Skip to content
Tunnexa
Get Tunnexa

DNS leak protection, on from the first tap

DNS leak protection keeps every lookup your phone makes inside the VPN tunnel, so the Wi-Fi or mobile network you're on can't see the names of the sites and apps you use. In Tunnexa it's on by default for everyone, including guests who tap Skip and never make an account.

Download Free Check for a DNS Leak
  • On by default
  • Free for guests too
  • Every protocol
Lookup trace · example maps.example.com DNS leak protection
Your network's resolver Never asked while you're connected. Skipped
Inside the encrypted tunnel From the server onward
The problem

A DNS leak, in plain words

Every app looks up a name before it connects. That lookup is DNS, and it can travel on its own path.

So what is a DNS leak? It's when those lookups go around the VPN to your network's own resolver, usually your internet provider's. Your traffic is still encrypted, but the list of names isn't. The café Wi-Fi or your carrier can read every site you visit.

Protected

Lookups inside the tunnel

The network can see

Scrambled data going to one server. No site names.

Leaking

Lookups around the tunnel

The network can see
  • bank.example.com
  • clinic.example.org
  • jobs.example.net
What Tunnexa does

DNS protection in the VPN, switched on for you

01

Lookups stay in the tunnel

Every connection gets resolvers reached through the tunnel, so your phone never asks the network's own resolver while you're connected.

02

IPv6 can't slip around

Phones often use IPv6 alongside IPv4. Tunnexa routes it into the tunnel or blocks it while you're connected, so nothing goes around.

03

On for everyone

It's on by default for guests and free accounts alike. No sign-in, no setup.

04

Whichever protocol you pick

It covers WireGuard, OpenVPN, AmneziaWG and Stealth, including when Recommended chooses for you.

Find it in Settings

Open Settings and look under Privacy & Security. DNS leak protection is the first switch, and it starts on. If you turn it off, Tunnexa uses each server’s own DNS settings exactly as they come. Changing it while you’re connected reconnects the tunnel to apply it.

Guest · includedFree account · included

Test it yourself

How to check for a DNS leak on Android

  1. 01

    Run a test without the VPN

    In your phone's browser, search for "DNS leak test" and run the extended test on any well-known test site. Note the names in the results: that's your provider.

  2. 02

    Connect Tunnexa

    Pick a server, tap connect and wait for the ring to turn green.

  3. 03

    Run the same test again

    The list should now show resolvers on the VPN's side. Your provider's name shouldn't appear.

  4. 04

    Still seeing your provider?

    Check that DNS leak protection is on in Settings, reconnect and test again. If it stays, email support@tunnexa.com with your phone model and protocol.

Know the limits

What DNS leak protection won't do

It closes one specific gap, very well. Here is what sits outside it.

Hide you from the sites you visit

It stops your network reading your lookups. Sites still see a visitor, from the server's IP address. A VPN isn't anonymity. Here is what a VPN does and doesn't do.

Work while you're disconnected

Off the VPN, your phone uses the network's resolver like any other phone. On public Wi-Fi, connect first.

Block ads or harmful sites

That's a different job. Ad & Tracker Shield blocks known ad, tracker and harmful domains at the lookup, with a free account.

And we don't keep your lookups. DNS queries are on the list of things our strict no-logs policy says we never store.

FAQ

DNS leak questions

Still unsure? Write to us at support@tunnexa.com.

What is a DNS leak?

A DNS leak is when your phone's lookups for site names go around the VPN to your network's own resolver. Your traffic stays encrypted, but the network can see which sites you visit.

How do I know if my VPN is leaking DNS?

Run a DNS leak test with the VPN off, then on. If your internet provider's resolvers still show up while the VPN is connected, your lookups are leaking.

Can DNS leaks happen on Android?

Yes. Two common causes are a VPN connection that doesn't set its own resolvers, and IPv6 lookups going around a tunnel that only carries IPv4. Tunnexa's DNS leak protection closes both.

Is DNS leak protection free in Tunnexa?

Yes, for everyone. It's on by default for guests and free accounts, with no sign-in needed.

Does Tunnexa log my DNS queries?

No. DNS queries are among the things our strict no-logs policy says we never store.