What Is a DNS Leak and How to Test for It
When you type a website name, your device asks a DNS server to translate it to an address. If that request goes outside the VPN tunnel, your provider can see where you are going.
What causes a leak
- VPN apps that do not control DNS settings.
- Operating system features that bypass the tunnel.
- IPv6 traffic not covered by the VPN.
How to test
Connect to your VPN and use a reputable DNS leak test website. If it shows your internet provider rather than the VPN provider, you have a leak.
How to fix it
- Enable DNS leak protection in the VPN app.
- Disable IPv6 if the VPN does not support it.
- Use encrypted DNS settings that match the VPN.
- Update the app and operating system.
Key takeaway: Test your VPN occasionally. Leak protection and a kill switch keep your traffic inside the tunnel.
