NordVPN DNS Leak Test
Check if your VPN is leaking your real DNS queries by resolving a domain and displaying the DNS servers used for the lookup.
Result
Please check your inputs.
How to Use This Tool
Open the NordVPN DNS Leak Test tool in your browser while connected to your VPN.
Click the 'Start Test' button—the tool will generate a unique domain and resolve it through your current DNS configuration.
Wait a few seconds for the test to complete; the page will display the IP addresses and locations of the DNS servers that handled your query.
Compare the listed servers with your VPN provider’s known DNS IPs. If you see your ISP’s DNS or an unknown server, your VPN is leaking.
Repeat the test after changing VPN servers or protocols to confirm the leak is fixed.
What Is NordVPN DNS Leak Test?
A DNS leak occurs when your device sends domain name resolution requests outside the encrypted VPN tunnel, exposing your real location and internet activity to your Internet Service Provider (ISP) or other third parties. Even if your VPN encrypts all other traffic, a single leaked DNS query can reveal the websites you visit and your true IP address. This tool helps you verify whether your VPN is truly handling all DNS lookups by checking which servers actually answered your query. For privacy-conscious users, a DNS leak test is an essential step after connecting to any VPN, including NordVPN, to ensure no data slips past the encrypted tunnel. Without routine testing, you might assume you are anonymous when your traffic is partially exposed.
Formula
The tool uses a single-step detection method: It generates a unique, random subdomain (e.g., abc123.dnsleaktest.example.com) and instructs your browser to resolve it. The authoritative DNS server for that domain logs the source IP of every resolver that queries it. The tool then retrieves that log and displays the logged IP address(es). Mathematically, the result is the set of resolver IPs R = {IP₁, IP₂, ...} where each IP belongs to a DNS server that received the query. If any IP does not match a known VPN DNS server (or is not within the VPN's IP range), a leak is confirmed. The formula is: Leak = (R ∩ ISP_DNS) ≠ ∅ or (R ∉ VPN_DNS_range).
Tips for Best Results
🛡️ Run this test every time you connect to a new VPN server—server settings can change DNS behavior without warning.
🔄 If a leak is detected, switch to a different VPN protocol (e.g., from OpenVPN to WireGuard) or enable 'Block DNS leaks' in your VPN app’s settings.
🌐 Force your VPN to use its own DNS servers by manually setting them (e.g., for NordVPN use 103.86.96.100) in your network adapter properties or VPN client.
🚫 Disable IPv6 or use a VPN that offers IPv6 leak protection, as many systems leak DNS over IPv6 even when IPv4 is secure.
Frequently Asked Questions
What exactly is a DNS leak?
A DNS leak happens when your device bypasses the VPN tunnel to resolve domain names, sending those requests directly to your ISP's DNS servers. This allows your ISP to see which websites you visit, undermining the privacy your VPN is supposed to provide.
How can I fix a DNS leak on NordVPN?
First, ensure you are using the latest version of the NordVPN app and that 'DNS leak protection' is enabled in the settings. You can also switch your DNS servers manually to NordVPN’s own (103.86.96.100 and 103.86.99.100) in your network adapter’s IPv4 properties. If the leak persists, try changing to a different VPN protocol or restarting the VPN connection.
Does NordVPN have built-in protection against DNS leaks?
Yes, NordVPN’s apps include automatic DNS leak protection on most platforms, but no system is 100% foolproof due to OS-level quirks, IPv6, or misconfigured network adapters. That is why running an independent leak test is recommended to verify that the built-in protection is actually working in your specific setup.