Not sure if your DNS is leaking? Find out in seconds.
How VPNs Can Still Leak DNS Requests
A VPN encrypts your internet traffic and routes it through a secure server, but this doesn't automatically mean your DNS queries are protected. Many VPNs — especially free or poorly configured ones — allow DNS requests to escape through your regular network connection. When this happens, your ISP can see every website you visit, even though the rest of your traffic is encrypted.
DNS leaks through a VPN typically happen for three reasons: the VPN software doesn't override your system's DNS settings, the operating system sends DNS queries over multiple network interfaces simultaneously, or the VPN connection drops momentarily and DNS traffic is sent unprotected before the kill switch activates.
Why This Is Dangerous
If your VPN has a DNS leak, you lose one of the main benefits of using a VPN in the first place: privacy. Your ISP can log which websites you visit and when, advertisers can build profiles based on your browsing habits, and in some countries, government agencies can request your browsing history from your ISP. A DNS leak effectively renders your VPN useless for privacy, even though your actual traffic data remains encrypted.
For a deeper explanation of the mechanics, read what is a DNS leak.
How to Test if Your VPN Has a DNS Leak
Testing is straightforward. Connect to your VPN, then run our free DNS leak test. The results will show you which DNS servers are handling your queries. If the servers belong to your ISP instead of your VPN provider, you have a DNS leak.
It's worth testing on multiple devices and networks. A VPN that works correctly on your desktop may still leak on your phone, or behave differently on public WiFi versus your home network. See our guide on DNS leaks on public WiFi for more on this.
What to Look for in a VPN That Prevents Leaks
- Built-in DNS leak protection — the VPN should force all DNS queries through its own servers.
- Kill switch — blocks all internet traffic if the VPN connection drops, preventing DNS leaks during reconnection.
- IPv6 leak protection — blocks or tunnels IPv6 traffic to prevent IPv6 DNS leaks.
- No-log DNS servers — the VPN provider should operate its own DNS servers and not log queries.
For VPN recommendations, check our best VPNs for DNS leak protection guide. To fix an existing leak, follow our step-by-step DNS leak fix.
Not sure if your DNS is leaking? Find out in seconds.