Free VPN Encryption Test & Security Overview
Inspect an OpenVPN or WireGuard configuration in your browser, or check the HTTPS encryption negotiated with a public server.
Inspect encryption
Inspect an OpenVPN or WireGuard configuration locally and measure the HTTPS encryption negotiated with a public server.
How to use this tool
Follow these steps to get observations you can interpret and act on.
Choose the evidence to inspect
Paste an OpenVPN or WireGuard client configuration, enter a public HTTPS hostname, or provide both.
Run the inspection
Configuration text is inspected locally. If you supply a hostname, the server attempts a real TLS handshake to that target.
Read each scope separately
Review configuration findings alongside the reported HTTPS protocol and cipher. Verify the actual VPN connection in your VPN client’s logs.
How the VPN encryption test works
The tool offers two separate checks: local inspection of a pasted VPN configuration, and an optional HTTPS handshake from our server to a public hostname. Keeping these scopes separate helps you avoid confusing website TLS with your VPN tunnel.
VPN configurations never leave your browser. A TLS handshake measures HTTPS from our server to your target; it cannot reveal the encryption of your device’s VPN tunnel.
Understanding your results
- Configuration directives describe intended settings; they do not prove which settings a running VPN tunnel negotiated.
- The HTTPS handshake describes the application-server-to-target connection. It cannot inspect the VPN encryption on your device.
- Missing or unsupported configuration details stay unverified. There is no invented encryption-strength score.
Privacy & important limitations
- Pasted VPN configuration text is not sent to the server. Use the clear button when you finish, especially on a shared device.
- Configurations can contain private keys and credentials. Avoid sharing the text or screenshots. Only the optional public target is sent for the TLS check.
Measured findings include their source and scope. An unavailable check is never counted as a pass, a threat or a score.
Frequently asked questions
Can this website see my active VPN cipher?
A web page cannot directly inspect your device’s VPN tunnel. Consult the VPN client’s connection details or logs for negotiated tunnel settings.
Do I need to paste a private key?
No private key is needed to understand the displayed configuration directives. Remove secrets from a copy of your configuration before inspecting it.