Find out which DNS servers handle your internet lookups. If you use a VPN and see your own internet provider's servers here, your DNS is leaking — and your ISP can see every website you visit.
How to use the DNS Leak Test
- Connect to your VPN (if you use one).
- Click Standard test, or Extended test for a more thorough check.
- Review the list of DNS servers, their provider and country.
- If you see your real ISP while connected to a VPN, fix the leak and test again.
How the DNS leak test works
Your browser looks up several unique, random hostnames under a domain whose DNS we operate. Those lookups can only reach our nameserver through the DNS resolvers your device actually uses, so our server records their IP addresses. We then show each resolver with its provider (ISP) and country.
The extended test performs more lookups to catch resolvers that are only used occasionally, such as a secondary server or an operating system fallback.
What is a DNS leak?
When you type a web address, your device asks a DNS resolver to translate it into an IP address. With a VPN, these requests should travel through the encrypted tunnel to the VPN's resolver. A DNS leak happens when they bypass the tunnel and go to your ISP's resolver, revealing the sites you visit even though your traffic is encrypted.
How to fix a DNS leak
Turn on the DNS leak protection option in your VPN app; disable IPv6 or use a VPN that tunnels it; turn off Windows "Smart Multi-Homed Name Resolution"; or set your browser to use secure DNS (DNS over HTTPS) with a provider you trust. Then run the test again.
Frequently asked questions
Why do I see Google or Cloudflare servers?
Your device, router or browser is set to use a public resolver such as 8.8.8.8 or 1.1.1.1, or your browser's secure DNS (DoH) setting is on. That is normal and not a leak unless you expected your VPN's DNS.
Why are there several DNS servers?
Large resolvers such as Google Public DNS use many servers in the same location; one lookup may be handled by any of them. Seeing several from the same provider is normal.
Is it a leak if I'm not using a VPN?
No. Without a VPN it is expected to see your ISP's or your chosen public resolver. The test is mainly useful for checking a VPN or privacy setup.
Do you log my browsing?
No. We only receive the random test hostnames generated for this test, and results are deleted automatically after 10 minutes.