Question 1

What is a DNS leak?

Accepted Answer

A DNS leak happens when your device's DNS lookups — the requests that turn a domain name into an IP address — go to a resolver outside your VPN tunnel, usually your ISP's. Even with an encrypted VPN, a DNS leak lets your ISP (or anyone watching those queries) see which sites you visit.

Question 2

How does this test work?

Accepted Answer

Your browser is asked to resolve a handful of unique, one-time hostnames on our domain. Our authoritative nameserver records which DNS resolvers asked about them. If those resolvers belong to more than one network, some of your DNS is likely bypassing your VPN. The test never loads a page on those hostnames — it only needs the lookup to happen.

Question 3

Does this store my data?

Accepted Answer

No. The test uses random one-time hostnames tied to a short-lived token, and it doesn't require a login. We show you the resolvers that answered and don't retain a profile of your checks.

Question 4

How do I fix a DNS leak?

Accepted Answer

Use your VPN's built-in DNS instead of your system's, and turn on its leak protection and kill switch. On desktop, disable IPv6 if your VPN doesn't tunnel it, and avoid setting a manual third-party DNS that sits outside the tunnel.

DNS Leak Test

How this works