How to Stop IPv6 Leaks on Windows, Mac, and Linux

Concrete OS settings to disable or contain IPv6 so your VPN cannot be bypassed. Windows Settings → Network → your adapter → Edit IP assignment → set IPv6 to Off for a quick test, or uncheck Internet Protocol Version 6 in adapter properties. Reconnect VPN and verify no public IPv6 appears. macOS System Settings → Network → Details → TCP/IP → Configure IPv6 → Off (where available). On some versions use networksetup. Always retest WebRTC and IP tools after changes. Linux Disable IPv6 sysctl temporarily: sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1 . Prefer VPN configs that add IPv6 blackhole routes. NetworkManager users should avoid profiles that restore IPv6 default routes. When not to disable IPv6 permanently If your network is IPv6-only or your VPN supports IPv6 end-to-end, keep IPv6 and ensure it is tunneled. Disabling is a containment tactic, not the only architecture. Verify After changes, confirm: VPN IPv4 only (or VPN IPv6), no ISP IPv6 on leak tests, and no local IPv6 in WebRTC. See also our IPv6 leak explainer . Protect yourself with AstraGuard VPN AstraGuard VPN helps keep DNS inside the tunnel with strong encryption, kill switch options, and simple setup on desktop and mobile. Create an account , pick a plan on packages , then verify on privacy tools .