DNS Leak Test
Check whether your DNS requests are using unexpected resolvers outside your VPN or secure DNS path.
DNS Leak Test helps you check whether your browser DNS requests are being resolved by your VPN or secure DNS provider, or whether they appear to leak to an unexpected resolver such as your ISP. The test loads one-time DNS probe hostnames and reports the public DNS resolvers observed for those lookups.
DNS leaks can create privacy and cybersecurity concerns because DNS queries can reveal the domains you visit even when your web traffic is encrypted.
Your IP
Detecting...
DNS Servers Found
Not tested
Observer
bash.ws
Recommended Next Checks
Continue the same task with related tools. When possible, your current input is carried to the next page.
DNS Lookup
Look up common DNS records for any domain.
NS Lookup
Lookup NS (name server) records for the domain name in the DNS system.
DNS Zone Transfer
Test whether a domain allows DNS zone transfer.
DNS Propagation Checker
A DNS Propagation Checker verifies how recent DNS changes have spread across multiple DNS...
What is a DNS Leak test?
A DNS (Domain Name System) leak test is a diagnostic tool used to determine whether a computer's DNS requests are being leaked to an unauthorized third party hacker. DNS is a system that translates human-readable domain names (such as www.iplocation.net) into IP address that computers can understand. DNS requests typically go through the user's ISP, but if the user's computer is configured to use a different DNS server, such as a public DNS server like Google DNS (8.8.8.8) or Cloudflare DNS (1.1.1.1), the requests will bypass the ISP and go directly to the predefined DNS server.
A DNS leak can occur when a computer's DNS requests are not properly routed through the intended DNS server and instead go through the ISP or another unauthorized third party. This can happen due to misconfigured settings on the user's computer or router, browser secure-DNS overrides, IPv6 configuration, or VPN software that does not force DNS through the encrypted tunnel.
A DNS leak test typically involves accessing a website or using an application that can check whether DNS requests are being properly routed through the intended DNS server. The test may also check for other types of leaks, such as IPv6 leaks or WebRTC leaks. If a DNS leak is detected, the user may need to adjust their DNS settings or take other steps to secure their Internet connection and protect their privacy.
How to use DNS Leak Test
Connect to your VPN or secure DNS provider, then click Start DNS Leak Test. The tool generates temporary test hostnames in your browser and checks which public DNS resolvers are observed for those lookups. The result table lists resolver IP addresses, countries, and ASN information when available.
If the listed DNS resolvers belong to your VPN or selected secure DNS provider, your DNS path is likely aligned. If the resolvers belong to your ISP, workplace, school, hotel, or an unexpected provider, your DNS requests may be leaking outside the private path you intended to use.
When this tool is useful
- Checking whether a VPN is protecting DNS requests.
- Verifying browser Secure DNS or DNS-over-HTTPS behavior.
- Testing after changing networks, routers, VPN servers, or DNS settings.
- Troubleshooting privacy issues before browsing sensitive sites.
DNS Leak Test Tips
DNS leaks occur when your system sends DNS queries outside the encrypted VPN tunnel, usually to your ISP's DNS servers. This exposes browsing activity even when you are connected to a VPN. If the test shows resolvers you do not recognize, review your VPN DNS leak protection, browser Secure DNS settings, operating system DNS settings, IPv6 settings, and router DNS configuration.
For the cleanest result, connect to your VPN first, close other network-heavy tabs, run the DNS Leak Test, and compare the resolver country, ASN, and provider with the service you expect to use.
Related Tools
DNS Lookup
Look up common DNS records for any domain.
NS Lookup
Lookup NS (name server) records for the domain name in the DNS system.
DNS Zone Transfer
Test whether a domain allows DNS zone transfer.
DNS Propagation Checker
A DNS Propagation Checker verifies how recent DNS changes have spread across multiple DNS servers worldwide.
DMARC Record Generator
Use DMARC wizard to generate a DMARC DNS Record for your domain.
TLS RPT Generator
Generate a TLS-RPT DNS record for email reporting.
Suggest an improvement
Tell us if something is confusing, broken, incorrect, or missing. Feedback helps us improve the tools and workflows people use every day.