Check your expected DNS
Review the DNS provider configured by your VPN, browser or network. Those settings define the route you expect.
Free network tool
DNS leak test
Check which DNS resolver paths answer a fresh lookup, then compare with your VPN or secure DNS settings.
Your result
Ready
Ready to check your DNS path
Start the test to create a temporary hostname and observe its DNS queries.
Resolver pathsNot checked
DNS queriesNot checked
ObservationNot started
This tool shows privacy-preserving resolver IDs, rather than provider names or raw IPs. A completed test alone cannot confirm or rule out a VPN DNS leak.
Use the result with your DNS settings
DNS turns a website name into an IP address. A DNS leak occurs when those lookups take a route you did not expect, such as bypassing the DNS resolver configured by a VPN.
This test creates a fresh hostname and observes the resolver paths that query Localtonet's authoritative DNS service. Review your VPN and browser secure DNS settings alongside the result; the resolver IDs shown here cannot identify a provider. Use the WebRTC leak test separately to check browser-exposed IP addresses.
Several resolver paths
A provider may use multiple servers, and browser or network fallback can add paths. A higher count alone is not proof of a leak.
No observed query
Filtering, delegation delays or an unavailable collector may stop the test. Check again before drawing a conclusion.
When you need a provider verdict
These pseudonymous IDs do not reveal the resolver operator. Check your VPN’s own DNS diagnostics when you need provider-level confirmation.
View resolver IDs and query details
Run the test to see its detected details.
Common questions
What is a DNS leak?
It is DNS traffic using a route or resolver you did not expect, such as traffic bypassing the resolver provided by your VPN.
Does an unfamiliar resolver ID prove a leak?
No. The ID is a pseudonymous egress identifier, not a provider name. It needs an expected baseline before it can support a leak claim.
Can secure DNS in the browser change the result?
Yes. A browser’s encrypted DNS setting can select a resolver independently of your operating system, router or VPN.
Are raw resolver addresses displayed?
No. The collector returns pseudonymous identifiers and limited query metadata.
