DNS Leak Test - Check for DNS Leaks
See which DNS servers answer your browser's lookups, and whether your VPN is sending them to your internet provider instead of through the tunnel.
Click the button to run the test. Your browser looks up 10 unique test addresses and the page shows which DNS servers answered. It takes a few seconds.
| Your IP | 18.97.9.174 |
| Internet provider | Amazon.com, Inc. |
| Country | United States |
| VPN or proxy detected | Yes |
Understanding This Tool
What It Does
When you click Run DNS Leak Test, your browser looks up ten random addresses that nobody has ever used, under a test domain run by ip-api.com. Because the names are new, each lookup has to travel all the way to the DNS server your device really uses, and ip-api's name servers record which server asked. The page then lists those DNS servers next to your own public IP address and internet provider.
A DNS leak is when your web traffic goes through a VPN but your DNS lookups still go to your home internet provider, which can then see every site you look up. The test flags that case: you appear to be on a VPN, yet your DNS servers belong to a different, ordinary internet provider.
Understanding the Results
- Result: one line that sums up the test. "No DNS leak found" means your lookups go to the same network as your VPN or to a public DNS service. "Possible DNS leak" means you appear to be on a VPN but a different internet provider answered your lookups.
- DNS servers that answered for you: the IP address, company and country of each DNS server that handled the ten test lookups. Seeing several servers from the same company is normal, because large providers spread lookups over many machines.
- Your connection: your public IP address, the internet provider and country it belongs to, and whether it looks like a VPN or proxy. Compare the provider here with the DNS servers above.
Common Use Cases
- Checking a new VPN: connect, run the test, and make sure your home internet provider does not appear in the DNS list.
- Confirming a DNS change: after switching to a service such as 1.1.1.1 or 8.8.8.8, the test shows whether your device actually uses it.
- Public Wi-Fi: see whose DNS servers a hotel or cafe network hands you before you browse.
- Router settings: check that the DNS servers set on your router are the ones your devices end up using.
Pro Tips & Best Practices
- Run it twice: once with the VPN off and once with it on. The DNS servers should change from your internet provider's to your VPN's or a public service's.
- Turn on leak protection: most VPN apps have a "DNS leak protection" or "use VPN DNS" setting. Switch it on and run the test again.
- Browser secure DNS: if Chrome, Edge or Firefox has Secure DNS (DNS over HTTPS) turned on, the browser uses that service directly, so the test shows it instead of your system DNS.
- Also check WebRTC: a VPN can hide your DNS and still expose your real IP through WebRTC. Run the WebRTC leak test too.
- VPN detection has limits: the "VPN or proxy detected" line comes from IP reputation data and can miss a VPN. If you are on a VPN and the DNS list shows your home internet provider, treat it as a leak.
Frequently Asked Questions
What is a DNS leak?
How does this DNS leak test work?
Why does the test show several DNS servers?
The test shows Google or Cloudflare, not my VPN. Is that a leak?
How do I fix a DNS leak?
Do you store my test results?
How this tool works: This tool runs in your browser and on our server in real time. Depending on the tool, results are computed directly from the input you provide or retrieved from live, authoritative data sources at the moment you run a lookup. We do not sell your data, and your lookups are kept private — any history shown here is stored only on your device.