VPN Peek is a macOS menu bar utility categorized as a VPN leak detector, designed for privacy-conscious users who rely on virtual private networks to protect their online activity. Its core value lies in providing real-time verification that a VPN is functioning correctly, catching DNS and IPv6 leaks that could expose sensitive data. By sitting quietly in the menu bar, it offers continuous monitoring without disrupting workflow, making it an essential tool for anyone who needs to confirm their VPN is truly encrypting traffic. The app is developed by Anh Phong and is available exclusively for Mac, with a free tier covering basic leak detection and a one-time Pro upgrade for advanced features.
Many VPN users operate under the false assumption that once the VPN is connected, all traffic is automatically secured. In reality, DNS queries can bypass the tunnel if the system is misconfigured, and IPv6 traffic may leak out when the VPN only covers IPv4. These leaks reveal the user's real IP address and browsing habits to their ISP or third parties, undermining the entire purpose of using a VPN. VPN Peek addresses this pain point by actively monitoring network interfaces and DNS configurations, alerting the user the moment a leak is detected, so they can take corrective action before their privacy is compromised.
The first major feature group includes free capabilities such as VPN connection detection, which displays the interface name and provider of the active tunnel. The public IP address is shown with a one-click copy button for quick verification. Two critical tests—DNS leak test and IPv6 leak test—return a simple pass or fail result, giving immediate feedback on the VPN's effectiveness. Auto-refresh ensures the display updates automatically when network changes occur, and the app can launch at login for always-on protection. These features work together to provide a straightforward, no-fuss way to confirm your VPN is doing its job.
For users who need deeper insight, the Pro upgrade (one-time purchase of $3.99) unlocks a full DNS server list with provider names such as Cloudflare, Google, and Quad9, making it easy to see exactly which servers are handling queries. IP geolocation and ISP details are also displayed, offering context about the exit node. Notifications can be configured to alert when the VPN disconnects or a leak is detected, ensuring users never miss a critical event. Six menu bar icon styles and display format options allow customization, while the adjustable refresh interval (from 30 seconds to 10 minutes) balances battery life with monitoring frequency.
admin
Additional capabilities include Split Tunnel Mode, which silences warnings for traffic intentionally routed outside the VPN tunnel—helpful for users who combine VPN with local resources. A Trusted DNS Whitelist reduces false positives by allowing known trusted DNS servers to be excluded from leak alerts. The app can also copy a full protection report to the clipboard, summarizing connection status, DNS servers, and leak test results for troubleshooting or record keeping. Version 2.0.1 added a Diagnostics tab in Settings and VoiceOver accessibility support, broadening the app's usability for users with disabilities.
VPN Peek works by reading the Mac's network interfaces using the native getifaddrs() function and querying DNS configuration through SystemConfiguration. It detects active VPN tunnels—supporting protocols like WireGuard, OpenVPN, IKEv2, L2TP, and PPTP—by identifying virtual interface names. The app then fetches the public IP address from a third-party geolocation API and compares detected DNS servers against a known list of providers. If any DNS queries or IPv6 traffic are routed outside the tunnel interface, the menu bar icon changes color and a notification is sent. This low-level approach ensures compatibility with any VPN client that creates a tunnel interface on macOS.
In practice, a remote worker connecting to a corporate VPN can use VPN Peek to confirm that DNS queries for internal resources remain within the tunnel, preventing data leaks. A journalist investigating sensitive topics can run the app to verify their IP address is masked before browsing. IT security professionals managing multiple Macs can rely on the protection report to audit VPN configurations. Even casual users on public Wi-Fi can benefit from the advance warning the app provides, giving them time to disconnect or reconfigure their VPN. The outcome in every case is increased confidence that the VPN is providing the expected privacy protection.
VPN Peek is designed for Mac users running macOS 14 (Sonoma) or later, and it works with any VPN client that creates a tunnel interface. The free version covers essential leak detection, while the Pro upgrade adds advanced features like DNS server details, geolocation, and notifications for a one-time fee of $3.99—no subscription required. The developer, Anh Phong, emphasizes privacy by not collecting any data; the app has no accounts, no tracking, and no analytics. For anyone serious about VPN verification, VPN Peek combines simplicity, power, and trust into an indispensable menu bar companion.
Privacy-conscious Mac users running macOS 14 or later who rely on VPNs for online security and anonymity. This includes remote workers verifying corporate VPN integrity, journalists protecting sources, IT professionals auditing network configurations, activists evading surveillance, and everyday users connecting to public Wi-Fi. The free tier suits casual users, while the Pro upgrade appeals to power users who need detailed DNS server information and customizable alerts. VPN Peek is compatible with any VPN client that creates a tunnel interface, making it accessible to anyone using WireGuard, OpenVPN, IKEv2, L2TP, or PPTP on their Mac.