Step 1: Change Your DNS Servers
Open Settings → Network & Internet → Advanced network settings → Change adapter options. Right-click your active connection → Properties → Internet Protocol Version 4 → set DNS to:
- Cloudflare: 1.1.1.1 / 1.0.0.1
- Google: 8.8.8.8 / 8.8.4.4
- Quad9: 9.9.9.9 / 149.112.112.112
Step 2: Flush Your DNS Cache
Open Command Prompt as Administrator and run:
ipconfig /flushdns
Step 3: Disable Smart Multi-Homed Name Resolution
Windows can send DNS queries over all network adapters simultaneously. Disable this in Group Policy Editor: Computer Configuration → Administrative Templates → Network → DNS Client → Turn off smart multi-homed name resolution → Enabled.
Step 4: Use NordVPN
The easiest solution is NordVPN. Its Windows app has built-in DNS leak protection and a kill switch that blocks all traffic if the VPN drops — no manual configuration needed.
Step 5: Test Again
Run our DNS Leak Checker to confirm your Windows machine is no longer leaking DNS.