- Edited
Leaks occur when:
- You still use ISP DNS
- Change to VPN DNS
- WebRTC is enabled in your browser
- Disable it
- VPN disconnects and by default there is no 'kill switch'
- Use ufw for example and set rules so traffic can only go over tun0
https://ipleak.net can help you test for leaks.
Edit:
btw VPN specific applications like the one for PIA do what I listed above, they just don't require you to know how.