DNS Leak Test

A DNS leak happens when your VPN is on but your DNS lookups still go to your ISP's resolver, revealing the websites you visit. Testing for leaks means finding out which resolvers your device actually uses.

Tool status: Requires a separate server Cannot run reliably on shared hosting or in a browser. See the page for the planned approach.

DNS leak testing needs a dedicated DNS server

This test is not yet available. We will not show a guessed result. In the meantime, the steps under “Troubleshooting” below show how to protect yourself from DNS leaks today, and these related checks work now:

WebRTC Leak Test VPN / Proxy Detection DNS Comparison

What this tool can and cannot do

A genuine DNS leak test needs us to run our own authoritative DNS server: your browser looks up random, unique names under our domain, and our DNS server records which resolver asked for each one. That requires a dedicated server listening on port 53, which shared web hosting cannot provide. It is planned for a later phase on a small VPS. We will not show an estimated or guessed result in the meantime.

Data sources: Requires a dedicated authoritative DNS server (planned)

Understanding the results

When the test is live, you will see the IP and operator of each resolver that handled your queries. If you use a VPN and see your ISP's resolvers, your DNS is leaking.

Troubleshooting

  • Enable "DNS leak protection" in your VPN app.
  • Turn on secure DNS in your browser: Chrome (Settings › Privacy and security › Security › Use secure DNS), Firefox (Settings › Privacy & Security › DNS over HTTPS), Edge (Settings › Privacy › Use secure DNS).
  • On Windows 11 and recent macOS/iOS/Android you can set encrypted DNS system-wide.

Frequently asked questions

Does encrypted DNS replace a VPN?

No. Encrypted DNS hides your lookups from the local network and ISP, but the ISP can still see which IP addresses you connect to.