Privacy Check

DNS Leak Test & Protection

A DNS leak can expose the websites your device asks to reach, even while a VPN is connected. CryptSurf keeps the setup simple: connect to VPN, use protected DNS settings, and check that browsing requests stay inside the encrypted tunnel.

CryptSurf VPN home screen
Test Tool

Run a DNS leak check

Start the check inside CryptSurf. The browser loads a unique test host and this page reads the DNS result from the CryptSurf collector when it is configured.

  • Turn on CryptSurf VPN and wait until the app shows an active connection.
  • Keep DNS protection enabled in the app before starting the browser test.
  • Start the test and compare the detected DNS country or provider with your selected VPN server.
How to Read Results

The test runs on this page. No third-party DNS test page is opened.

Ready

Start the test from this page

Click the button above to create a private test session and check DNS behavior.

    Result guide

    • Safe: DNS servers appear in the VPN country or through a privacy DNS provider.
    • Possible leak: DNS servers show your ISP, carrier, office network, or real city.
    • Next step: Reconnect VPN, switch server, keep DNS protection enabled, then test again.

    DNS leak tests can vary by browser and network. For the clearest result, close other VPN or proxy apps before testing.

    DNS Privacy

    What a DNS leak means

    DNS is the lookup system your device uses before opening a website. If those lookups go to your internet provider instead of the VPN tunnel, your browsing destinations may become visible.

    Normal DNS

    Your device asks a resolver where a domain is located before loading it. Without protection, this resolver may belong to your ISP, mobile carrier, or local network.

    DNS leak

    A leak happens when DNS requests bypass the VPN route. Your traffic may still be encrypted, but the domain lookups can reveal browsing intent.

    VPN protection

    CryptSurf is designed to route privacy-sensitive traffic through the VPN connection and keep DNS behavior aligned with the selected VPN location.

    Check Steps

    How to check for a DNS leak

    Use these steps whenever you connect from a new network, public Wi-Fi, hotel network, or mobile hotspot.

    1. Connect to CryptSurf VPN and wait until the VPN status confirms the connection.
    2. Open your DNS settings in the app and keep protected DNS enabled for the active connection.
    3. Use the DNS leak test tool above and compare the detected country with your VPN location.
    4. If DNS results show your ISP or real location, reconnect VPN, switch server, and test again.

    Keep DNS requests inside your privacy setup.

    Create an anonymous account number, connect securely, and manage DNS behavior from the CryptSurf app.

    Wildcard SSL