MyIPInfo
← Tools

DNS Resolver Diagnostics

A DNS leak occurs when your DNS queries bypass your VPN tunnel, exposing your real ISP or location. This diagnostic shows server-side DNS results; it does not identify your browser’s resolver.

Every time you visit a website, your computer first asks a "DNS resolver" to translate the domain name into an IP address. If you're using a VPN, you'd expect those DNS questions to go through the VPN too. A DNS leak is when they sneak around the VPN and go through your real internet provider instead — meaning the VPN hides where you go but not what you look up. This diagnostic cannot determine whether your own DNS queries bypass the VPN.

How to read the result

These are queries made by the server, not observations of your browser’s DNS path. Failure means that server-side query failed. Success, matching answers, or different answers do not determine browser DNS leakage.

What to do if you're leaking

  • Check your VPN client's settings — most paid VPNs have a "DNS leak protection" or "use VPN's DNS" toggle. Make sure it's on.
  • Disconnect and reconnect — sometimes the VPN didn't fully take effect on this session.
  • Switch to a VPN with built-in DNS — reputable ones (NordVPN, ExpressVPN, Mullvad, ProtonVPN) route DNS through the tunnel automatically.
  • Read the full guide: How to check if your VPN is leaking covers the three common leak types and how to fix each.

"No VPN" — that's not a leak

If you're not running a VPN, the resolver being your ISP is normal — there's no tunnel for queries to leak out of. This diagnostic does not validate VPN behavior. If you want to hide your DNS from your ISP without a VPN, configure DNS-over-HTTPS in your browser (Firefox, Chrome, and Edge all support it) pointing at Cloudflare or Quad9.