A DNS leak can expose your browsing history even when using a VPN. This guide shows you how to test for leaks, fix them, and choose VPNs with built-in DNS protection to keep your online activity truly private.
How to Test for DNS Leaks
Follow these steps to check if your VPN is leaking DNS requests:
- Disconnect from your VPN completely
- Visit DNSLeakTest.com and note your ISP's DNS servers
- Connect to your VPN (choose a server in another country)
- Run the extended test – if you see your ISP's servers, you have a leak
For mobile devices, apps like DNS Leak Test (Android) or iOS version work similarly.
How to Fix DNS Leaks
If your test shows leaks, try these solutions:
- Change VPN providers – Some budget VPNs don't properly handle DNS requests
- Enable the VPN's DNS leak protection – Look for this in settings (often disabled by default)
- Manually configure DNS – Set your device to use Cloudflare (1.1.1.1) or Google DNS (8.8.8.8)
- Check IPv6 – Disable IPv6 in your OS network settings as many VPNs only handle IPv4
For persistent leaks, consider using our privacy guides to harden your system.
VPNs With Built-In DNS Protection
These providers include automatic DNS leak protection and private DNS servers:
| Provider | DNS Features | Try |
|---|---|---|
| ExpressVPN | Private DNS on all servers, automatic leak protection | Get ExpressVPN |
| NordVPN | SmartDNS for streaming, Threat Protection blocks malicious DNS | Get NordVPN |
| Proton VPN | Secure Core DNS, open-source DNS servers | Get Proton VPN |
DNS Leak FAQs
Can a DNS leak expose my browsing history?
Yes. While it won't show specific pages, your ISP can see all domains you visit through leaked DNS requests.
Do all VPNs prevent DNS leaks?
No. Some free or low-quality VPNs route DNS through your ISP. Always test after connecting.
Is WebRTC the same as a DNS leak?
No. WebRTC leaks your real IP address through browsers, while DNS leaks expose domain lookups. Both need separate fixes.
How often should I test for leaks?
Monthly checks are good practice, especially after VPN or system updates that might change network settings.
Stay Protected Against DNS Leaks
For most users, ExpressVPN provides the most reliable DNS protection with its private, encrypted DNS servers on every connection. Their network is independently audited and works seamlessly across all devices.
Looking for alternatives? See our best VPN picks for different needs.
