A DNS leak test will show if your internet traffic is being routed through your chosen DNS.
How to read your results
You may have a DNS leak if:
Any of the IPs or countries match your public IP or location.
The DNS servers are different from the ones your privacy tool provides.
If you’re connected to NordVPN and suspect a DNS leak, contact support.
Connected to NordVPN
Your DNS servers:
IP address | Provider | Country |
|---|
Placeholder | Placeholder | Placeholder |
Loading…
Secure your internet traffic and prevent DNS leaks with NordVPN.
Get NordVPN
DNS leak test failed
Please refresh the page to try again.
What is a DNS leak?
The domain name system (DNS) is like the phonebook of the internet. It translates easy-to-understand website names (like google.com) into IP addresses (like 192.0.2.1) that devices use to locate each other. But a DNS leak is an online security flaw that occurs when your computer sends DNS requests to the wrong server, potentially revealing your browsing activity and compromising your online privacy. If you’re using a VPN or a proxy service, a DNS leak may show that your virtual private network isn’t working properly. However, DNS leaks can happen even if you’re not using a VPN. DNS affects almost everything you do online, so finding and fixing DNS leaks immediately is key.
What causes a DNS leak?
A DNS leak may happen for several reasons, such as:
Misconfigured network settings
Software updates or manual changes to the network settings could cause a device to use the wrong DNS servers.
VPN or proxy services
Some VPNs may have misconfigured DNS settings or use servers outside of the intended network.
Malware
Malware can alter the DNS settings of a device and redirect DNS queries to unauthorized servers.
DNS spoofing
An unauthorized party may carry out a cyberattack by intercepting DNS queries and providing false responses.
Third-party applications
Some apps or services installed on a device may alter DNS settings or intercept DNS queries.
ISP DNS redirection
Some internet service providers may redirect DNS queries to monetize user traffic, potentially bypassing the user’s configured DNS server.
What are the types of DNS leaks?
Standard DNS leak:
A device sends DNS queries to an unintended DNS server (e.g., an unsafe public server or an untrusted third-party DNS server).
IPv6 DNS leak:
A device uses the IPv6 protocol to send DNS queries. However, because not all VPN or proxy services support IPv6, these queries may be sent to an unintended DNS server.
WebRTC leak:
WebRTC is a communication protocol used for video and voice chats that may inadvertently reveal the user’s IP address or DNS requests.
Router DNS leak:
Misconfigured DNS settings on a router may lead to the device sending DNS queries to unintended DNS servers.
What are the dangers of a DNS leak
A DNS leak is a significant security flaw that can expose your activities online. Here are some of the dangers of a DNS leak:
Government surveillance
In countries controlled by authoritarian regimes, maintaining increased anonymity and privacy is a matter of life and death. DNS leaks would expose the user’s internet usage to the government watchdogs.
Phishing attacks
A DNS leak could reveal the websites you visit to cybercriminal, enabling them to target you with phishing attacks or malware.
Loss of privacy
Security tools, such as a VPN, hide your IP address and your browsing from your ISP (internet service provider) and a variety of eavesdropping companies. A DNS leak could expose your privacy without you even knowing.
Why should you test for DNS leaks?
Checking for DNS leaks helps protect your privacy and ensure that your internet browsing activity is not exposed to unauthorized and potentially malicious parties. You should check for DNS leaks regularly to verify your DNS requests go where they should and that your online activity remains private.
How do you test for DNS leaks?
The easiest way to detect a DNS leak is using a specially designed DNS leak test. NordVPN’s DNS leak test tool checks for DNS leaks and shows whether your internet traffic is routed through your chosen DNS or going elsewhere. It’ll also explain how to read the test results.
How to fix and prevent DNS leaks
Use a VPN with DNS leak protection
Choose a VPN provider that has DNS leak protection enabled by default and uses its own DNS servers. NordVPN prevents DNS leaks by only using company-operated DNS servers. It sends all your DNS queries over an encrypted tunnel and resolves them on the same VPN server you’re connected to.
Configure your DNS settings
Make sure the DNS servers are set to the correct values. If you’re not sure what DNS servers you should use, contact your internet provider or use public DNS servers like Google DNS or OpenDNS.
Disable IPv6
If you are experiencing an IPv6 DNS leak, disable IPv6 on your device.
Clear your DNS cache
Sometimes, devices use outdated or incorrect DNS information. Clear your cache by running the “ipconfig /flushdns” command (Windows) or “sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder” command (macOS).
Update router firmware
You can fix a router DNS leak by updating the firmware on your router to ensure it’s using the correct DNS settings.
How does NordVPN help protect you from a DNS leak?
Your ISP and various third-party companies know your location, the websites you visit, and might even know what you buy online. You can prevent them from tracking you online by using NordVPN. This way, your online traffic, including DNS requests, passes through NordVPN’s encrypted servers ensuring the websites you visit or even your ISP can’t follow you around.
Get NordVPN
Frequently asked questions
What is a DNS leak test?
A DNS leak test is an online security tool that helps you detect a DNS leak. A DNS leak test shows whether your device is sending DNS requests to your internet service provider’s (ISP) DNS servers or to some other third-party DNS servers. Several DNS leak test tools are available online.
How does a DNS leak test work?
A DNS leak test checks where your device sends its DNS requests. When you initiate a test, the tool sends a series of DNS requests from your device and records the responses. You can then view the results to determine if any of the requests are sent to unintended DNS servers.
If you’re connected to a VPN or proxy and at least one of the servers in the results belongs to your internet provider, your connection likely has a DNS leak.
How do I know if my DNS is leaking?
Here are the signs that your DNS may be leaking:
Slow internet connection
Sending DNS requests to unintended servers can cause delays in website loading times.
Unblocked websites
Can you access websites that are supposed to be blocked? This may be because your DNS requests are being sent to unauthorized servers that are not implementing the blocks.
Unexpected pop-ups or ads
Malware may sometimes alter DNS settings to redirect you to malicious sites.
Unusual IP addresses
If your device is communicating with unusual IP addresses or is using multiple DNS servers, it may be a sign of a DNS leak.
Inconsistent geolocation information
If you use a geolocation service or app, you may notice that the location information is not consistent with your actual location. This difference can occur if your DNS requests are being sent to servers in different locations.
However, the most reliable way to find out if your DNS is leaking is by performing a simple DNS leak test using NordVPN’s tool.
Do free VPNs stop DNS leaks?
Not all free VPNs stop DNS leaks effectively. Free VPNs can’t invest as much into their security and infrastructure, and, as a result, don’t stop DNS leaks effectively. Even if they would, this wouldn’t guarantee your privacy and security because, unlike reputable VPNs such as NordVPN, free VPNs might collect, store, and often sell users’ data.
Is a DNS leak test safe?
Yes, performing a DNS leak test is generally safe because you don’t need to download and install any software that could harm your device. Instead, this test involves your browser sending a simple query to a test website. If it resolves the domain name correctly, the website will report back which DNS servers responded to those queries.
