DNS leak test: which DNS servers does your browser use?

Before your browser can open a website, a DNS server has to turn the name into an address. This test shows which DNS servers do that for you, with their country and network, next to your own IP address. If you use a VPN and the DNS servers belong to your internet provider or sit in another country, your lookups are leaking outside the VPN. The results are not stored.

The results are kept for five minutes so this page can read them, then deleted.

What is a DNS leak?

A VPN should carry everything your device sends, including the DNS lookups that turn names like example.com into addresses. When those lookups still go to your internet provider’s DNS servers, the provider can see every site you visit, even though the pages themselves travel through the VPN. That is a DNS leak.

How to read the result

  • Same country as your IP address: the usual result, with or without a VPN.
  • Different country from your IP address: if you use a VPN, your DNS lookups are probably not going through it.
  • Your internet provider’s name in the network column while a VPN is on: a classic DNS leak.
  • Several servers: normal. Large DNS services answer from many addresses.

How to fix a DNS leak

  • Turn on the DNS leak protection or "use VPN DNS" option in your VPN app.
  • Turn off "secure DNS" or a custom DNS setting in the browser while the VPN is on, unless it is the VPN’s own DNS.
  • On Windows, turn off "smart multi-homed name resolution" if your VPN app tells you to.
  • Run this test again after each change.

DNS is not the only leak

Your browser can also reveal your real address through WebRTC, even when DNS and normal traffic go through the VPN.

Check whether your browser leaks your real IP: WebRTC leak test →

Frequently asked questions

What does a DNS leak test show?

The DNS servers that looked up names for your browser during the test, with their country and network, so you can compare them with your own IP address and your VPN.

Is it a leak if the DNS server is Google or Cloudflare?

Not necessarily. It means your device or browser is set to use that DNS service. With a VPN on, check that this is what you chose; if not, the lookups are bypassing the VPN.

Why do I see more than one DNS server?

DNS services use many servers. The ones you see are those that handled this test; the list can change from one run to the next.

Do you store the results?

No. They are kept for five minutes so the page can read them, then deleted.

Check the other leaks too

A VPN can hide your address for normal browsing while WebRTC still reveals it to every website.

Run the WebRTC leak test