How to fix a DNS leak
After a leak test shows an unexpected resolver, the fix is to send DNS only through the VPN or through a resolver you chose. The steps differ for browsers, operating systems, and VPN protocols.
Use this checklist after a standard or extended leak test. Re-run the test after each change instead of stacking several untested settings.
These instructions stay on your device. The linked leak test still runs in the browser against public endpoints.
How to use this tool
- Disable the browser’s automatic secure DNS while you diagnose.
- Reconnect the VPN and flush the local DNS cache.
- Run the leak test again and confirm resolvers match the VPN.
Re-test for DNS leaks
Frequently asked questions
Should I disable IPv6?
Only if your VPN does not cover IPv6 and leak tests keep showing an ISP IPv6 resolver. Prefer a VPN that handles both families.
Do I need to change DNS after I disconnect?
Yes if you added a dummy or VPN-only resolver on the physical adapter. Restore automatic DNS so ordinary browsing works offline from the VPN.
Related tools