DNS leak test: who sees your lookups?

DNS is the system that turns a domain name like example.com into an IP address. A DNS leak happens when those lookups are sent to your ISP's resolver instead of through your VPN — so even with the VPN on, your provider can still see the list of sites you're visiting.

A web page can't read your operating system's DNS resolvers directly, so rather than fake a result, this check reads the network your connection exits through using our own server. If that network is your own ISP, your DNS lookups are almost certainly exposed too. It's an honest, indicative check — we're upfront that it's a signal, not a full audit.

Browsers are sandboxed and deliberately don't expose your system's DNS configuration to web pages, for security reasons. Truly enumerating your resolvers requires a specialised test that watches which servers request a unique hostname. This tool gives you the network context you can read safely in-browser, and tells you plainly what it can and can't prove.

Use a VPN that routes your DNS requests through the same tunnel as your traffic. Zippa's Chrome extension does this for your browser — your DNS lookups go through the location you pick, not your ISP's resolver, so your provider can't build a list of the sites you visit.

Yes. Zippa routes your browser's traffic and DNS together through the country you choose, so lookups don't slip out to your ISP. Combined with our strict no-logs policy, that means your queries aren't exposed to your provider and aren't recorded by us either.

It depends who runs it. Plenty of free VPNs pay their bills by logging and selling browsing data — that's the real catch. Zippa is funded by people who upgrade to Premium, not by your data, and we keep a strict no-logs policy, so there's nothing to record or sell in the first place.