also run data centres. The check reports the network, not a certainty.

Is iCloud Private Relay a VPN?

Not exactly. Private Relay sends Safari traffic through two separate relays so that no single company sees both who you are and which sites you visit. It hides your IP address like a VPN does, but it only covers Safari and some app traffic, not your whole device.