What DNS does
DNS works like a phone book for the internet. You type a name like example.com, and a DNS server replies with the IP address to connect to.
Each lookup reveals which site you are about to open. By default, they go to your internet provider or to whatever DNS server the Wi-Fi network assigns.
How SoVPN handles it
Once you connect, SoVPN points your device to our DNS servers and sends every lookup through the tunnel. Lookups that try to go out another way are blocked.
Our DNS servers follow the same no-logs policy and do not record queries. Protection is on by default on every plan, so there is nothing to set up.
How leaks happen
A DNS leak means your traffic goes through the VPN but some lookups still reach your provider outside it. The provider cannot read the pages, but it can list the sites you looked up.
This often comes from a DNS server fixed in the system settings, from IPv6 settings, or from a network change in the middle of a session.
Testing it
Connect to SoVPN and open a DNS leak test site. The DNS servers in the result should be SoVPN's, not your provider's.
If your provider shows up, reconnect and test again. If it is still there, your browser's secure DNS may be set to a fixed provider and sending lookups on its own. Turn that off, or contact us from the Support tab in the dashboard.
- Connect to a SoVPN server
- Open a DNS leak test site in the browser
- Check that the listed DNS servers belong to SoVPN