ZenGuard VPN ★★★★★
Editor’s pick✓No-logs • independent audits
✓RAM-only servers • modern ciphers
✓Great for streaming & everyday privacy
$9.99
/mo
Save 72%
DNS Leak Test
Check if your device’s DNS requests are leaking outside your VPN tunnel.
Learn more
Custom probe host (optional)
Leave empty to auto-generate a unique token under leak.zend2.com.
Best VPNs for Privacy & Streaming
Fast, audited, reliable. Pick one that fits your needs and fix leaks for good.
SwiftShield VPN ★★★★☆
Fastest✓WireGuard by default • multi-hop
✓4K streaming & gaming friendly
✓Clean apps • strong Kill Switch
$8.99
/mo
Save 66%
BudgetBee VPN ★★★★☆
Best value✓Strong speeds at a great price
✓Streaming + P2P friendly
✓Apps for every major platform
$6.99
/mo
Save 68%
*Affiliate disclosure: we may earn a commission when you buy via our links—at no extra cost to you. We only recommend VPNs that pass our security checks.
About the DNS Leak Test
A DNS leak happens when DNS lookups go to your ISP or another resolver outside the VPN tunnel. Our test triggers a unique domain and records which resolvers answer, so you can confirm your VPN is actually handling DNS.
Quick tips
- For a PASS, you should see 0–1 resolver tied to your VPN/ASN and region.
- Disable “Smart-DNS” or split-tunnel options that bypass the VPN for DNS.
- Use DNS over HTTPS/DoT inside the VPN, not on the OS level only.
- Routers and TV boxes often force their own DNS—test from the same device you browse on.
- If you see an ISP resolver, your device or router is likely bypassing the tunnel.
DNS Leak – FAQ
1) What is a DNS leak? ▾
It’s when DNS queries resolve outside your VPN (e.g., at your ISP). Sites can infer your identity or location from those resolvers, even if traffic is tunneled.
2) Why do I see “0 found” resolvers? ▾
Some VPNs proxy DNS internally and don’t expose a public resolver in our logs. That’s acceptable if the summary shows a PASS and your traffic stays in the tunnel.
3) What if I see my ISP’s DNS? ▾
That’s a likely leak. Check your OS/router DNS settings, disable Smart-DNS, and ensure the VPN is set to use its own resolvers.
4) Does DoH/DoT affect the test? ▾
Yes. If your OS forces DoH/DoT to a third-party, queries can bypass the VPN. Prefer VPN-provided encrypted DNS or ensure DoH/DoT is also routed via the VPN.
5) How do you judge PASS/FAIL? ▾
We look for ≤1 resolver and consistency of ASN/country with the VPN. Multiple, mixed, or ISP resolvers usually indicate a leak → FAIL.