Why a lookup gives you away
A lookup swaps a readable name, say example.com, for the numeric address your device needs. That means every lookup announces the site that is about to load.
By default they land at your internet provider, or at a resolver chosen by the Wi-Fi you joined. A day's worth reads much like a browsing history.
What makes lookups slip out
A leak is when pages travel through the VPN but some lookups still take the old road. Typical culprits: a resolver hard-coded in system settings, an IPv6 path the tunnel does not cover, or a network switch halfway through a session.
Browsers can cause it too. When secure DNS is set to a fixed company, the browser sends its own lookups regardless of the VPN.
What VPNPass does on connect
Your device gets our resolvers as its DNS. Every lookup then rides inside the tunnel, and any that try another exit are dropped.
Our resolvers fall under the same no-logs rule as the VPN servers. The protection is part of every pass and needs no setup.
Run the test on your own
With VPNPass on, load a DNS leak test in your browser. The resolver names it reports should be ours, not your provider's. To see the address websites get, use our IP check page.
Still seeing your provider? Disconnect, connect again and repeat the test, then look at the browser's secure DNS setting. If the problem stays, send us a note from My info > Contact us.
- Connect through whichever city you like
- Load a DNS leak test page
- Your provider should not appear among the resolvers