What is a DNS leak?
DNS translates names into addresses. If those lookups skip your VPN or privacy DNS service, an observer who can see the resolver traffic may learn which sites you resolve even while the browser looks connected elsewhere.
Read this page before you interpret a leak-test result. The goal is to understand the difference between web traffic and DNS traffic, and why encrypted browser DNS can still be a leak relative to a VPN.
This is an explanatory page. Running the linked test contacts third-party leak-test services from your browser.
How to use this tool
- Note the public IP your browser uses for websites.
- Run a DNS leak test and list the resolver addresses.
- Compare those resolvers with the DNS servers your VPN or privacy service is supposed to use.
Run a DNS leak test
Frequently asked questions
Is using Cloudflare or Quad9 always a leak?
No. Many VPNs send DNS to those services on purpose. A leak is a resolver you did not choose, most often the access ISP.
Does this prove someone is logging my browsing?
No. It shows which resolvers answered. Logging policy belongs to that resolver operator.
Related tools