My VPN is on but the leak test shows my internet provider. Is my VPN broken?

Not necessarily. DNS leak protection may simply be disabled in your VPN settings. Enable it and run the test again. If it's already enabled and you're still leaking, try reconnecting to a different server, and if that doesn't help, contact your VPN provider's support team; it's a known issue they'll have a fix for.

Will a DNS leak let streaming services see what I'm watching?

A DNS leak can reveal your real location to streaming services, which is why they can block you even when your VPN looks active. Your internet provider can also see which sites you're visiting, though not the content of what you're watching.

Does every VPN have DNS leak protection?

Most good paid VPNs do. Free VPNs often don't, which is one reason they tend to be unreliable for streaming. If your VPN has no leak protection settings, it's worth switching to one that does.

I fixed the leak but iPlayer still blocks me. What next?

If the DNS leak is fixed and your IP is showing as a UK VPN server, WebRTC in your browser is another common cause. Try the iPlayer app instead of a browser: this sidesteps WebRTC entirely. Switching to a different server can also help if the current one's IP has been flagged by iPlayer.

Can a DNS leak affect anything other than streaming?

Yes. If you're using a VPN for privacy, a DNS leak means your internet provider can still see which sites you visit, even if they can't read the content of what you're doing there. It's worth fixing even if streaming isn't your main concern.

What Is a DNS Leak and How to Fix It

If your VPN is running but a streaming service is still blocking you, a DNS leak is one of the most common culprits. It happens when your device quietly sends location requests outside the VPN, so sites can still see where you really are even though your IP address looks fine. The good news is it's usually a one-setting fix.

What DNS actually is

Every time you type a web address like netflix.com into your browser, your device needs to find the actual server that hosts that site. DNS (the Domain Name System) is the directory that translates human-readable names into the server addresses your computer actually uses. Think of it like a phone book: the website name is the person's name, and the DNS server looks up the number.

Normally, your internet provider runs the DNS servers your device uses. This means your internet provider can see every site you visit, even if they can't read the content. When you use a VPN, your DNS requests should go through the VPN's own servers instead, keeping them hidden from your internet provider.

What a DNS leak is

A DNS leak happens when your device sends DNS requests outside the VPN, directly to your internet provider's servers, even though your other traffic is going through the VPN. From the outside, your IP address looks like it belongs to the VPN server, but your DNS requests are coming from your home location.

Some streaming services check both your IP address and your DNS requests. If your IP says you're in the Netherlands but your DNS requests are coming from a Virgin Media server in Birmingham, the service can tell something is off and block you.

A DNS leak also affects your privacy more broadly, since your internet provider can still see which sites you're visiting even with the VPN running.

How to test for a DNS leak

The test takes about 30 seconds. With your VPN connected:

Go to ipleak.net, a free DNS leak test tool.
Run the extended test.
Look at the results. The only DNS servers listed should belong to your VPN provider. Their name and location should match your VPN, not your home internet provider.

If the results show your home internet provider (Virgin Media, BT, Sky, or another provider) alongside or instead of your VPN, you have a DNS leak.

You can also use our IP address checker to confirm your VPN is masking your IP correctly. If it shows your home country rather than your VPN's location, the VPN connection itself may not be working properly.

How to fix a DNS leak

For most people, it's a single toggle inside the VPN app:

Enable DNS leak protection. In NordVPN, look in Settings for a DNS leak protection option. In ExpressVPN, DNS protection is handled automatically when you connect and there's nothing to change. In PureVPN, check under Settings for an Internet Security or Privacy section. Turn it on, reconnect your VPN, and run the leak test again.

Most DNS leaks are fixed with a single setting. Enable DNS leak protection in your VPN app, reconnect, and run the test again.

If your VPN doesn't have a leak protection setting, or if enabling it doesn't resolve the leak, you can manually set your DNS servers. This is more technical and most people won't need it, but it works:

On Windows: go to Network & Internet Settings and look for DNS server settings in your network adapter properties. The exact path varies depending on your Windows version. Enter DNS server addresses from your VPN provider's support documentation.
On macOS: System Settings > Network > select your connection > Details > DNS. Add the servers there.
On iOS/Android: your VPN app should handle this automatically. If you're still leaking on mobile, reinstall the VPN app and make sure it has the permissions it needs to modify your network settings.

What about DNS over HTTPS?

Browsers have their own DNS option called DNS over HTTPS (DoH), which encrypts DNS requests at the browser level. Chrome and Firefox both support it. It's a useful privacy layer, but it's separate from your VPN's DNS leak protection and doesn't replace it. If your VPN is leaking DNS, enabling DoH in your browser won't fix streaming issues, because streaming apps don't go through the browser's DNS settings. Fix the VPN leak first.

IPv6 leaks: worth checking at the same time

Most leak test tools also check for IPv6 leaks. IPv6 is the newer version of the internet address system, and some VPNs that handle standard IPv4 traffic correctly don't always cover IPv6. If the test shows an IPv6 address belonging to your internet provider, look for an IPv6 leak protection setting in your VPN app. Most modern VPNs include this. If yours doesn't, you can disable IPv6 on your device entirely through your network settings on both Windows and macOS.