Encrypted routing
All DNS queries go through Mysterium VPN's secure servers instead of your local network or your ISP's DNS.
DNS Leak Protection – Keep DNS Queries in the Tunnel
Without DNS leak protection, your DNS requests can slip past the VPN and reach your ISP – even while you're connected. Mysterium VPN routes every DNS query through the encrypted tunnel.
- All DNS queries are routed through the encrypted tunnel.
- Prevents your ISP from seeing the sites you visit.
- Works alongside WireGuard and the kill switch.
30-DAYS MONEY-BACK GUARANTEE
Available on
What Is a DNS Leak?
A DNS leak happens when your device sends domain requests to your ISP's DNS servers instead of routing them through the VPN's encrypted tunnel.
That means your ISP can see every website you visit – even while you're connected to a VPN. DNS leak protection forces all DNS queries through the secure tunnel, closing the gap. It's one part of the full set of Mysterium VPN features.
How Mysterium VPN's DNS Leak Protection Works
Privacy guard
Your ISP can't see which websites you visit. DNS requests stay inside the encrypted tunnel.
Protocol support
It works alongside our no-logs policy, WireGuard protocol, and the kill switch for a complete privacy stack.
Why DNS Leaks Happen
Manual VPN Setup
Incorrect network or VPN configurations can bypass the secure tunnel, sending DNS requests unprotected.
IPv6 Traffic
Operating systems may send IPv6 requests outside standard VPN routes when IPv6 isn't handled by the VPN.
OS Fallbacks
Systems like Windows query several network interfaces at once, which can open the door to a DNS leak.
How to Test If Your DNS Is Leaking
Step 1: Connect to Mysterium VPN.
Step 2: Go to an independent DNS leak test tool, such as dnsleaktest.com.
Step 3: Run the test. The results should show Mysterium VPN's DNS servers, not your ISP.
Step 4: If your ISP appears, check that DNS leak protection is enabled in the app’s settings.
Frequently Asked Questions
DNS leak protection forces all DNS queries through the VPN's encrypted tunnel instead of your ISP's servers. Without it, your ISP can see every website you visit, even while you're connected to a VPN.
Yes. A DNS leak means your ISP can see every domain you visit, even with a VPN active. That exposes your browsing history and approximate location, and it defeats part of the privacy benefit of using a VPN.
Yes. DNS requests reveal which domains you connect to and are tied to your IP address. That exposes your approximate location and browsing patterns to your ISP or anyone monitoring the network.
Yes. Without DNS leak protection, a VPN only partly protects your privacy – your ISP can still see your DNS requests. DNS leak protection closes that gap, and it's a standard feature in any privacy-focused VPN.
Connect to Mysterium VPN, then visit an independent tool like dnsleaktest.com and run the test. The results should show Mysterium VPN's DNS servers, not your ISP. If your ISP appears, check that DNS leak protection is enabled in Settings → Privacy or Security.
Yes. Mysterium VPN includes built-in DNS leak protection that routes all DNS queries through the encrypted tunnel. It runs automatically, can be verified in app settings, and works alongside the WireGuard protocol and the kill switch.
