Skip to content
VPN Glossary

DNS Leak

A DNS leak happens when your device sends DNS queries outside the VPN tunnel. DNS requests reveal which domains you're trying to reach, and they can und...

1 min read
DNS Leak

A DNS leak happens when your device sends DNS queries outside the VPN tunnel. DNS requests reveal which domains you’re trying to reach, and they can undermine privacy even if your web traffic is encrypted. Leaks often occur due to OS “fallback” resolvers, IPv6 behavior, captive portals, misconfigured VPN clients, or split tunneling rules. Good VPN apps prevent DNS leaks by pushing secure DNS resolvers, blocking off-tunnel DNS at the firewall level, and handling reconnect events safely. You can reduce risk by using a provider DNS, an encrypted DNS option inside the VPN, or a trusted resolver configured to run only through the tunnel. Testing matters: connect to the VPN and use reputable leak tests to confirm that DNS servers shown match the VPN’s configuration and not your ISP. If you frequently roam networks, prioritize clients with strong, OS-integrated DNS controls.