8 min read
DNS Leaks: What They Are and How to Prevent Them
A DNS leak can expose your real identity even when using a VPN. Learn how to detect and fix DNS leaks.
What Is DNS?
DNS (Domain Name System) is the internet's phone book. When you type 'google.com' into your browser, a DNS query is sent to translate that domain name into an IP address. By default, these queries go to your ISP's DNS servers. Your ISP can see every domain you look up, building a complete picture of your browsing history even without seeing the content of your traffic.
What Is a DNS Leak?
A DNS leak occurs when your DNS queries bypass the VPN tunnel and go directly to your ISP's DNS servers instead of the VPN's servers. This can happen due to operating system configurations, IPv6 leaks, or VPN software bugs. Even with a VPN active, a DNS leak means your ISP (and anyone monitoring your connection) can see exactly which websites you're visiting.
How to Test for DNS Leaks
Testing for DNS leaks is easy and free. While connected to your VPN, visit dnsleaktest.com or ipleak.net and run the extended test. The results should show only your VPN provider's DNS servers. If you see servers belonging to your ISP or a third party, you have a DNS leak.
How to Fix a DNS Leak
First, check your VPN app settings for a 'DNS leak protection' or 'prevent DNS leaks' option and enable it. Most reputable VPNs have this built in. If the leak persists, try switching VPN protocols (WireGuard often handles this better than older protocols). You can also manually configure your DNS servers to use the VPN's DNS.
IPv6 Leaks — The Other Threat
Similar to DNS leaks, IPv6 leaks can expose your real IP address even when your VPN is active. Most VPNs handle IPv4 traffic but may not fully route IPv6 traffic through the tunnel. The simplest fix is to disable IPv6 in your operating system's network settings if you don't specifically need it. Alternatively, choose a VPN that explicitly advertises full IPv6 leak protection.
Ready to protect yourself?
Check out our top-rated VPN recommendations, independently tested and reviewed.
See Top 10 VPNs