DNS Leak Test
Check if your DNS queries are leaking outside your encrypted tunnel. Ensure your browsing activity stays private and encrypted.
Ready to Test
Click the button below to check if your DNS queries are leaking.
What is a DNS Leak?
Every time you visit a website, your device sends a DNS (Domain Name System) query to translate the human-readable domain name like “google.com” into a numerical IP address that computers understand. Think of DNS as the internet's phone book — it tells your browser where to find the website you want to visit.
When you use SwissGuard, all of your internet traffic — including DNS queries — should be routed through the encrypted tunnel. A DNS leak happens when your DNS requests bypass the encrypted tunnel and are sent directly to your ISP's DNS servers or other third-party DNS resolvers instead. This means that even though your main internet traffic is encrypted and private, your DNS queries are leaking out in plain text.
This is a serious privacy concern because DNS queries reveal every website and online service you access. Your ISP can see your complete browsing history, advertisers can build a profile of your interests, and in some countries, this data can be shared with government agencies. DNS leaks essentially create a detailed log of your online activity that anyone monitoring your DNS traffic can read.
DNS leaks can occur for several reasons: misconfigured privacy software, operating system settings that override DNS configuration, IPv6 DNS queries that bypass the IPv4-only tunnel, or using a provider that does not operate its own DNS servers. Some services only encrypt your web traffic but leave DNS queries unprotected, giving you a false sense of security.
Our DNS leak test checks which DNS servers your browser is using to resolve domain names. If the test detects DNS servers that do not belong to your privacy provider, it indicates a DNS leak. SwissGuard prevents DNS leaks by forcing all DNS queries through our encrypted WireGuard tunnel to our own private DNS servers in Switzerland, ensuring complete privacy for your browsing activity.
Frequently Asked Questions
Everything you need to know about DNS leaks and how to protect yourself.
A DNS leak occurs when your DNS queries are sent outside of your encrypted tunnel, typically to your ISP's DNS servers instead of your privacy provider's servers. This means your ISP or a third party can see which websites you visit, even though the rest of your traffic is encrypted.
A DNS leak test works by making DNS requests from your browser and checking which DNS servers respond. If the responding servers belong to your privacy provider, your DNS is secure. If they belong to your ISP or another third party, you have a DNS leak that is exposing your browsing activity.
DNS leaks undermine the very purpose of using an encrypted connection. Even if your internet traffic is encrypted, leaked DNS queries reveal every website and service you access. Your ISP can log this data, sell it to advertisers, or hand it over to authorities. A DNS leak essentially negates your privacy protection.
The best way to fix a DNS leak is to use a private network with built-in DNS leak protection, like SwissGuard. Our client forces all DNS queries through our encrypted tunnel to our own private DNS servers in Switzerland. You can also manually configure your system to use secure DNS servers, but SwissGuard handles this automatically.
Yes. SwissGuard routes all DNS queries through our encrypted WireGuard tunnel to our own private DNS servers hosted in Switzerland. This means your DNS requests never leave the encrypted tunnel, providing complete protection against DNS leaks. Our kill switch also prevents any data from leaking if the connection drops.
Protect Against DNS Leaks with SwissGuard
SwissGuard routes all your DNS queries through our encrypted Swiss servers, ensuring complete protection against DNS leaks. No logs. No exposure. No compromise.