Diagnostic
What it checks, and what it sends
Settings → Run diagnostic, in any Shield app. The checks run in order, outward from your device, so the first failure is the one that matters.
The checks
- Network reachable
- Control plane reachable
- Entitlement valid
- Relay handshake
- Kill switch installed
- DNS resolving inside the tunnel
- MTU probe
- IPv6 state
What the report contains
Check names and whether each passed, error classes, your operating system and app version, the MTU value and the IPv6 mode. It does not contain your email, your credentials, the relay address, your tunnel address, or a precise time.
The app shows you the exact text before you copy it. Nothing is uploaded, and support has no way to fetch it — we can only read what you choose to paste.