Standard vs extended DNS leak tests
A leak test works by resolving freshly generated names so you can see which DNS servers answer. One round is usually enough to spot an obvious leak. Extra rounds give load-balanced resolver pools more chances to appear.
Use the standard test after you connect a VPN. Use the extended test when you need a more complete list of recursive resolvers, such as when a provider operates many anycast nodes.
Both modes only contact public leak-test endpoints from this browser. ipdet.app does not keep the resolver list unless you create a report.
How to use this tool
- Run a standard test for a first look at DNS exits.
- If the resolvers match your VPN or chosen DNS service, you are done.
- Run an extended test when you need more samples from the same resolvers.
Run a leak test
How the queries work
Each lookup uses a unique hostname so caches cannot reuse an old answer. The service then reports the resolver address that asked for that name.
A single configured resolver, such as a public DNS anycast address, may still be served by several physical servers. Extra rounds are how those extra addresses show up.
When to use each mode
Standard mode sends one round of lookups across several independent leak-test services. It is the faster check and is enough after connecting a VPN.
Extended mode repeats six rounds. It takes longer and is for users who want a fuller picture of every recursive server that answered.
Frequently asked questions
Does a longer test change my IP address?
No. It only repeats DNS lookups. Your public web IP is shown separately in the greeting above the buttons.
Why did extended mode find more servers?
Anycast and load balancing can send each query to a different recursive node. More unique names make those extra nodes more likely to appear.
Related tools
