DNS Leak Test and Fix – Complete Guide (2026)

Table of Contents

• Why DNS Leak Test and Fix Matters
• What Is a DNS Leak?
• How to Test for DNS Leaks
• Fix DNS Leak on Windows 11
• Fix DNS Leak on Android
• Fix DNS Leak on Router
• Prevent DNS Leaks
• Conclusion
• FAQ

Hub: Windows 11 Troubleshooting Hub

Quick Answer
A DNS Leak Test and Fix is essential for protecting your online privacy. A DNS leak occurs when your device sends DNS queries to your ISP instead of your VPN or encrypted DNS provider. To fix it, run a DNS leak test using DNSLeakTest.com or IPLeak.net, then configure static DNS servers, enable DNS over HTTPS, disable IPv6, or use a VPN with built-in leak protection. For more Windows troubleshooting, visit our Windows 11 Troubleshooting Hub.

Why DNS Leak Test and Fix Matters

A DNS Leak Test and Fix is one of the most important steps you can take to protect your online privacy. When you use a VPN or a privacy-focused DNS service, you expect your DNS queries to be encrypted and routed securely. However, a DNS leak can expose your browsing activity to your Internet Service Provider (ISP), defeating the purpose of using a VPN or encrypted DNS. According to recent tests, nearly 80 percent of VPN users still leak DNS or IPv6 data, even when the VPN app says “connected”.

A DNS leak occurs when your device sends DNS queries outside the encrypted tunnel, revealing which websites you visit to your ISP or other third parties. This is similar to other privacy issues like WebRTC Leak Test and Fix, which can also expose your real IP address. For a broader overview of network issues, see our Windows 11 Troubleshooting Hub.

What Is a DNS Leak?

A DNS leak happens when your computer or device sends DNS queries to a DNS server that is not the one you intended to use. DNS (Domain Name System) is like the internet’s phone book—it translates domain names (like google.com) into IP addresses. Normally, when you use a VPN, your DNS queries should go through the VPN’s encrypted tunnel to the VPN’s DNS servers. If they don’t, your ISP can see which websites you are visiting.

There are several types of DNS leaks:

• DNS Leak: Your DNS queries go to your ISP instead of your VPN.
• IPv6 Leak: Your device uses IPv6 for DNS queries, bypassing the VPN.
• WebRTC Leak: Your browser exposes your real IP address through WebRTC.

If you are experiencing DNS-related issues, our DNS Server Not Responding in Windows 11 guide may help.

How to Test for DNS Leaks

Performing a DNS Leak Test and Fix starts with a proper test. Follow these steps to check for DNS leaks:

1. Disconnect from your VPN and visit a DNS leak test website like DNSLeakTest.com or IPLeak.net to see your baseline DNS servers.
2. Connect to your VPN and refresh the test page.
3. Run the test and compare the results:
   • If the DNS servers shown belong to your VPN provider, you are protected.
   • If the DNS servers belong to your ISP, you have a DNS leak.
4. For a more comprehensive test, use BrowserLeaks.com to check for WebRTC leaks as well.

Fix DNS Leak on Windows 11

If your DNS Leak Test and Fix reveals a leak, here are the most effective solutions for Windows 11:

Method 1: Set Static DNS Servers

Manually configuring your DNS settings is one of the most effective ways to prevent DNS leaks.

1. Open Settings > Network & Internet.
2. Click on your active connection (Wi-Fi or Ethernet).
3. Click Hardware properties.
4. Find DNS server assignment and click Edit.
5. Set it to Manual and enter privacy-focused DNS servers:
   • Cloudflare: 1.1.1.1 and 1.0.0.1
   • Google: 8.8.8.8 and 8.8.4.4
   • Quad9: 9.9.9.9 and 149.112.112.112
6. Click Save and restart your connection.

Method 2: Enable DNS over HTTPS (DoH)

DNS over HTTPS encrypts your DNS queries, preventing your ISP from seeing them.

1. Open Settings > Network & Internet.
2. Click your active connection and select Hardware properties.
3. Click Edit next to DNS server assignment.
4. Under DNS over HTTPS, select On (automatic template) or On (manual template).
5. Choose a DoH provider (Cloudflare, Google, Quad9).
6. Click Save and restart your PC.

Method 3: Disable IPv6

IPv6 can bypass your VPN and cause leaks. To disable it:

1. Open Control Panel > Network and Sharing Center > Change adapter settings.
2. Right-click your active connection and select Properties.
3. Uncheck Internet Protocol Version 6 (TCP/IPv6).
4. Click OK and restart your PC.

Method 4: Use a VPN with Built-in Leak Protection

Many modern VPNs include DNS leak protection as a built-in feature. Ensure this setting is enabled in your VPN app. If your current VPN does not have this feature, consider switching to one that does.

Fix DNS Leak on Android

Android devices can also suffer from DNS leaks. Here is how to perform a DNS Leak Test and Fix on Android:

Method 1: Use Android Private DNS

Android’s Private DNS feature encrypts all DNS queries.

1. Open Settings > Network & Internet > Private DNS.
2. Select Private DNS provider hostname.
3. Enter a DoT (DNS over TLS) provider:
   • Cloudflare: 1dot1dot1dot1.cloudflare-dns.com
   • Google: dns.google
   • Quad9: dns.quad9.net
4. Click Save and test for leaks.

Method 2: Set Static DNS in Wi-Fi Settings

You can manually set DNS servers for each Wi-Fi network.

1. Open Settings > Network & Internet > Wi-Fi.
2. Tap your connected network and select Modify network.
3. Expand Advanced options.
4. Set IP settings to Static.
5. Enter DNS servers (e.g., 1.1.1.1 and 1.0.0.1).
6. Tap Save and test.

Method 3: Enable VPN Always-On Mode

Setting your VPN to Always-On mode ensures that all traffic goes through the VPN tunnel.

1. Open Settings > Network & Internet > VPN.
2. Tap the gear icon next to your VPN.
3. Enable Always-on VPN and Block connections without VPN.
4. Test for DNS leaks.

Fix DNS Leak on Router

DNS leaks at the router level affect all devices on your network. Here is how to perform a DNS Leak Test and Fix on your router:

Method 1: Change Router DNS Settings

Configuring your router to use privacy-focused DNS servers protects all connected devices.

1. Log into your router’s admin panel (usually at 192.168.1.1 or 192.168.0.1).
2. Look for DNS settings under WAN, Internet, or Advanced settings.
3. Change the DNS servers to:
   • Cloudflare: 1.1.1.1 and 1.0.0.1
   • NextDNS: (customized privacy protection)
   • Quad9: 9.9.9.9 and 149.112.112.112
4. Save changes and restart your router.

Method 2: Enable DNS over TLS (DoT) or DNS over HTTPS (DoH)

Some advanced routers support DNS encryption. Look for settings like DNS over TLS or DNS over HTTPS in your router’s admin panel.

Method 3: Check for DNS Poisoning

If your DNS has been maliciously tampered with, reset your router to factory settings:

1. Press and hold the router’s reset button for more than 10 seconds.
2. Reconfigure your network with secure DNS settings.
3. Change your router’s admin password.

Prevent DNS Leaks

After completing your DNS Leak Test and Fix, follow these best practices to prevent future leaks:

Regular Testing

Perform a DNS leak test regularly, especially after:

• Installing a new VPN
• Updating Windows or your VPN software
• Changing network settings

Use a Trusted VPN

Not all VPNs are created equal. Choose a VPN that includes built-in DNS leak protection and has a proven track record.

Enable Kill Switch

Many VPNs include a kill switch feature that blocks all internet traffic if the VPN disconnects, preventing accidental leaks.

Flush DNS Cache

After making changes, flush your DNS cache to clear old entries:

ipconfig /flushdns

For more network security tips, see our VPN DNS Leak Protection Guide and How to Change DNS Server in Windows 11.

Conclusion

A DNS Leak Test and Fix is essential for protecting your online privacy. By following the steps in this guide, you can detect and fix DNS leaks on Windows, Android, and your router. Start by testing for leaks using a trusted tool like DNSLeakTest.com or IPLeak.net. Then apply the appropriate fixes—setting static DNS servers, enabling DNS over HTTPS, disabling IPv6, or using a VPN with leak protection.

Remember to test regularly and keep your systems updated. For more Windows and networking troubleshooting, explore our Windows 11 Troubleshooting Hub and check out related articles on DNS Server Not Responding, Windows 11 No Internet Secured Wi-Fi Error, and How to Enable DNS over HTTPS in Windows 11.

Related Guides

• Windows 11 Troubleshooting Hub
• DNS Server Not Responding in Windows 11
• Windows 11 No Internet Secured Wi-Fi Error
• How to Change DNS Server in Windows 11
• How to Enable DNS over HTTPS in Windows 11
• Android Private DNS Setup Guide
• Router DNS Security Best Practices
• VPN DNS Leak Protection Guide
• WebRTC Leak Test and Fix
• How to Update Drivers Windows 11
• How to Use System Restore Windows 11
• How to Scan Malware Windows 11
• Windows 11 High CPU Usage Fix
• Windows 11 Running Slow Fix

FAQ