What DNS is
DNS works like a phone book. You type a name such as example.com, and a DNS server replies with the IP address your device should connect to.
Each lookup reveals which site you are about to visit. By default, these lookups go to your internet provider or to whatever DNS server the network gives you.
How a DNS leak happens
A DNS leak means your traffic goes through the VPN, but the lookups still go to your provider outside the tunnel. Your provider cannot read the pages, but it can see the list of sites you look up.
Leaks often come from system settings that prefer a specific DNS server, from IPv6 settings, or from the network switching while you are connected.
How TVPN prevents it
While you are connected, TVPN points your device to its own DNS servers and sends every lookup through the tunnel. Lookups that try to go elsewhere are blocked.
Our DNS servers do not log queries, in line with the no-logs policy. DNS leak protection is on in every plan, and there is nothing to set up.
Checking for leaks
You can check by connecting to TVPN and opening any DNS leak test site. The results should show TVPN servers, not your internet provider.
If you see your provider, disconnect and reconnect. If it still shows, a browser setting such as secure DNS with a fixed provider may be sending lookups on its own. Turn that off or contact us from the dashboard.
- Connect to any TVPN server
- Open a DNS leak test site in your browser
- Check that the listed DNS servers belong to TVPN