Post
DNS leak test: check your VPN results without jumping to conclusions
Learn how to check VPN DNS results, distinguish resolver identity from routing, account for browser encrypted DNS and troubleshoot unexpected results.
VPNBLADE · PLAN SHORTLIST
Compare current VPN plans
Selected plan offers, not performance rankings. We may earn a commission through affiliate links. Monthly equivalents require the full payment shown.
ExpressVPN
Check your exact device setupExpressVPN Basic — 28-month introductory offer
USD 83.72 upfront · First 28 months, paid upfront
Get ExpressVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 99.95 annually after the initial 28-month term.
30-day money-back guarantee for new users; provider terms and purchase-channel conditions apply.
NordVPN
Apps across major device platformsNordVPN Basic — 27-month introductory offer
USD 94.23 upfront · First 27 months, paid upfront
Get NordVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 139.08 every year after the initial 27-month term at the current renewal price.
30-day money-back guarantee; provider eligibility, payment-channel and refund terms apply.
Surfshark
Households with multiple devicesSurfshark One — 27-month introductory offer
USD 67.23 upfront · First 27 months, paid upfront
Get Surfshark deal Offer details & coupon conditions →Renewal & refund conditions
Automatic renewal after the introductory term at the then-applicable rate. Confirm the chosen bundle’s next invoice and billing interval before purchase; no numeric renewal amount was verified.
30-day money-back guarantee; purchase-channel and provider eligibility conditions apply.
PureVPN
Published subscription offerPureVPN Standard — 27-month prepaid offer
USD 58.20 upfront · First 27 months, paid upfront
Get PureVPN deal Offer details & coupon conditions →Renewal & refund conditions
Checkout displays USD 2.15/month after 27 months. This is the provider’s renewal-rate label, not a verified future invoice. The next charge amount and billing interval were not separately established; confirm both before paying.
31-day money-back guarantee advertised; provider eligibility and refund terms apply.
VeePN
Published subscription offerVeePN Basic — 28-month introductory offer
USD 55.72 upfront · First 28 months, paid upfront
Get VeePN deal Offer details & coupon conditions →Renewal & refund conditions
Card/PayPal checkout quotes automatic renewal at USD 59.76 every 12 months after the initial 28-month period. Future renewal prices can change.
Thirty-day refund window for the original purchase, subject to terms. Rebilling and previously refunded accounts are excluded; plan extensions or added licenses can waive eligibility.
In this article
A DNS leak test helps you compare the DNS resolvers visible to a checking website with the routing you intended. It does not measure every privacy property of a VPN. An unexpected resolver deserves investigation, but its company name or country alone cannot prove that a request travelled outside your tunnel.
This guide restores the useful testing questions from VPNBlade’s archived ExpressVPN DNS-leak article. The workflow is rewritten around current documentation and careful interpretation. VPNBlade has not run a comparative leak test for this article, and no provider receives a pass or fail score here.
VPNBLADE · PLAN SHORTLIST
Featured VPN deals
Selected plan offers, not performance rankings. We may earn a commission through affiliate links. Monthly equivalents require the full payment shown.
ExpressVPN
Check your exact device setupExpressVPN Basic — 28-month introductory offer
USD 83.72 upfront · First 28 months, paid upfront
Get ExpressVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 99.95 annually after the initial 28-month term.
30-day money-back guarantee for new users; provider terms and purchase-channel conditions apply.
NordVPN
Apps across major device platformsNordVPN Basic — 27-month introductory offer
USD 94.23 upfront · First 27 months, paid upfront
Get NordVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 139.08 every year after the initial 27-month term at the current renewal price.
30-day money-back guarantee; provider eligibility, payment-channel and refund terms apply.
Surfshark
Households with multiple devicesSurfshark One — 27-month introductory offer
USD 67.23 upfront · First 27 months, paid upfront
Get Surfshark deal Offer details & coupon conditions →Renewal & refund conditions
Automatic renewal after the introductory term at the then-applicable rate. Confirm the chosen bundle’s next invoice and billing interval before purchase; no numeric renewal amount was verified.
30-day money-back guarantee; purchase-channel and provider eligibility conditions apply.
PureVPN
Published subscription offerPureVPN Standard — 27-month prepaid offer
USD 58.20 upfront · First 27 months, paid upfront
Get PureVPN deal Offer details & coupon conditions →Renewal & refund conditions
Checkout displays USD 2.15/month after 27 months. This is the provider’s renewal-rate label, not a verified future invoice. The next charge amount and billing interval were not separately established; confirm both before paying.
31-day money-back guarantee advertised; provider eligibility and refund terms apply.
VeePN
Published subscription offerVeePN Basic — 28-month introductory offer
USD 55.72 upfront · First 28 months, paid upfront
Get VeePN deal Offer details & coupon conditions →Renewal & refund conditions
Card/PayPal checkout quotes automatic renewal at USD 59.76 every 12 months after the initial 28-month period. Future renewal prices can change.
Thirty-day refund window for the original purchase, subject to terms. Rebilling and previously refunded accounts are excluded; plan extensions or added licenses can waive eligibility.
Understand the three questions before testing
DNS helps an application find the network destination associated with a name. Cloudflare’s DNS explanation describes the lookup process and the roles involved. Your device can use a local network resolver, a provider-operated service or another configured resolver, depending on the application and setup. Record what you intended before deciding a result is wrong.
Keep three questions separate: which resolver handled a lookup, how the query reached it, and which organization can observe the resulting activity. A browser-based result can help with the first question. It may provide clues about the others, but does not automatically establish the full route. That distinction avoids treating every unfamiliar resolver label as a confirmed tunnel failure.
A deliberate third-party DNS configuration can also differ from a provider’s default. That may create a different trust relationship even when the query travels through the VPN. Explain the difference in your test notes instead of treating the physical path and the resolver operator as interchangeable facts.
VPNBLADE · PLAN SHORTLIST
A current plan to consider
Selected plan offers, not performance rankings. We may earn a commission through affiliate links. Monthly equivalents require the full payment shown.
ExpressVPN
Check your exact device setupExpressVPN Basic — 28-month introductory offer
USD 83.72 upfront · First 28 months, paid upfront
Get ExpressVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 99.95 annually after the initial 28-month term.
30-day money-back guarantee for new users; provider terms and purchase-channel conditions apply.
NordVPN
Apps across major device platformsNordVPN Basic — 27-month introductory offer
USD 94.23 upfront · First 27 months, paid upfront
Get NordVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 139.08 every year after the initial 27-month term at the current renewal price.
30-day money-back guarantee; provider eligibility, payment-channel and refund terms apply.
Surfshark
Households with multiple devicesSurfshark One — 27-month introductory offer
USD 67.23 upfront · First 27 months, paid upfront
Get Surfshark deal Offer details & coupon conditions →Renewal & refund conditions
Automatic renewal after the introductory term at the then-applicable rate. Confirm the chosen bundle’s next invoice and billing interval before purchase; no numeric renewal amount was verified.
30-day money-back guarantee; purchase-channel and provider eligibility conditions apply.
PureVPN
Published subscription offerPureVPN Standard — 27-month prepaid offer
USD 58.20 upfront · First 27 months, paid upfront
Get PureVPN deal Offer details & coupon conditions →Renewal & refund conditions
Checkout displays USD 2.15/month after 27 months. This is the provider’s renewal-rate label, not a verified future invoice. The next charge amount and billing interval were not separately established; confirm both before paying.
31-day money-back guarantee advertised; provider eligibility and refund terms apply.
VeePN
Published subscription offerVeePN Basic — 28-month introductory offer
USD 55.72 upfront · First 28 months, paid upfront
Get VeePN deal Offer details & coupon conditions →Renewal & refund conditions
Card/PayPal checkout quotes automatic renewal at USD 59.76 every 12 months after the initial 28-month period. Future renewal prices can change.
Thirty-day refund window for the original purchase, subject to terms. Rebilling and previously refunded accounts are excluded; plan extensions or added licenses can waive eligibility.
Prepare a useful test record
Write down the device, operating-system version, VPN app version, selected gateway and browser. Note any manual DNS settings, browser secure-DNS feature and split-tunneling exception relevant to that browser. You do not need to publish these details; a private, redacted record helps you reproduce the situation or ask support a precise question.
Use a harmless browsing session for diagnosis. Do not send a real password or confidential document merely to see whether a connection works. On a managed device, follow the organization’s instructions and avoid changing a required resolver or VPN profile. A public tutorial cannot determine the intended configuration of a workplace network.
Choose a test you can repeat and keep its name beside each result. Results from different tools are not necessarily identical because their methods and labels can differ. Also record whether the test completed. A timeout, blank result or script error is an incomplete observation, not proof of a DNS leak.
A repeatable browser-based workflow
- Review the VPN provider’s current DNS and routing documentation for your platform.
- If permitted, record the ordinary connection’s resolver result as a baseline during harmless browsing.
- Connect the VPN and confirm its reported connection state.
- Open a fresh test session in the browser you intend to use and wait for the test to finish.
- Record the displayed resolver information alongside the gateway and relevant settings.
- Repeat after reconnecting, changing only one intended setting at a time.
Do not switch off a required always-on control simply to obtain a baseline. When the baseline is unavailable, state that limitation and compare the connected result with the documented expected configuration. Our kill-switch explanation describes a separate connectivity control; a DNS tool cannot confirm all of its behavior.
Similarly, a browser result does not prove the route used by a game, sync client or another browser. A selected split-tunneling exception can make different routes intentional. Read our split-tunneling workflow before applying one app’s result to the entire device.
Using ExpressVPN’s DNS test without overreading it
ExpressVPN’s public DNS test is one available checking tool. Its documentation describes both DNS sent outside the tunnel and DNS sent through the tunnel to a third-party resolver as situations to investigate against its intended configuration. Those scenarios should still be distinguished in your own notes.
The provider attributes its default DNS protection to its own app configuration. That is a documented provider claim, not a VPNBlade test finding. If an unexpected result persists, follow its support process and supply the app version, selected configuration and redacted test observations. Do not turn a marketing banner or an incomplete test screen into an independent verdict.
The ExpressVPN store lists dated plan terms separately. A coupon or subscription tier is not evidence of a particular test result. Make the technical decision from applicable documentation and observations, then evaluate the commercial terms if a subscription fits your needs.
Browser encrypted DNS can change the expected result
A browser may have DNS settings separate from the operating system. Mozilla documents Firefox’s DNS-over-HTTPS protection levels, including their different operating behavior. Read the current option descriptions rather than assuming that every browser follows the system resolver in exactly the same way.
If you intentionally selected a resolver in a browser, investigate that choice before treating its appearance as a surprise. Changing the resolver operator and changing whether the browser’s traffic uses the VPN are distinct changes. Encryption of a DNS query also does not mean that no resolver is involved or that the recipient cannot process the name.
A sensible diagnostic experiment changes one documented control and repeats the same check. Keep the original setting available so you can restore it. If you cannot explain which component owns the setting, consult the relevant vendor instead of collecting a long list of speculative changes.
Interpret results with a small decision table
| Observation | What it establishes | Useful next step |
|---|---|---|
| The expected resolver appears | This completed test observed a resolver consistent with your expectation. | Keep the result with the configuration; do not generalize to all apps or logging policies. |
| An unfamiliar resolver appears | The observed resolver identity differs from what you expected. | Check browser DNS, manual settings, exclusions and current provider documentation. |
| A different country is displayed | The checking service labels the resolver that way. | Investigate the operator and configuration; a location label alone is insufficient. |
| The test does not finish | No complete result was obtained. | Retry a fresh harmless session or use the tool’s documented troubleshooting. |
When to stop changing settings
If the ordinary connection, tunnel state and DNS behavior are all changing at once, return to a known baseline. Avoid stacking custom resolvers, browser extensions and multiple VPN apps while trying to diagnose one result. Each additional component makes the original question harder to answer.
Use our wider VPN troubleshooting guide when the underlying connection itself is failing. Use the IP-address explanation when a location checker is the main concern. A DNS check answers a narrower question than whether a service knows your account or an app has location permission.
The practical endpoint is a configuration you can describe, a completed observation and a clear statement of any uncertainty. A reassuring result can support that limited assessment without proving anonymity, a no-logs policy or protection against malware.
VPNBLADE · PLAN SHORTLIST
Featured VPN deals
Selected plan offers, not performance rankings. We may earn a commission through affiliate links. Monthly equivalents require the full payment shown.
ExpressVPN
Check your exact device setupExpressVPN Basic — 28-month introductory offer
USD 83.72 upfront · First 28 months, paid upfront
Get ExpressVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 99.95 annually after the initial 28-month term.
30-day money-back guarantee for new users; provider terms and purchase-channel conditions apply.
NordVPN
Apps across major device platformsNordVPN Basic — 27-month introductory offer
USD 94.23 upfront · First 27 months, paid upfront
Get NordVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 139.08 every year after the initial 27-month term at the current renewal price.
30-day money-back guarantee; provider eligibility, payment-channel and refund terms apply.
Surfshark
Households with multiple devicesSurfshark One — 27-month introductory offer
USD 67.23 upfront · First 27 months, paid upfront
Get Surfshark deal Offer details & coupon conditions →Renewal & refund conditions
Automatic renewal after the introductory term at the then-applicable rate. Confirm the chosen bundle’s next invoice and billing interval before purchase; no numeric renewal amount was verified.
30-day money-back guarantee; purchase-channel and provider eligibility conditions apply.
PureVPN
Published subscription offerPureVPN Standard — 27-month prepaid offer
USD 58.20 upfront · First 27 months, paid upfront
Get PureVPN deal Offer details & coupon conditions →Renewal & refund conditions
Checkout displays USD 2.15/month after 27 months. This is the provider’s renewal-rate label, not a verified future invoice. The next charge amount and billing interval were not separately established; confirm both before paying.
31-day money-back guarantee advertised; provider eligibility and refund terms apply.
VeePN
Published subscription offerVeePN Basic — 28-month introductory offer
USD 55.72 upfront · First 28 months, paid upfront
Get VeePN deal Offer details & coupon conditions →Renewal & refund conditions
Card/PayPal checkout quotes automatic renewal at USD 59.76 every 12 months after the initial 28-month period. Future renewal prices can change.
Thirty-day refund window for the original purchase, subject to terms. Rebilling and previously refunded accounts are excluded; plan extensions or added licenses can waive eligibility.
YOUR EXPERIENCE MATTERS
Was this article useful?
Genuine reader helpfulness ratings. These do not measure VPN performance or verify a purchase. Only moderated submissions count. Ratings may reflect earlier versions of this information.
VPNBLADE · PLAN SHORTLIST
Ready to choose a plan?
Selected plan offers, not performance rankings. We may earn a commission through affiliate links. Monthly equivalents require the full payment shown.
ExpressVPN
Check your exact device setupExpressVPN Basic — 28-month introductory offer
USD 83.72 upfront · First 28 months, paid upfront
Get ExpressVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 99.95 annually after the initial 28-month term.
30-day money-back guarantee for new users; provider terms and purchase-channel conditions apply.
NordVPN
Apps across major device platformsNordVPN Basic — 27-month introductory offer
USD 94.23 upfront · First 27 months, paid upfront
Get NordVPN deal Offer details & coupon conditions →Renewal & refund conditions
USD 139.08 every year after the initial 27-month term at the current renewal price.
30-day money-back guarantee; provider eligibility, payment-channel and refund terms apply.
Surfshark
Households with multiple devicesSurfshark One — 27-month introductory offer
USD 67.23 upfront · First 27 months, paid upfront
Get Surfshark deal Offer details & coupon conditions →Renewal & refund conditions
Automatic renewal after the introductory term at the then-applicable rate. Confirm the chosen bundle’s next invoice and billing interval before purchase; no numeric renewal amount was verified.
30-day money-back guarantee; purchase-channel and provider eligibility conditions apply.
PureVPN
Published subscription offerPureVPN Standard — 27-month prepaid offer
USD 58.20 upfront · First 27 months, paid upfront
Get PureVPN deal Offer details & coupon conditions →Renewal & refund conditions
Checkout displays USD 2.15/month after 27 months. This is the provider’s renewal-rate label, not a verified future invoice. The next charge amount and billing interval were not separately established; confirm both before paying.
31-day money-back guarantee advertised; provider eligibility and refund terms apply.
VeePN
Published subscription offerVeePN Basic — 28-month introductory offer
USD 55.72 upfront · First 28 months, paid upfront
Get VeePN deal Offer details & coupon conditions →Renewal & refund conditions
Card/PayPal checkout quotes automatic renewal at USD 59.76 every 12 months after the initial 28-month period. Future renewal prices can change.
Thirty-day refund window for the original purchase, subject to terms. Rebilling and previously refunded accounts are excluded; plan extensions or added licenses can waive eligibility.