DNS leak test
DNS Leak Test
Checks whether your DNS queries go through the same network as your visible IP address — useful for verifying VPN or proxy DNS privacy.
Web exit
—
DNS resolvers
| IP | Country | ASN / Org | Matches web? |
|---|---|---|---|
| No data yet | |||
What is a DNS leak?
A DNS leak happens when domain name lookups bypass your VPN's encrypted tunnel and go straight to your default DNS resolver — typically one provided by your ISP. Even if your browsing traffic is encrypted and routed through the VPN, your ISP can still see every domain you look up, which defeats much of the point of using a VPN.
How this test works
We generate a few unique, random subdomains and ask your browser to resolve them. Each lookup must travel through whichever DNS resolver your system is currently configured to use. Our server logs which resolver(s) answered and compares their network location to the location of your visible (web) IP address.
How do I fix a DNS leak?
- Use a VPN client with built-in DNS leak protection enabled.
- Manually configure your VPN provider's DNS servers (or a trusted resolver like 1.1.1.1) while connected.
- On Windows, disable "smart multi-homed name resolution" which can bypass VPN DNS settings.
- Re-run this test after making changes to confirm the leak is gone.
See also am I using a VPN?, IP blacklist check, or your full public IP overview.