DNS leak test

Which resolver is really handling your DNS?

Every site you visit starts with a DNS lookup. Whoever answers it sees every domain you request. This test makes your browser look up unique names on our own name server, so we can show you which resolver actually did the asking, and whether it matches your VPN.

What leaves your browser

Your browser resolves a few one-time hostnames under our domain. The lookups travel through whatever DNS resolver your system uses, and our own name server notes which resolver asked. That record lives in memory for a few minutes and is never tied to you. Verify in the source.

Fix a DNS leak

Make sure your VPN handles DNS

A leak means your DNS is going outside the tunnel, often to your ISP. Enable your VPN's own DNS, or turn on its leak protection, then re-run this test.

Use encrypted DNS

DNS over HTTPS or TLS (for example Cloudflare 1.1.1.1 or Quad9) stops your ISP from seeing and selling your lookups even without a VPN.

These are unpaid recommendations chosen on merit. If that ever changes, this line will say so.