IceVPN: The Leak Protection Most VPN Marketing Pages Skip

A VPN tunnel can handle every byte of IPv4 traffic correctly and still leak a device's real IP address through an IPv6 request the client never intercepts -- a gap independent leak tests keep finding on providers whose marketing pages otherwise read as thorough. IceVPN treats IPv6 leak protection and DNS leak protection as defaults, not advanced settings buried three menus deep.

Two Leaks, Closed By Default

IPv6 leak protection and DNS leak protection ship active out of the box. Neither requires manual configuration to actually work, which matters because a leak that only gets closed when a user finds the right toggle is a leak that stays open for most people most of the time.

A Kill Switch That Actually Cuts Traffic

When a VPN connection drops, the alternative to a kill switch is a silent fallback to the normal, unprotected connection -- often with no visible warning. IceVPN's internet kill switch cuts all traffic the instant the tunnel drops, rather than letting a device keep talking to the internet unprotected.

Split Tunneling For Everything Else

Not every application needs to route through a VPN, and forcing all of them through one tunnel wastes bandwidth on traffic that didn't need protecting. Split tunneling lets specific apps use the VPN while the rest of a device's traffic takes the normal path.

Coverage And Devices

67+ countries and 85+ cities are available as manual connection points, encryption runs at 256-bit across every connection, and up to 5 devices can stay connected at once. Native apps exist for Windows, macOS, Android, and iOS.

Testing Before Committing

10 free credits cover a real connection test before any card details enter the picture -- enough to check leak protection and kill switch behavior against a device's actual network setup.

Full breakdown of what each tier actually unlocks: read the audit here.