DNS Leak Test
A DNS leak happens when your domain lookups go somewhere you did not expect, such as your ISP, even while a VPN is connected.
What DNS does
DNS turns a domain name like example.com into an IP address your device can connect to. Without DNS, browsers would not know where to send most web requests. Because DNS reveals which domains you ask for, it can expose useful browsing metadata even when the page content itself is encrypted with HTTPS.
Why DNS leaks matter
If you connect to a VPN but your DNS requests still go to your ISP, the VPN is not protecting as much as you may think. Websites may see the VPN IP, but your ISP or local network could still see domain lookups. This is especially important on public WiFi, school networks, work networks, or any connection you do not control.
How to check
First, check your IP address with the VPN disconnected. Then connect your VPN and check again. Your visible IP should change. Next, run a DNS leak test and look at the DNS servers listed. If they belong to your ISP, your VPN app or operating system DNS settings may need attention.
How to reduce DNS leaks
- Use a VPN app that includes DNS leak protection.
- Enable the VPN kill switch if available.
- Avoid manually setting ISP DNS while relying on a VPN.
- Retest after changing VPN server, browser, or network.