Donate
BETA

DNS Leak Test

Check if your DNS requests leak outside your VPN tunnel

What is a DNS leak?

A DNS leak happens when your queries go to your ISP resolver instead of your VPN resolver. Even if your visible IP changes, leaked DNS can still expose provider and location patterns.

How to run a DNS leak test

  1. Capture baseline details on the homepage IP checker (IP, ISP, ASN).
  2. Connect your VPN and repeat the same checks.
  3. Compare ASN/provider signals with ASN Lookup and Proxy Check.
  4. Validate resolver behavior with DNS Lookup and confirm hostname consistency via Reverse DNS.

How to fix DNS leaks

  • Enable DNS leak protection and kill switch in your VPN app.
  • Disable conflicting custom DNS settings in the OS/browser.
  • Review split tunneling rules for browser and resolver apps.
  • Keep one DNS strategy: VPN DNS or trusted encrypted DNS.

After changes, run the same before/after checks again. You want consistent VPN indicators across IP, ASN, and DNS context.

What to do next after a DNS leak check

Continue with browser-level checks, routing verification, and a full VPN checklist.

Frequently asked questions

What is a DNS leak test?
A DNS leak test checks whether your resolver traffic stays inside the VPN path or leaks to ISP/public resolvers outside the tunnel.
Can I leak DNS even if my IP changes?
Yes. Your public IP can change while DNS queries still leak outside the VPN tunnel.
How often should I test for DNS leaks?
Test after VPN app updates, OS network changes, and when switching between Wi-Fi and mobile/hotspot networks.
Do browser settings affect DNS leaks?
Yes. DNS-over-HTTPS and extension routing behavior can bypass VPN DNS settings in some configurations.
What should I do after I detect a leak?
Enable leak protection features, adjust DNS/split tunneling settings, then re-run the same checks until results are consistent.