DNS Leak
A DNS leak happens when your device sends DNS queries outside the VPN tunnel. DNS requests reveal which domains you're trying to reach, and they can und...

A DNS leak happens when your device sends DNS queries outside the VPN tunnel. DNS requests reveal which domains you’re trying to reach, and they can undermine privacy even if your web traffic is encrypted. Leaks often occur due to OS “fallback” resolvers, IPv6 behavior, captive portals, misconfigured VPN clients, or split tunneling rules. Good VPN apps prevent DNS leaks by pushing secure DNS resolvers, blocking off-tunnel DNS at the firewall level, and handling reconnect events safely. You can reduce risk by using a provider DNS, an encrypted DNS option inside the VPN, or a trusted resolver configured to run only through the tunnel. Testing matters: connect to the VPN and use reputable leak tests to confirm that DNS servers shown match the VPN’s configuration and not your ISP. If you frequently roam networks, prioritize clients with strong, OS-integrated DNS controls.
Related DVPN Resources
Related resources
View all- Authentication Authentication is how a VPN verifies that you are allowed to connect and how you verify you’re connecting to a legitimate server or …
- Certificates Certificates are digital credentials used to prove identity in cryptographic systems. In VPNs - especially OpenVPN and many enterprise …
- DNS (Domain Name System) DNS translates human-readable domain names (like a website address) into IP addresses so your device can connect. DNS matters for VPN …
- DNS Leak Protection DNS leak protection is a feature set that prevents DNS queries from bypassing the VPN tunnel. A typical VPN app pushes its own DNS servers, …
- Decentralized VPN (DVPN) A Decentralized VPN (DVPN) is a VPN model where traffic is routed through a network of independently operated nodes rather than a single …
