VPN privacy, configuration and network tools

Inspect connection signals, validate VPN and proxy configurations locally, diagnose public endpoints and choose a suitable protocol. Config validators run in your browser; they do not upload UUIDs, passwords, private keys or QR payloads.

Compare protocol catalogs Read setup guides Checker methodology

Privacy & Leak Tests

What is my IP? Inspect the public IPv4 or IPv6, network owner, approximate location and before/after VPN state visible to websites. WebRTC Leak Test Classify host, server-reflexive and relay ICE candidates without storing the addresses. VPN Leak Test Run one privacy dashboard for public IP, IPv6 and WebRTC signals.

Config Validators

OpenVPN Config Validator Parse an .ovpn profile locally and flag certificate, cipher, compression, script and directive risks. Multi-protocol Config Validator Validate VLESS, VMess, Trojan, Shadowsocks, Hysteria2, TUIC and AnyTLS share links locally. WireGuard Config Validator Review WireGuard and AmneziaWG routing, DNS, peer and key structure entirely in the browser.

Network Diagnostics

Port & TLS Check Resolve public addresses, measure TCP/TLS connection timing and inspect HTTPS or certificate signals. TLS Certificate Checker Inspect SNI, protocol, cipher, subject, issuer, SANs, hostname match and certificate expiry. VPN MTU Advisor Diagnose fragmentation symptoms and calculate a clearly labelled MTU recommendation without claiming browser PMTUD.

Server Selection

Best Server for My Location Filter verified protocol catalogs and explain recommendations using checker measurements and freshness. VPN Protocol Selector Choose one to three protocol options from device, UDP, censorship, roaming, speed and router needs.

Utilities

IP Lookup Validate an IPv4 or IPv6 address and inspect network, ASN, reverse DNS, bogon and catalog signals. VPN Config QR Code Generate and clear a QR code locally for supported VPN and proxy configuration formats.

How these tools handle sensitive data

OpenVPN, WireGuard and multi-protocol configuration text is parsed locally by browser JavaScript. Analytics receives only an allowlisted tool name, protocol, result state or error code—never an IP address, hostname from a private config, UUID, password, private key, config text or QR payload.

Network probes run on the PublicVPNList backend only when a remote public host must be contacted. Those endpoints reject private, loopback, link-local, reserved and metadata-network addresses, resolve a hostname before connecting, apply request and connection limits, and never claim that a TCP probe proves a VPN tunnel works.

Related protocol catalogs and guides

Use a tool result as one signal, then compare it with a recently verified catalog row and protocol-specific setup guidance.

VLESS catalog Trojan catalog VMess catalog Shadowsocks catalog Hysteria2 catalog WireGuard guide Public VPN risks