DNS leak test
Before your browser opens a site, a DNS server turns its name into an address. This page makes your browser look up a unique test name on our server and shows which DNS server asked for it.
Checking your browser…
How the DNS test works
Before your browser opens a site, a DNS server turns the name into an address, so that server learns which sites you visit. Behind a VPN the lookups should go through the VPN too. When they go to your normal provider instead, it is called a DNS leak.
This page makes your browser look up a unique test name that only our own DNS server can answer. Our server notes which DNS server asked for that name, and the page shows it with its network and country, then compares it with the address the page was loaded from.
How to read the result
- DNS servers: the servers that asked for the test name, usually one or two. Large public services (such as Cloudflare or Google DNS) serve people everywhere, so they are not counted as a leak.
- No leak: the server belongs to the same network as your IP, is a public DNS service, or is in the same country.
- Leak: the server belongs to a provider in another country than your IP, which usually means the lookups go around the VPN to your home provider.
- The test did not run: secure DNS settings, some extensions and networks can stop the test name. Try again in a minute.
Further reading
- Is my VPN working: all the checks together
- DNS leak: what it is and why it matters with a VPN
- WebRTC leak: what it is and how to check
- Why websites notice your VPN by time zone
- My IP and anonymity check
Frequently asked questions
- How do I fix a DNS leak?
- Turn on the DNS leak protection in your VPN app, or set the DNS of your system or browser to the VPN's own servers or to a public service you trust. Then run this test again.
- Does secure DNS (DNS over HTTPS) prevent leaks?
- It encrypts the lookups, so your provider cannot read them, but the DNS service you chose still sees them. This page shows which service that is.
- Why do I see two or three DNS servers?
- Big DNS services spread lookups over many machines, and one test can reach more than one of them. That is normal.
- Is anything stored?
- No. The test name lives for a few minutes on our DNS server to match the answer, then it is dropped; only daily sums are counted, without the checks themselves.