Tunnel CheckerLEAK WATCH

Is your VPN actually protecting you?

A home-screen widget for Android that shows where your traffic really exits, and catches DNS, WebRTC and IPv6 leaks the moment they happen.

Android 12+ · no account · no ads · no tracking

Every 15 minutes, and on every network change

Six checks, one glance

Your VPN app says "connected". Tunnel Checker tests what actually leaves your phone, independently of any VPN provider, and colours each answer green, amber or red.

Exit IP on a map

Where websites think you are, who owns that address, and how accurate the location is.

198.51.100.7 · London · VPN exit

VPN really routing

Connected is not enough: it flags a tunnel that's up while your IP still belongs to your own ISP.

On · exits via your ISP

DNS leak

Ten unique lookups reveal exactly which DNS servers answer for you, and whose networks they're on.

2 resolvers · none on your ISP

WebRTC leak

A STUN request over UDP, the same way a browser's WebRTC finds your address.

UDP exit = VPN exit ✓

IPv6 leak

Catches IPv6 traffic slipping past an IPv4-only tunnel, a common WireGuard gap.

AllowedIPs: 0.0.0.0/0, ::/0

Wi-Fi security

Open, WEP, WPA2 or WPA3, plus channel, band, width and signal. Open hotspots are fine when the VPN covers you.

WPA3 · ch 36 · 5 GHz · 80 MHz
Built for home VPNs

Knows the difference between "home" and "leaking"

Most leak checkers assume a commercial VPN that exits somewhere else. Run WireGuard back to your own router, or a VPN client on the router itself, and they cry wolf. Tell Tunnel Checker your home address and it gets it right.

  • Self-hosted VPN: away from home, traffic exiting at your house shows as "On · via home".
  • Router VPN: on your home Wi-Fi with the router's VPN client, the widget shows "Home VPN · router".
  • Works with GL.iNet, OpenWrt, pfSense, OPNsense, UniFi, and any WireGuard or OpenVPN setup.
Private by design

A security app that doesn't watch you

Tunnel Checker has no servers of its own and nothing to sign up for.

  • No account, no ads, no analytics, no crash tracking.
  • Settings and results stay on your phone. Uninstall and they're gone.
  • IP lookups use your own free ipapi.is key, straight from your phone.
  • Location is only used on the phone, to read your Wi-Fi name. It's never sent anywhere.
  • Read the privacy policy
Free, with a one-time Pro upgrade

Every check is free

Pro is a single purchase, not a subscription. It adds alerts and lets you shape the widget.

FeatureFreePro
Exit IP map, VPN status and all seven checks✓✓
Self-hosted and router VPN support✓✓
Resizable widget, cover-screen tile, tap-to-page✓✓
Alerts when the VPN drops or a leak appears–✓
Widget pages 2 and 3, arranged with sliders–✓
Map styles, colours, fonts and text size–✓

Pro: £3.99 once, through Google Play.

Coming to Google Play

Help test it first: Android 12 or later, any VPN (or a home WireGuard setup). Testers get Pro free.

Email contact@mailmyemail.com with the Google account you use on Play.