DNS Leak Test Tool
Check if your DNS requests are leaking outside your VPN tunnel
This tool checks if your DNS requests are being properly routed through your VPN or if they're leaking to your ISP's DNS servers, potentially compromising your privacy.
DNS Status Unknown
Click "Start DNS Leak Test" to check your DNS configuration.
DNS server results will appear here after running the test...
DNS server locations will be displayed here
Your Connection Information
Understanding DNS Leaks
Learn how DNS leaks can compromise your privacy and how to prevent them
DNS (Domain Name System) leaks occur when your DNS requests bypass the encrypted tunnel of your VPN and are sent directly to your ISP's DNS servers. This can expose your browsing activity even when you think you're protected by a VPN.
Why DNS Leaks Matter
When you use a VPN, all your internet traffic should be encrypted and routed through the VPN's servers, including DNS requests. If DNS leaks occur:
- Your ISP can see which websites you're visiting
- Your real location may be exposed
- Your browsing activity can be tracked and logged
- You lose a significant portion of the privacy protection a VPN should provide
Common Causes of DNS Leaks
- Improper VPN configuration: Your VPN client isn't set to handle DNS requests
- IPv6 leaks: Your VPN only routes IPv4 traffic but your system uses IPv6
- Operating system issues: Windows, in particular, may ignore VPN DNS settings
- Split tunneling: Some traffic is routed outside the VPN tunnel
- WebRTC leaks: Browser APIs can expose your real IP address
How to Fix DNS Leaks
- Use your VPN's DNS servers: Ensure your VPN client is configured to use its own DNS servers
- Disable IPv6: If your VPN doesn't support IPv6, consider disabling it temporarily
- Use DNS leak protection: Many premium VPNs include this feature
- Install a reliable VPN client: Some VPNs have better leak protection than others
- Use a browser extension: To prevent WebRTC leaks specifically
- Check your VPN settings: Ensure "kill switch" and DNS leak protection are enabled
Types of DNS Servers
Understanding different DNS server types and their privacy implications
| Type | Description | Privacy Level | Examples |
|---|---|---|---|
| ISP DNS | Provided by your Internet Service Provider | Low - Your ISP can log all requests | Varies by ISP |
| Public DNS | Free, public DNS resolvers | Medium - May log some data | Google (8.8.8.8), Cloudflare (1.1.1.1) |
| VPN DNS | Provided by your VPN service | High - Should be encrypted within VPN tunnel | Varies by VPN provider |
| Encrypted DNS | Uses DNS-over-HTTPS or DNS-over-TLS | High - Encrypts DNS requests | Cloudflare, NextDNS, Quad9 |
| Privacy-focused DNS | Designed with privacy as priority | Very High - No-logs policy | Quad9, AdGuard DNS |
For more detailed information about DNS privacy and VPN security, check out our DNS Leaks and Privacy and VPN vs DNS for Privacy blog posts.